$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/35392e3135332e3131362e302f32322d3232203d3e203633363230.roa File: 35392e3135332e3131362e302f32322d3232203d3e203633363230.roa (raw, json) Hash identifier: 7R0HqxHOl8psiPTmoioP+yiWqxO71oxXvgRWvUwoxqQ= Subject key identifier: 1E:1B:8E:28:9F:8A:73:F7:C3:F6:56:90:89:B2:F3:A4:F6:86:4A:CC Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Certificate serial: 773B2BFD40EDA2AE716C1B6C24CD40EF409B2F88 Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/35392e3135332e3131362e302f32322d3232203d3e203633363230.roa Signing time: Wed 13 May 2026 09:21:03 +0000 ROA not before: Wed 13 May 2026 09:16:03 +0000 ROA not after: Wed 12 May 2027 09:21:03 +0000 asID: 63620 IP address blocks: 59.153.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3b:2b:fd:40:ed:a2:ae:71:6c:1b:6c:24:cd:40:ef:40:9b:2f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Validity Not Before: May 13 09:16:03 2026 GMT Not After : May 12 09:21:03 2027 GMT Subject: CN=1E1B8E289F8A73F7C3F6569089B2F3A4F6864ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:f6:1a:59:7a:fa:80:3e:2c:b9:00:73:fb: 8f:82:c0:eb:65:bc:62:b3:51:46:c6:16:f1:63:41: de:e3:8f:58:40:2a:b6:92:de:13:0b:5a:57:36:3a: d3:ab:ab:c6:7a:8e:6d:4c:3c:1a:9a:e9:10:13:1f: 8b:51:84:4f:4d:a1:1b:10:2b:7a:9f:44:d0:95:7c: 12:85:88:05:f5:0e:09:ef:04:8d:6c:28:0e:f7:3c: e5:07:63:d1:7b:44:a5:19:ed:af:21:18:a3:3c:ce: 8c:df:98:a2:4b:94:a5:1d:32:6f:ef:3b:eb:a1:e3: 6c:60:ff:7e:23:f1:d4:31:13:fd:23:22:ec:ec:78: a3:7e:c3:08:d2:d7:07:75:11:22:4b:5b:38:c7:13: 31:f9:af:a5:92:6a:9d:1e:b0:e2:9c:1c:00:15:de: 36:e3:c9:50:01:bb:8d:fa:32:2d:cb:5c:b5:48:c5: ee:20:53:1a:9f:fe:f3:1a:fb:ba:4c:95:c6:ac:b0: 0c:7c:f5:ff:e0:59:ee:55:27:40:9e:16:01:bd:f4: 40:71:c3:b2:3b:43:fc:8e:2a:2f:4f:39:15:77:b4: f2:b3:b8:9a:13:1b:97:5e:25:34:1f:78:a2:43:0a: 73:64:6d:2e:b1:d8:c1:d7:45:f4:89:06:b8:ee:09: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1B:8E:28:9F:8A:73:F7:C3:F6:56:90:89:B2:F3:A4:F6:86:4A:CC X509v3 Authority Key Identifier: keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/35392e3135332e3131362e302f32322d3232203d3e203633363230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.116.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:2b:39:cf:06:52:da:70:da:4c:75:90:34:69:0c:60:a4:3a: b8:af:16:2b:00:a5:d7:e2:0a:49:23:53:de:4c:a3:a2:00:61: f1:76:e1:37:ea:55:a9:f4:99:4e:fe:f6:cb:58:72:7a:cf:25: a3:08:22:30:90:c5:6d:66:da:40:4e:c3:e7:ba:ba:d7:64:e7: 14:9b:cb:3e:cf:4c:dd:f4:75:69:73:f1:99:2a:45:b6:30:92: 9a:42:d2:3d:9e:73:73:b4:69:46:68:ab:b7:14:dd:ad:09:05: eb:a3:cb:fa:24:61:b3:7f:95:8c:a2:dd:a8:c3:50:1a:ba:e3: aa:b1:88:65:6b:34:aa:fe:47:db:01:fa:29:ea:11:a2:d9:69: 0b:70:12:0f:e1:2a:c3:fd:0b:b4:dd:19:75:c1:10:8d:5a:26: fc:d2:55:19:14:a2:d8:87:31:a0:ec:a0:29:c7:15:40:ed:4d: 1f:8b:54:11:4c:94:0e:18:08:67:e4:1e:8a:a6:96:77:7e:ed: d5:37:69:5c:a4:cd:91:ec:8a:32:f3:7b:4e:07:8b:34:c1:c7: f7:7d:a6:7d:bc:44:c5:a6:b0:ba:89:bc:15:4d:92:cc:2b:79: 5c:ae:4b:47:be:30:12:21:ad:21:d8:4a:d6:31:77:ee:28:48: 2f:8b:13:c9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUdzsr/UDtoq5xbBtsJM1A70CbL4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5 RjczM0YwODAeFw0yNjA1MTMwOTE2MDNaFw0yNzA1MTIwOTIxMDNaMDMxMTAvBgNV BAMTKDFFMUI4RTI4OUY4QTczRjdDM0Y2NTY5MDg5QjJGM0E0RjY4NjRBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNPYaWXr6gD4suQBz+4+CwOtl vGKzUUbGFvFjQd7jj1hAKraS3hMLWlc2OtOrq8Z6jm1MPBqa6RATH4tRhE9NoRsQ K3qfRNCVfBKFiAX1DgnvBI1sKA73POUHY9F7RKUZ7a8hGKM8zozfmKJLlKUdMm/v O+uh42xg/34j8dQxE/0jIuzseKN+wwjS1wd1ESJLWzjHEzH5r6WSap0esOKcHAAV 3jbjyVABu436Mi3LXLVIxe4gUxqf/vMa+7pMlcassAx89f/gWe5VJ0CeFgG99EBx w7I7Q/yOKi9PORV3tPKzuJoTG5deJTQfeKJDCnNkbS6x2MHXRfSJBrjuCeMzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUHhuOKJ+Kc/fD9laQibLzpPaGSswwHwYDVR0j BBgwFoAUwWhmAvV8l723BY218FYj959zPwgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDEwODgxOS8wL0MxNjg2NjAyRjU3Qzk3QkRCNzA1OERCNUYwNTYy M0Y3OUY3MzNGMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNjg3MTA3NjIyMDEwODgxOS8wLzM1MzkyZTMxMzUz MzJlMzEzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzIzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAjuZdDANBgkqhkiG9w0BAQsFAAOCAQEAXys5zwZS2nDaTHWQNGkMYKQ6 uK8WKwCl1+IKSSNT3kyjogBh8XbhN+pVqfSZTv72y1hyes8lowgiMJDFbWbaQE7D 57q612TnFJvLPs9M3fR1aXPxmSpFtjCSmkLSPZ5zc7RpRmirtxTdrQkF66PL+iRh s3+VjKLdqMNQGrrjqrGIZWs0qv5H2wH6KeoRotlpC3ASD+Eqw/0LtN0ZdcEQjVom /NJVGRSi2IcxoOygKccVQO1NH4tUEUyUDhgIZ+QeiqaWd37t1TdpXKTNkeyKMvN7 TgeLNMHH932mfbxExaawuom8FU2SzCt5XK5LR74wEiGtIdhK1jF37ihIL4sTyQ== -----END CERTIFICATE-----Generated at Wed May 13 21:31:36 2026 by rpki-client