$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e302e302f31362d3234203d3e203137343239.roa File: 35382e33312e302e302f31362d3234203d3e203137343239.roa (raw, json) Hash identifier: GGVjmKtzEzj/30xEkBmGKwmDS4d5cxFyt9H3kIZ3Oj4= Subject key identifier: FB:BF:DD:A8:A5:D6:03:BF:DA:E1:D1:36:32:9A:5C:68:77:DC:FB:FD Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 71840F605630F676D58F937D29FDCD94AFAA6C4B Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e302e302f31362d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:57 +0000 ROA not before: Mon 13 Apr 2026 03:22:57 +0000 ROA not after: Mon 12 Apr 2027 03:27:57 +0000 asID: 17429 IP address blocks: 58.31.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:84:0f:60:56:30:f6:76:d5:8f:93:7d:29:fd:cd:94:af:aa:6c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:57 2026 GMT Not After : Apr 12 03:27:57 2027 GMT Subject: CN=FBBFDDA8A5D603BFDAE1D136329A5C6877DCFBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:46:5f:00:81:4d:45:aa:11:57:0a:0f:b5: c4:52:7b:66:e7:a0:b4:75:7b:da:1e:d3:13:df:af: 75:d1:2c:1a:80:a3:f8:5c:71:46:4d:bd:92:4d:be: 27:2b:30:49:92:99:c4:e7:cb:a0:8c:37:99:97:83: 20:0b:49:2b:4b:d8:e8:a0:b8:78:d5:5a:9e:73:91: 73:46:93:65:25:77:ef:04:5e:73:3c:c0:55:fc:48: 7d:2e:03:1a:36:02:57:b4:95:11:fb:57:ad:1e:e8: af:d5:16:85:34:03:ed:6f:b1:a5:bd:02:55:0e:79: bb:b5:63:ce:05:00:da:99:c0:0d:c1:2f:08:63:d1: 2a:32:59:57:c7:ab:63:b6:68:10:e5:77:22:78:65: e8:f1:f1:40:aa:2e:6b:03:c8:24:ce:58:ce:53:c6: 18:56:74:fa:fe:5d:4a:d5:3c:8c:b7:aa:7a:c3:54: af:8d:9c:6d:3d:72:52:16:7a:f2:00:c2:e6:6f:b6: d0:1c:a9:17:af:75:0a:6a:25:f1:19:e5:15:ab:4c: b5:3c:ac:de:37:2a:00:a1:1f:10:80:36:b5:3e:33: e7:95:2e:e6:d9:8e:61:f2:e7:2f:83:90:70:95:50: f6:64:9d:36:39:57:bc:28:40:5e:26:74:5a:38:28: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:DD:A8:A5:D6:03:BF:DA:E1:D1:36:32:9A:5C:68:77:DC:FB:FD X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e302e302f31362d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.31.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:af:39:74:97:f7:eb:cd:19:0a:50:9f:72:ab:d5:3f:33:09: bf:ac:79:50:9a:f5:18:0e:bf:7e:95:d7:9e:ba:38:ce:fe:ab: 14:77:bb:99:a2:f6:28:4f:1b:bf:e7:7d:d5:2b:44:a5:32:ac: 1a:49:c5:33:d1:9d:a4:72:57:8d:73:62:1b:26:1b:bc:94:27: bf:5c:f8:54:ba:b3:5f:f1:a8:37:28:29:a5:94:eb:88:48:3a: 1a:5a:56:d8:97:fa:d2:6c:e5:9e:cc:0f:30:8d:cd:f1:9f:39: e9:1d:b1:ad:43:33:50:4d:21:d8:7f:96:df:99:53:e1:b9:8b: b0:5c:31:c8:f9:ae:3e:da:d3:6a:1d:c6:97:78:a4:ea:aa:af: 25:98:14:57:08:42:77:9a:7d:61:9c:88:3b:09:e1:c5:83:04: d9:3b:0f:19:d3:a1:ed:c3:d9:87:ad:41:6a:4b:2e:c9:7c:a0: e3:9b:d2:dd:41:4a:a3:62:c9:c2:98:81:56:95:84:bc:47:eb: 2e:11:17:3f:e9:04:05:32:28:d9:2e:59:b4:74:88:b2:3e:76: 09:d5:2e:1a:a0:5c:23:04:3c:86:c3:d2:86:73:af:ab:38:91: a4:50:b1:8b:c9:ed:e9:7e:03:46:c4:35:cc:dc:2a:db:0b:16: 6a:a5:79:b0 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUcYQPYFYw9nbVj5N9Kf3NlK+qbEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTdaFw0yNzA0MTIwMzI3NTdaMDMxMTAvBgNV BAMTKEZCQkZEREE4QTVENjAzQkZEQUUxRDEzNjMyOUE1QzY4NzdEQ0ZCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV00ZfAIFNRaoRVwoPtcRSe2bn oLR1e9oe0xPfr3XRLBqAo/hccUZNvZJNvicrMEmSmcTny6CMN5mXgyALSStL2Oig uHjVWp5zkXNGk2Uld+8EXnM8wFX8SH0uAxo2Ale0lRH7V60e6K/VFoU0A+1vsaW9 AlUOebu1Y84FANqZwA3BLwhj0SoyWVfHq2O2aBDldyJ4Zejx8UCqLmsDyCTOWM5T xhhWdPr+XUrVPIy3qnrDVK+NnG09clIWevIAwuZvttAcqRevdQpqJfEZ5RWrTLU8 rN43KgChHxCANrU+M+eVLubZjmHy5y+DkHCVUPZknTY5V7woQF4mdFo4KCGPAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU+7/dqKXWA7/a4dE2MppcaHfc+/0wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMTJl MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMTM3MzQzMjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA Oh8wDQYJKoZIhvcNAQELBQADggEBAGivOXSX9+vNGQpQn3Kr1T8zCb+seVCa9RgO v36V1566OM7+qxR3u5mi9ihPG7/nfdUrRKUyrBpJxTPRnaRyV41zYhsmG7yUJ79c +FS6s1/xqDcoKaWU64hIOhpaVtiX+tJs5Z7MDzCNzfGfOekdsa1DM1BNIdh/lt+Z U+G5i7BcMcj5rj7a02odxpd4pOqqryWYFFcIQneafWGciDsJ4cWDBNk7DxnToe3D 2YetQWpLLsl8oOOb0t1BSqNiycKYgVaVhLxH6y4RFz/pBAUyKNkuWbR0iLI+dgnV LhqgXCMEPIbD0oZzr6s4kaRQsYvJ7el+A0bENczcKtsLFmqlebA= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:18 2026 by rpki-client