$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e36342e302f31392d3234203d3e203137343239.roa File: 35382e33302e36342e302f31392d3234203d3e203137343239.roa (raw, json) Hash identifier: SSTbDUUiLlSEz4sG5AhQJPq0VtLfJe9z94HS+5FWwMQ= Subject key identifier: A0:F8:F7:A3:A1:2D:77:46:03:CD:57:F4:B9:25:CA:C9:5C:98:34:FA Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 1CBC1A6E02A18A6BD81529D681B5DA1A652DE59F Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e36342e302f31392d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:56 +0000 ROA not before: Mon 13 Apr 2026 03:22:56 +0000 ROA not after: Mon 12 Apr 2027 03:27:56 +0000 asID: 17429 IP address blocks: 58.30.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bc:1a:6e:02:a1:8a:6b:d8:15:29:d6:81:b5:da:1a:65:2d:e5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:56 2026 GMT Not After : Apr 12 03:27:56 2027 GMT Subject: CN=A0F8F7A3A12D774603CD57F4B925CAC95C9834FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:72:b4:de:f0:bf:f8:54:06:6a:5f:ee:94: ce:0f:c7:32:f1:4f:70:b8:ec:04:ee:f9:81:80:62: 0b:17:ae:b1:5c:dd:97:dd:4d:b5:c6:80:23:c0:64: 7c:f7:0a:70:2c:64:8e:78:1d:50:55:95:6b:89:4c: 77:0e:9a:4c:b1:57:d6:c3:e9:e2:09:15:12:0c:57: c7:d8:ad:ac:57:e7:3e:ed:f9:8f:dc:b9:fb:aa:69: 00:1a:bf:b0:6b:cc:32:d7:a9:2e:41:64:76:8e:f1: d2:59:a3:11:e2:76:d3:f8:7d:0e:ed:54:c9:36:98: ea:cf:14:8d:0d:f7:0f:89:11:e0:a7:2e:3c:1f:d4: eb:fb:05:8d:05:23:48:a3:9a:8b:c9:78:0d:39:0d: d0:99:af:d3:4b:0d:5c:6e:4a:7f:b0:57:b2:73:16: ff:c7:72:e6:8e:f9:d2:d9:00:19:ca:52:b7:f1:f4: 72:0a:01:1c:7a:70:d8:eb:40:f7:c8:dc:95:ff:a1: 29:d6:57:2a:a2:89:43:49:e2:02:4b:c0:23:c2:38: f6:6b:15:b4:83:38:c4:17:61:09:03:77:d3:bf:63: b4:01:fb:4c:d1:d4:87:62:1a:db:d0:b9:7a:2f:06: ef:ce:ce:a8:aa:ad:dd:18:3e:2e:dd:29:96:a2:52: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:F7:A3:A1:2D:77:46:03:CD:57:F4:B9:25:CA:C9:5C:98:34:FA X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e36342e302f31392d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.30.64.0/19 Signature Algorithm: sha256WithRSAEncryption a2:ce:d6:8a:b2:ff:72:61:fe:5f:ff:21:3e:49:a7:d8:ef:e9: 9d:8d:2e:07:b1:42:66:67:1f:db:ba:c3:33:2a:7c:2e:19:44: 86:71:cb:c8:c6:ce:8c:a1:97:72:6d:c7:a2:90:4c:f1:ca:8b: 15:65:f4:b2:3c:6d:48:bf:a9:52:58:05:8b:9e:4e:eb:8e:20: 70:a0:7e:fa:2c:2c:63:fc:9b:34:77:45:ba:40:b1:6e:17:c7: 94:f4:82:4e:ff:2c:e6:ee:17:18:4a:e9:7d:d1:64:97:57:35: 21:de:31:cb:22:b5:85:50:d5:a5:f6:07:17:51:07:80:d3:9e: cf:9b:41:93:b9:74:e5:fe:e6:f7:8f:c9:fd:e2:11:1f:82:76: d2:ed:3d:7e:f2:dc:fe:9f:e0:9e:99:8d:b5:03:cb:45:81:a0: cc:8a:4f:6e:d3:5e:35:cd:b1:62:44:4a:c0:ff:7c:41:73:87: 54:ad:79:2f:2c:bc:f9:81:5b:6e:ac:03:aa:ff:58:d0:62:7b: 45:ce:7e:82:84:56:e8:11:dc:09:30:2c:ac:2f:92:ca:8f:c8: 2a:3b:a0:8a:64:c9:03:4e:e4:0c:a1:58:19:86:68:5d:74:88: da:26:13:89:d1:c7:52:1a:63:58:75:5e:a7:ce:cb:f1:1f:d9: d2:b7:d9:c7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUHLwabgKhimvYFSnWgbXaGmUt5Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTZaFw0yNzA0MTIwMzI3NTZaMDMxMTAvBgNV BAMTKEEwRjhGN0EzQTEyRDc3NDYwM0NENTdGNEI5MjVDQUM5NUM5ODM0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCex3K03vC/+FQGal/ulM4PxzLx T3C47ATu+YGAYgsXrrFc3ZfdTbXGgCPAZHz3CnAsZI54HVBVlWuJTHcOmkyxV9bD 6eIJFRIMV8fYraxX5z7t+Y/cufuqaQAav7BrzDLXqS5BZHaO8dJZoxHidtP4fQ7t VMk2mOrPFI0N9w+JEeCnLjwf1Ov7BY0FI0ijmovJeA05DdCZr9NLDVxuSn+wV7Jz Fv/HcuaO+dLZABnKUrfx9HIKARx6cNjrQPfI3JX/oSnWVyqiiUNJ4gJLwCPCOPZr FbSDOMQXYQkDd9O/Y7QB+0zR1IdiGtvQuXovBu/Ozqiqrd0YPi7dKZaiUhQHAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUoPj3o6Etd0YDzVf0uSXKyVyYNPowHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMDJl MzYzNDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAU6HkAwDQYJKoZIhvcNAQELBQADggEBAKLO1oqy/3Jh/l//IT5Jp9jv6Z2NLgex QmZnH9u6wzMqfC4ZRIZxy8jGzoyhl3Jtx6KQTPHKixVl9LI8bUi/qVJYBYueTuuO IHCgfvosLGP8mzR3RbpAsW4Xx5T0gk7/LObuFxhK6X3RZJdXNSHeMcsitYVQ1aX2 BxdRB4DTns+bQZO5dOX+5vePyf3iER+CdtLtPX7y3P6f4J6ZjbUDy0WBoMyKT27T XjXNsWJESsD/fEFzh1SteS8svPmBW26sA6r/WNBie0XOfoKEVugR3AkwLKwvksqP yCo7oIpkyQNO5AyhWBmGaF10iNomE4nRx1IaY1h1XqfOy/Ef2dK32cc= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:23 2026 by rpki-client