$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e3139322e302f31382d3234203d3e203137343239.roa File: 35382e33302e3139322e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: yvzvzW5qsEo0llprVxlfSnNbMV3iQC2rxC/qJ7Fclx0= Subject key identifier: 09:48:03:79:87:F6:5F:11:2A:09:25:58:F5:DB:FB:7E:63:3C:05:78 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: CFC540880DBBF1652E9045B6E1603BDC947475 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e3139322e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:57 +0000 ROA not before: Mon 13 Apr 2026 03:22:57 +0000 ROA not after: Mon 12 Apr 2027 03:27:57 +0000 asID: 17429 IP address blocks: 58.30.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cf:c5:40:88:0d:bb:f1:65:2e:90:45:b6:e1:60:3b:dc:94:74:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:57 2026 GMT Not After : Apr 12 03:27:57 2027 GMT Subject: CN=0948037987F65F112A092558F5DBFB7E633C0578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:8b:67:30:3d:f1:fe:2e:41:f1:51:d2:e5: a9:cb:76:f7:9a:7c:62:30:46:73:6a:ab:d9:22:59: 4c:11:8b:0a:e7:df:e7:cc:cc:73:12:24:fb:dd:0b: 81:e6:b7:cd:6a:c0:33:a7:d3:90:68:d3:e2:2a:e0: b0:92:ad:a0:a0:ae:23:b6:5e:77:4b:50:08:25:06: 2d:3e:24:08:ff:c8:7c:61:43:18:9d:6d:54:e5:6d: 0c:20:cf:ce:22:81:02:45:23:42:6a:de:aa:57:e4: 3b:7d:22:1f:f2:79:8b:53:2c:7d:e0:b8:df:c2:a7: aa:a7:5b:43:d1:7a:91:e5:4c:a8:42:d1:1e:25:fd: 0b:d0:d6:78:bc:cc:c3:18:07:da:68:90:00:7a:b5: 20:65:aa:ef:ef:88:cf:16:86:6f:5a:3e:d8:3c:ac: 1b:44:bd:24:35:bc:8c:8d:b6:15:b5:39:1f:81:00: 5b:ac:52:1b:7e:48:71:60:a0:62:70:f8:02:77:9f: 2c:54:e0:d7:37:d3:cb:81:01:68:b9:93:e1:b3:9f: c4:8a:2c:2c:59:0e:51:ab:4b:d3:95:7d:f2:21:43: 5d:6a:0d:f4:e7:f6:27:49:9e:6e:df:3e:ef:45:46: 8e:ff:3e:12:66:e3:7d:8d:ed:50:90:2d:b6:a7:b7: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:03:79:87:F6:5F:11:2A:09:25:58:F5:DB:FB:7E:63:3C:05:78 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e3139322e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.30.192.0/18 Signature Algorithm: sha256WithRSAEncryption 2f:b3:e4:a1:03:ba:1d:f3:e3:d4:24:5a:28:c0:95:ab:51:65: d5:cc:16:61:31:32:4e:aa:77:c6:6b:d4:d0:bb:cb:75:cd:f8: fe:66:c7:2d:bb:46:63:db:73:0d:c6:d0:12:04:4b:f6:9b:b7: c6:8f:5d:43:c1:fe:b2:2f:07:ca:11:ad:66:f6:3a:57:d5:6a: cc:81:34:71:13:e0:8d:22:fa:ed:3f:d9:c4:df:b4:00:5b:aa: de:fe:9c:89:2b:4f:00:18:68:a6:62:b0:8b:49:25:f2:c8:a0: 9a:3d:72:e3:a6:94:6d:c0:89:c0:ba:5d:b0:34:65:0e:ea:bc: a0:44:cf:a0:f1:b4:19:34:03:85:02:4b:65:7b:d2:31:b1:6f: 20:6a:2e:d4:d0:4e:9c:92:ca:68:f1:b0:45:61:08:3a:1f:d4: 5c:db:f6:06:17:26:e2:77:bf:60:8b:cf:b5:26:67:69:40:bb: fc:de:47:8d:f5:30:44:f5:fb:90:1b:c6:d6:d7:cf:63:90:1b: a0:73:7c:0f:56:8f:cb:cf:d8:f9:16:14:e0:40:b7:3a:f9:d1: 90:5d:11:cb:8f:91:b0:cb:ce:17:1a:c0:30:36:b9:14:d4:78: 75:24:94:c6:41:17:35:74:50:71:22:04:97:5d:7e:57:0f:7a: 9f:d8:8e:6f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUAM/FQIgNu/FlLpBFtuFgO9yUdHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTdaFw0yNzA0MTIwMzI3NTdaMDMxMTAvBgNV BAMTKDA5NDgwMzc5ODdGNjVGMTEyQTA5MjU1OEY1REJGQjdFNjMzQzA1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsYtnMD3x/i5B8VHS5anLdvea fGIwRnNqq9kiWUwRiwrn3+fMzHMSJPvdC4Hmt81qwDOn05Bo0+Iq4LCSraCgriO2 XndLUAglBi0+JAj/yHxhQxidbVTlbQwgz84igQJFI0Jq3qpX5Dt9Ih/yeYtTLH3g uN/Cp6qnW0PRepHlTKhC0R4l/QvQ1ni8zMMYB9pokAB6tSBlqu/viM8Whm9aPtg8 rBtEvSQ1vIyNthW1OR+BAFusUht+SHFgoGJw+AJ3nyxU4Nc308uBAWi5k+Gzn8SK LCxZDlGrS9OVffIhQ11qDfTn9idJnm7fPu9FRo7/PhJm432N7VCQLbant3RtAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUCUgDeYf2XxEqCSVY9dv7fmM8BXgwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMDJl MzEzOTMyMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBjoewDANBgkqhkiG9w0BAQsFAAOCAQEAL7PkoQO6HfPj1CRaKMCVq1Fl1cwW YTEyTqp3xmvU0LvLdc34/mbHLbtGY9tzDcbQEgRL9pu3xo9dQ8H+si8HyhGtZvY6 V9VqzIE0cRPgjSL67T/ZxN+0AFuq3v6ciStPABhopmKwi0kl8sigmj1y46aUbcCJ wLpdsDRlDuq8oETPoPG0GTQDhQJLZXvSMbFvIGou1NBOnJLKaPGwRWEIOh/UXNv2 Bhcm4ne/YIvPtSZnaUC7/N5HjfUwRPX7kBvG1tfPY5AboHN8D1aPy8/Y+RYU4EC3 OvnRkF0Ry4+RsMvOFxrAMDa5FNR4dSSUxkEXNXRQcSIEl11+Vw96n9iObw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:12 2026 by rpki-client