$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e39362e302f31392d3234203d3e203137343239.roa File: 35382e33302e39362e302f31392d3234203d3e203137343239.roa (raw, json) Hash identifier: VUDLYn3WKz8YwZJdzyRRSy3ntxtZ0cTYDrftfsGdsow= Subject key identifier: 4A:78:C1:6D:58:4F:C2:55:28:42:B4:2C:81:E5:36:53:BD:A0:8E:ED Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 01BB3569994DA10CEEC4F19F070CB0F9500A4036 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e39362e302f31392d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:56 +0000 ROA not before: Mon 13 Apr 2026 03:22:56 +0000 ROA not after: Mon 12 Apr 2027 03:27:56 +0000 asID: 17429 IP address blocks: 58.30.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bb:35:69:99:4d:a1:0c:ee:c4:f1:9f:07:0c:b0:f9:50:0a:40:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:56 2026 GMT Not After : Apr 12 03:27:56 2027 GMT Subject: CN=4A78C16D584FC2552842B42C81E53653BDA08EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:50:8f:43:da:bb:39:74:be:d0:fc:28:f1: 9f:ea:66:35:62:50:b2:f5:2c:24:39:04:9e:c2:0c: 17:77:f0:0f:a9:e6:05:1b:aa:98:41:d7:b0:f3:b0: 10:5f:a6:94:68:a6:5d:97:15:03:f5:f7:d4:01:24: 37:fc:72:78:75:6b:80:0d:31:dc:93:25:d3:f9:bb: 1a:da:7b:6f:eb:6b:21:f6:00:0f:b3:69:ce:0e:d7: 60:c1:f6:f6:b1:03:8f:5a:f0:8c:34:94:a9:d5:15: 26:7d:d6:54:92:a5:78:16:c2:1b:b9:06:5a:96:27: e4:68:9b:2e:4f:3e:9e:d1:8c:a1:9a:e2:66:17:a2: 61:50:e5:d8:31:d8:c5:41:fa:ef:82:a4:5c:18:e9: 58:8b:05:8c:a1:d6:62:01:54:07:6a:d9:9b:0c:83: 2e:4f:e2:5f:88:13:0e:47:d7:f4:b1:d6:e7:ad:eb: 40:0c:e2:45:13:71:11:ef:b7:16:4c:e4:f9:0b:f5: ea:57:dc:f2:5f:87:9c:2a:05:f7:02:b1:3d:77:13: 53:32:cb:ed:9d:d9:8e:68:1a:9a:22:50:e3:2f:b7: 5a:18:ec:7a:7a:f0:ad:d3:48:a2:be:4b:18:7a:e4: 5b:1f:fe:94:23:f4:d4:fe:12:a8:21:46:b1:1a:fd: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:78:C1:6D:58:4F:C2:55:28:42:B4:2C:81:E5:36:53:BD:A0:8E:ED X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33302e39362e302f31392d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.30.96.0/19 Signature Algorithm: sha256WithRSAEncryption 61:10:cd:42:62:c1:a8:fa:f7:b5:5e:b5:b8:37:ca:6c:ef:f5: 83:72:f5:94:35:5b:12:69:fe:5b:ea:aa:a1:77:71:02:e9:ec: 5a:4d:ac:5f:08:b4:eb:e1:13:ee:0c:70:6b:88:59:8a:49:d2: ae:47:ae:da:5c:31:b7:62:5c:c2:ca:e0:a7:e8:13:f1:b2:ba: c7:57:a7:58:07:d0:82:b5:64:19:cf:d0:e6:03:f5:dc:93:16: 60:2e:df:b9:16:b7:74:bb:02:7e:9d:06:8e:23:38:54:af:b9: 54:cb:d1:d4:91:98:80:89:83:3b:51:ea:57:7f:d5:67:ee:06: 34:e3:c8:1e:8d:fc:18:c5:19:f5:8a:8d:cd:d1:27:a9:0d:64: df:81:10:b1:03:c1:5e:d3:f5:18:51:85:3c:b9:d7:36:e6:88: 66:53:ee:17:48:a9:cf:76:14:2f:78:b6:02:77:40:15:18:8d: e8:2b:e5:6a:35:29:c8:be:77:6f:81:87:36:5b:a9:2e:f4:41: a2:c5:cf:ff:ae:07:38:ba:dc:3f:df:96:15:13:18:e3:fd:c4: 03:c0:e7:c8:c3:c3:65:c2:9c:da:8b:d6:cd:85:c5:0b:6f:6d: e1:04:f6:42:ea:a4:d0:0a:0c:6f:34:ac:8f:74:a6:3a:59:4a: 22:82:86:5b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUAbs1aZlNoQzuxPGfBwyw+VAKQDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTZaFw0yNzA0MTIwMzI3NTZaMDMxMTAvBgNV BAMTKDRBNzhDMTZENTg0RkMyNTUyODQyQjQyQzgxRTUzNjUzQkRBMDhFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqlCPQ9q7OXS+0Pwo8Z/qZjVi ULL1LCQ5BJ7CDBd38A+p5gUbqphB17DzsBBfppRopl2XFQP199QBJDf8cnh1a4AN MdyTJdP5uxrae2/rayH2AA+zac4O12DB9vaxA49a8Iw0lKnVFSZ91lSSpXgWwhu5 BlqWJ+Romy5PPp7RjKGa4mYXomFQ5dgx2MVB+u+CpFwY6ViLBYyh1mIBVAdq2ZsM gy5P4l+IEw5H1/Sx1uet60AM4kUTcRHvtxZM5PkL9epX3PJfh5wqBfcCsT13E1My y+2d2Y5oGpoiUOMvt1oY7Hp68K3TSKK+Sxh65Fsf/pQj9NT+EqghRrEa/f3PAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUSnjBbVhPwlUoQrQsgeU2U72gju0wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMDJl MzkzNjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAU6HmAwDQYJKoZIhvcNAQELBQADggEBAGEQzUJiwaj697Vetbg3ymzv9YNy9ZQ1 WxJp/lvqqqF3cQLp7FpNrF8ItOvhE+4McGuIWYpJ0q5HrtpcMbdiXMLK4KfoE/Gy usdXp1gH0IK1ZBnP0OYD9dyTFmAu37kWt3S7An6dBo4jOFSvuVTL0dSRmICJgztR 6ld/1WfuBjTjyB6N/BjFGfWKjc3RJ6kNZN+BELEDwV7T9RhRhTy51zbmiGZT7hdI qc92FC94tgJ3QBUYjegr5Wo1Kci+d2+BhzZbqS70QaLFz/+uBzi63D/flhUTGOP9 xAPA58jDw2XCnNqL1s2FxQtvbeEE9kLqpNAKDG80rI90pjpZSiKChls= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:20 2026 by rpki-client