$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e342e302f32342d3234203d3e203233373731.roa File: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (raw, json) Hash identifier: dTbWhYqWvozgKM0jMO32uy9zqUmnTW5W+hJzW5pKhmI= Subject key identifier: A5:0F:10:0F:C7:7A:BC:6D:56:0D:C4:10:BB:FE:79:75:98:96:56:E2 Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 3DF620BDF66F7BD1003D1320557208C623ED1148 Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e342e302f32342d3234203d3e203233373731.roa Signing time: Mon 20 Apr 2026 02:22:12 +0000 ROA not before: Mon 20 Apr 2026 02:17:12 +0000 ROA not after: Mon 19 Apr 2027 02:22:12 +0000 asID: 23771 IP address blocks: 59.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f6:20:bd:f6:6f:7b:d1:00:3d:13:20:55:72:08:c6:23:ed:11:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Apr 20 02:17:12 2026 GMT Not After : Apr 19 02:22:12 2027 GMT Subject: CN=A50F100FC77ABC6D560DC410BBFE7975989656E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:84:02:65:7c:16:f4:9e:b3:15:85:d4:82: c2:34:57:ad:5b:7e:b1:14:df:4d:64:bd:96:60:51: 8c:5f:48:e4:e8:a3:52:64:77:7e:1f:50:38:eb:59: e2:71:fa:2f:a7:75:29:6b:50:ca:86:60:f7:1a:7b: 4a:cb:a2:0b:50:0e:5a:9f:08:1e:39:62:cd:ab:9a: 5d:ec:79:e4:fe:c5:59:7b:ae:e0:e3:64:4b:55:3d: 49:9a:80:16:ca:0c:eb:d3:41:8e:64:e9:de:b2:e4: ba:b4:f4:08:b5:64:a3:48:5c:a3:13:2f:89:6d:5d: e2:71:90:44:6d:c0:22:eb:c5:ac:82:31:13:68:21: 7b:f0:95:59:62:b5:c4:a5:0a:dd:97:06:9f:79:ad: 72:be:6d:94:e6:9b:1e:35:57:0c:61:bb:b5:98:5a: f7:c5:00:78:67:b2:4f:b2:6e:de:0d:30:4b:cb:86: 16:9d:dc:51:97:4a:13:60:cf:d8:c0:bf:fe:e4:16: c3:16:be:89:b6:79:43:f3:e8:2b:4f:c9:79:b1:57: cd:33:c7:2f:f7:e1:c7:c9:a7:1b:ed:04:68:d5:5b: 7a:63:d8:d9:c9:ba:f3:ce:c0:83:82:4c:71:08:e1: 5f:67:45:e9:1f:43:ed:cd:d2:79:da:b7:f2:bd:ce: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:10:0F:C7:7A:BC:6D:56:0D:C4:10:BB:FE:79:75:98:96:56:E2 X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/35392e3135332e342e302f32342d3234203d3e203233373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.4.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:20:be:e7:9c:54:0d:c9:b1:38:28:aa:28:8d:78:68:03:3b: 75:d7:e8:e9:e4:17:dd:6c:9c:47:78:ff:3d:3e:fc:3c:cf:9f: b4:43:19:8c:61:d3:19:ee:f8:0d:06:35:25:9d:92:da:6b:e8: c6:fb:d0:f4:26:ce:bd:10:62:a9:d8:0d:f6:85:6a:a5:bf:6c: f1:3c:71:a1:18:87:f3:63:36:71:50:88:b7:a9:39:d6:22:d4: b7:58:53:9c:7f:5c:f0:06:2c:7c:75:95:b8:c4:fa:29:e1:9c: 53:d5:4b:58:03:27:3a:d5:2f:b6:d2:2a:94:60:a1:3a:80:00: 86:10:97:62:c5:a4:bb:49:bb:c5:26:b0:20:cc:ea:86:f6:06: 9a:12:73:5a:16:79:6f:97:01:1b:fe:72:2a:4d:24:d9:5d:ab: 3f:95:2d:c1:88:51:10:4f:72:54:9b:bb:3d:09:15:77:84:0a: ea:75:0c:34:70:98:b4:59:2c:25:d2:10:2e:b5:3d:63:e0:6d: 3d:6a:44:98:ff:c2:69:8a:be:62:35:bb:a1:72:33:48:d7:eb: 4e:f5:9d:19:70:f8:3f:27:6d:dd:72:01:28:50:29:eb:11:17: bc:9c:c5:b9:dc:3d:d4:e0:33:5e:77:0f:2b:f0:37:af:de:35: 6e:7c:91:92 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUPfYgvfZve9EAPRMgVXIIxiPtEUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjA0MjAwMjE3MTJaFw0yNzA0MTkwMjIyMTJaMDMxMTAvBgNV BAMTKEE1MEYxMDBGQzc3QUJDNkQ1NjBEQzQxMEJCRkU3OTc1OTg5NjU2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAIQCZXwW9J6zFYXUgsI0V61b frEU301kvZZgUYxfSOToo1Jkd34fUDjrWeJx+i+ndSlrUMqGYPcae0rLogtQDlqf CB45Ys2rml3seeT+xVl7ruDjZEtVPUmagBbKDOvTQY5k6d6y5Lq09Ai1ZKNIXKMT L4ltXeJxkERtwCLrxayCMRNoIXvwlVlitcSlCt2XBp95rXK+bZTmmx41Vwxhu7WY WvfFAHhnsk+ybt4NMEvLhhad3FGXShNgz9jAv/7kFsMWvom2eUPz6CtPyXmxV80z xy/34cfJpxvtBGjVW3pj2NnJuvPOwIOCTHEI4V9nRekfQ+3N0nnat/K9znEnAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUpQ8QD8d6vG1WDcQQu/55dZiWVuIwHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2LzAvMzUzOTJlMzEzNTMz MmUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzNzM3MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA7mQQwDQYJKoZIhvcNAQELBQADggEBAJ0gvuecVA3JsTgoqiiNeGgDO3XX6Onk F91snEd4/z0+/DzPn7RDGYxh0xnu+A0GNSWdktpr6Mb70PQmzr0QYqnYDfaFaqW/ bPE8caEYh/NjNnFQiLepOdYi1LdYU5x/XPAGLHx1lbjE+inhnFPVS1gDJzrVL7bS KpRgoTqAAIYQl2LFpLtJu8UmsCDM6ob2BpoSc1oWeW+XARv+cipNJNldqz+VLcGI URBPclSbuz0JFXeECup1DDRwmLRZLCXSEC61PWPgbT1qRJj/wmmKvmI1u6FyM0jX 6071nRlw+D8nbd1yAShQKesRF7ycxbncPdTgM153DyvwN6/eNW58kZI= -----END CERTIFICATE-----Generated at Wed May 13 19:54:28 2026 by rpki-client