$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e302e302f31382d3234203d3e203137343239.roa File: 35382e33312e302e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: zr4OHqEH3XPfG6t3F3WhTgxTwMn79LRLmJWliAFMZq0= Subject key identifier: FC:DE:2F:B5:AE:EA:51:31:0B:3A:C2:B2:9A:7F:BA:FD:73:F1:00:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0D73B0378841193F0B80722338FBD5F2E81D5427 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e302e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:56 +0000 ROA not before: Mon 13 Apr 2026 03:22:56 +0000 ROA not after: Mon 12 Apr 2027 03:27:56 +0000 asID: 17429 IP address blocks: 58.31.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:73:b0:37:88:41:19:3f:0b:80:72:23:38:fb:d5:f2:e8:1d:54:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:56 2026 GMT Not After : Apr 12 03:27:56 2027 GMT Subject: CN=FCDE2FB5AEEA51310B3AC2B29A7FBAFD73F10094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:ca:5d:56:61:b3:04:31:85:fc:c3:58:3c: 8b:6b:c8:09:5e:bd:64:82:ff:ab:d6:c8:97:26:a6: aa:44:e1:92:cc:ca:c5:37:37:32:b6:d0:55:00:25: da:94:bd:d6:77:48:c6:1d:8c:51:49:cb:1a:37:fa: 5a:77:6c:7f:9a:95:31:e6:cd:f2:e5:4b:91:57:4e: 30:0a:95:66:26:4a:d1:39:f6:cb:82:71:03:23:e1: 73:e8:62:99:c3:b6:68:d3:64:3e:16:39:57:aa:c9: c9:c4:e2:61:c7:9c:cc:71:42:2d:67:2e:a1:5d:27: c6:94:8a:d4:f3:8d:9b:13:9c:d4:5c:7a:5f:4f:30: 99:82:d7:58:a3:cd:2d:d3:4a:21:65:28:11:d2:72: 43:5e:5e:fb:17:95:7d:7f:62:d7:b3:25:f5:37:17: 6e:2d:3e:2f:10:6f:ab:bb:c3:72:07:71:f6:4a:28: 0b:d9:3c:13:14:82:ac:c3:49:1c:1b:da:e3:ae:78: 0a:b9:39:cb:5f:23:3c:a2:76:7e:23:8b:62:e5:0c: 2f:6c:da:47:4a:a3:74:db:73:b9:33:b7:27:78:fe: 04:69:14:01:1d:bb:c0:94:eb:a0:f5:62:fe:3c:ab: cc:f3:22:2a:17:52:db:1b:9a:95:03:96:15:71:ff: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DE:2F:B5:AE:EA:51:31:0B:3A:C2:B2:9A:7F:BA:FD:73:F1:00:94 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e302e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.31.0.0/18 Signature Algorithm: sha256WithRSAEncryption 78:cb:ed:44:71:a8:a9:d4:63:10:84:52:f0:2f:00:32:e4:6e: 79:e6:28:13:1c:fd:4c:98:81:fe:a7:d2:40:29:c7:06:4d:97: f0:29:36:af:aa:b0:86:65:de:9b:a7:03:dc:b6:56:d2:5b:cc: fd:79:30:21:cf:7d:98:2f:c8:ba:c8:54:54:c5:e7:56:31:fe: 99:1d:5c:13:16:8c:07:6c:13:d0:b1:0e:43:95:81:9b:5c:b7: 05:cf:44:d1:5f:c8:9f:58:48:37:8a:2c:dd:65:0d:fc:79:71: ee:a4:42:cb:52:a5:e8:81:fb:02:85:4f:c8:3e:b4:e2:ae:f5: 5f:66:30:86:2d:68:ee:2a:1f:d3:11:b6:73:bb:46:2e:29:0b: 82:33:68:52:45:a4:a9:ab:5a:6b:6b:79:9d:10:2c:9d:0f:77: cc:54:1b:c2:a4:0b:bd:81:83:a5:ba:2b:71:8e:0d:4f:45:01: 50:2c:52:5d:ad:de:cd:7b:ec:09:9b:05:47:f8:19:d9:54:e0: 82:d0:44:83:14:67:a3:e8:3c:99:1d:5f:5c:d7:9c:79:a4:6b: d1:f6:69:c3:8c:e0:e9:9a:da:f6:e8:44:97:77:2d:fe:17:62: d8:63:f3:1b:05:a1:55:35:ad:06:75:6b:d1:63:5e:13:bd:f9: e1:c7:74:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUDXOwN4hBGT8LgHIjOPvV8ugdVCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTZaFw0yNzA0MTIwMzI3NTZaMDMxMTAvBgNV BAMTKEZDREUyRkI1QUVFQTUxMzEwQjNBQzJCMjlBN0ZCQUZENzNGMTAwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kMpdVmGzBDGF/MNYPItryAle vWSC/6vWyJcmpqpE4ZLMysU3NzK20FUAJdqUvdZ3SMYdjFFJyxo3+lp3bH+alTHm zfLlS5FXTjAKlWYmStE59suCcQMj4XPoYpnDtmjTZD4WOVeqycnE4mHHnMxxQi1n LqFdJ8aUitTzjZsTnNRcel9PMJmC11ijzS3TSiFlKBHSckNeXvsXlX1/YtezJfU3 F24tPi8Qb6u7w3IHcfZKKAvZPBMUgqzDSRwb2uOueAq5OctfIzyidn4ji2LlDC9s 2kdKo3Tbc7kztyd4/gRpFAEdu8CU66D1Yv48q8zzIioXUtsbmpUDlhVx/8BFAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU/N4vta7qUTELOsKymn+6/XPxAJQwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMTJl MzAyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM3MzQzMjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG Oh8AMA0GCSqGSIb3DQEBCwUAA4IBAQB4y+1Ecaip1GMQhFLwLwAy5G555igTHP1M mIH+p9JAKccGTZfwKTavqrCGZd6bpwPctlbSW8z9eTAhz32YL8i6yFRUxedWMf6Z HVwTFowHbBPQsQ5DlYGbXLcFz0TRX8ifWEg3iizdZQ38eXHupELLUqXogfsChU/I PrTirvVfZjCGLWjuKh/TEbZzu0YuKQuCM2hSRaSpq1pra3mdECydD3fMVBvCpAu9 gYOluitxjg1PRQFQLFJdrd7Ne+wJmwVH+BnZVOCC0ESDFGej6DyZHV9c15x5pGvR 9mnDjODpmtr26ESXdy3+F2LYY/MbBaFVNa0GdWvRY14Tvfnhx3Rw -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:19 2026 by rpki-client