$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e302e302f31362d3234203d3e203137343239.roa File: 35382e33302e302e302f31362d3234203d3e203137343239.roa (raw, json) Hash identifier: JzWlWSijR3bnHBc3BCK20KzfzuX0SvSoeu+S/FAkTnY= Subject key identifier: 78:64:5E:A8:EB:A7:8C:3E:B8:51:98:EF:E6:E1:B8:F0:FF:57:69:BE Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 1E127F066E0A5DAFF5677DE85E88C7EEA15624DF Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e302e302f31362d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:57 +0000 ROA not before: Mon 13 Apr 2026 03:22:57 +0000 ROA not after: Mon 12 Apr 2027 03:27:57 +0000 asID: 17429 IP address blocks: 58.30.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:12:7f:06:6e:0a:5d:af:f5:67:7d:e8:5e:88:c7:ee:a1:56:24:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:57 2026 GMT Not After : Apr 12 03:27:57 2027 GMT Subject: CN=78645EA8EBA78C3EB85198EFE6E1B8F0FF5769BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:ae:a5:fb:77:9c:22:be:f9:56:d5:5f:4d: bd:db:fe:3a:0e:89:23:2f:19:b9:4e:2c:d9:ab:08: 18:2d:d8:dc:57:4e:35:85:3a:e8:66:b1:95:ce:49: 63:92:4e:9d:a7:bd:2b:1e:ad:a2:38:1f:57:fd:b5: 8a:59:a7:05:e0:70:d7:9e:3e:f6:49:40:97:00:49: 54:bb:90:be:7f:18:95:80:fb:32:4c:42:67:56:e3: 4e:a8:28:48:2c:22:1d:08:78:d3:91:ca:9c:4b:8e: fd:85:7b:0e:26:36:85:7a:26:8b:a5:16:12:e0:44: e1:24:45:59:f1:cc:3a:29:f3:f9:5e:87:e5:ca:19: 21:27:27:62:96:fd:bf:fe:c8:69:89:02:86:ae:14: 54:e5:1a:eb:82:56:39:1f:c6:8c:47:38:09:e3:32: 7c:ee:4d:9e:f4:7e:ef:cf:ff:2a:30:67:19:28:5a: 9a:ec:12:50:88:43:11:21:fc:77:fa:48:67:9c:01: ee:1d:7c:dc:ab:a9:a6:d4:da:8a:42:ce:0b:98:b9: a0:28:34:71:e5:07:f0:e9:3d:47:63:51:ef:bf:fc: f1:a6:64:3b:bd:6f:fd:61:f0:1d:0c:e6:5d:a2:c8: d1:ec:2f:86:23:ee:f3:4a:04:15:72:dd:fe:e0:98: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:5E:A8:EB:A7:8C:3E:B8:51:98:EF:E6:E1:B8:F0:FF:57:69:BE X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e302e302f31362d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:13:2a:49:54:e2:98:cd:5c:e0:58:46:51:f8:63:c5:f2:66: 9e:c3:0b:3b:49:40:a4:db:dc:16:62:8d:ab:78:2b:d0:11:ee: f4:b2:6b:8b:55:e4:77:e4:0e:0d:52:e8:78:60:70:5f:f2:f7: 11:e8:3d:80:72:ef:a0:07:15:fe:b9:c9:03:1b:9d:75:8c:55: 97:f0:f9:a8:b1:8e:d9:92:a0:21:14:2f:1a:44:24:be:a8:db: af:00:9a:88:97:4c:99:28:97:f2:25:86:6d:f6:2b:3d:b8:a7: 7a:29:a6:06:5e:26:7c:06:90:7b:54:2b:9a:e0:d4:51:3d:b0: bb:88:36:51:0c:6a:ce:98:d3:a2:f3:d0:5c:c9:60:5c:41:e2: df:c6:20:5d:98:b4:a2:aa:0f:47:9d:7a:52:df:dd:66:d6:a5: be:aa:79:48:3a:2b:83:8c:70:ac:0d:e1:a0:b0:ea:27:1a:a3: c9:aa:1e:22:fd:cf:14:85:92:28:d6:0a:8b:e6:45:33:94:28: 42:92:a0:bc:82:2c:50:79:16:ca:ab:d3:47:2c:9c:64:7f:52: 65:2d:09:71:fc:48:a6:f6:1e:c0:d5:5e:85:b3:1f:1c:4d:08: 7e:fa:91:f9:ce:ac:b3:2a:eb:b4:5a:9f:4c:bf:1a:c0:68:e2: a4:6c:ba:f7 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUHhJ/Bm4KXa/1Z33oXojH7qFWJN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTdaFw0yNzA0MTIwMzI3NTdaMDMxMTAvBgNV BAMTKDc4NjQ1RUE4RUJBNzhDM0VCODUxOThFRkU2RTFCOEYwRkY1NzY5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBi66l+3ecIr75VtVfTb3b/joO iSMvGblOLNmrCBgt2NxXTjWFOuhmsZXOSWOSTp2nvSseraI4H1f9tYpZpwXgcNee PvZJQJcASVS7kL5/GJWA+zJMQmdW406oKEgsIh0IeNORypxLjv2Few4mNoV6Joul FhLgROEkRVnxzDop8/leh+XKGSEnJ2KW/b/+yGmJAoauFFTlGuuCVjkfxoxHOAnj MnzuTZ70fu/P/yowZxkoWprsElCIQxEh/Hf6SGecAe4dfNyrqabU2opCzguYuaAo NHHlB/DpPUdjUe+//PGmZDu9b/1h8B0M5l2iyNHsL4Yj7vNKBBVy3f7gmBrZAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUeGReqOunjD64UZjv5uG48P9Xab4wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMDJl MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMTM3MzQzMjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA Oh4wDQYJKoZIhvcNAQELBQADggEBAGITKklU4pjNXOBYRlH4Y8XyZp7DCztJQKTb 3BZijat4K9AR7vSya4tV5HfkDg1S6HhgcF/y9xHoPYBy76AHFf65yQMbnXWMVZfw +aixjtmSoCEULxpEJL6o268AmoiXTJkol/Ilhm32Kz24p3oppgZeJnwGkHtUK5rg 1FE9sLuINlEMas6Y06Lz0FzJYFxB4t/GIF2YtKKqD0edelLf3WbWpb6qeUg6K4OM cKwN4aCw6icao8mqHiL9zxSFkijWCovmRTOUKEKSoLyCLFB5Fsqr00csnGR/UmUt CXH8SKb2HsDVXoWzHxxNCH76kfnOrLMq67Ran0y/GsBo4qRsuvc= -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:24 2026 by rpki-client