$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e3132382e302f31382d3234203d3e203137343239.roa File: 35382e33312e3132382e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: DVXqinIVruRBxwo9URxOrkUSPtXZe5Ib1tP736G/Hz0= Subject key identifier: 89:A2:27:9D:A2:0A:7F:B8:89:82:FD:51:FE:5F:CB:7A:A6:73:4C:6D Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 0B2071F1894D3A4EFBCC9CD09247EC370F7581A9 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e3132382e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:56 +0000 ROA not before: Mon 13 Apr 2026 03:22:56 +0000 ROA not after: Mon 12 Apr 2027 03:27:56 +0000 asID: 17429 IP address blocks: 58.31.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:71:f1:89:4d:3a:4e:fb:cc:9c:d0:92:47:ec:37:0f:75:81:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:56 2026 GMT Not After : Apr 12 03:27:56 2027 GMT Subject: CN=89A2279DA20A7FB88982FD51FE5FCB7AA6734C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:6f:70:15:cb:f1:ed:83:52:4b:42:a2:3a: ac:3c:5b:77:e1:15:e7:38:ca:49:e3:74:6c:12:32: 58:19:5a:a7:26:fe:fc:5c:9f:4d:10:df:5e:7d:c7: 8f:1e:66:a8:8c:4b:30:08:27:0f:f7:90:68:57:fb: c9:9d:0d:b0:61:3b:39:10:a1:21:16:51:45:17:c7: 35:23:e8:5a:e3:a2:04:34:e4:00:9f:67:07:b7:cb: 62:af:4e:0c:d8:76:a2:f3:98:04:db:5f:17:7c:72: 98:d9:d8:ce:7c:fc:6c:dc:6f:18:14:f5:75:69:4d: b3:9c:62:58:e0:a2:d3:4a:74:3a:12:37:f9:3e:b4: 03:c8:cb:62:c9:ae:7a:db:a8:52:be:5a:b3:d6:9b: 3e:b2:98:3a:44:dc:b7:2f:42:d4:77:a1:aa:fa:1c: bb:29:5a:5b:56:af:f3:d3:ac:5c:3f:79:cb:1d:09: 00:0f:d2:23:03:e6:1f:f5:d4:11:3c:dd:ae:47:8d: 4f:bb:3d:4a:1d:b8:17:4b:42:fe:d9:dd:e5:f9:bd: 03:53:4d:8f:6c:4e:3c:a9:ce:07:b0:00:2c:f2:95: 4e:3e:83:e5:32:e9:41:f4:73:ec:8a:5b:a0:f8:ca: 85:c2:e3:91:a0:9d:3d:51:84:fe:0a:a6:79:f5:41: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A2:27:9D:A2:0A:7F:B8:89:82:FD:51:FE:5F:CB:7A:A6:73:4C:6D X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e3132382e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.31.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0a:df:8b:9c:86:dd:5a:71:51:ee:b7:cb:18:b1:59:15:76:62: ca:8e:cf:21:0c:3e:65:16:0d:0b:b2:c2:15:59:fd:a5:56:30: ec:b9:86:83:d1:fa:3d:16:5c:16:03:8e:de:da:03:02:de:07: 09:e4:f7:79:b5:83:d1:69:53:05:c6:34:cc:12:fc:de:11:0b: 6e:4a:1d:bf:db:1d:95:ca:cc:f5:10:76:49:6c:62:6b:78:ad: 7a:c6:f9:73:be:5d:bc:5e:ae:b4:13:26:f7:76:6b:e5:a3:52: 34:7c:5b:c0:bf:d7:7b:3e:14:f6:1e:35:d5:9a:00:44:08:c9: 1b:b6:6c:2c:1f:a1:28:c1:17:ac:ea:d3:41:e3:05:b7:2c:fc: fc:1d:fc:1f:66:09:f5:9d:cb:a7:8b:45:82:27:7b:80:c8:91: 76:9f:7a:41:2c:e0:2b:ce:58:68:13:6b:ee:6b:5a:1f:ab:ca: 4e:4b:ac:c9:4e:ea:22:52:25:59:ef:44:9b:c8:ca:13:09:42: d8:36:28:4c:92:26:af:4c:09:e9:bc:4a:ee:d6:de:25:06:1a: 19:9c:82:14:3e:24:f5:ab:35:78:5d:f8:82:e6:c8:59:68:d6: ab:07:a7:ec:8f:eb:41:9c:11:0a:6d:ca:ee:c6:c1:48:ce:fe: 02:65:4b:65 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUCyBx8YlNOk77zJzQkkfsNw91gakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTZaFw0yNzA0MTIwMzI3NTZaMDMxMTAvBgNV BAMTKDg5QTIyNzlEQTIwQTdGQjg4OTgyRkQ1MUZFNUZDQjdBQTY3MzRDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLC29wFcvx7YNSS0KiOqw8W3fh Fec4yknjdGwSMlgZWqcm/vxcn00Q3159x48eZqiMSzAIJw/3kGhX+8mdDbBhOzkQ oSEWUUUXxzUj6FrjogQ05ACfZwe3y2KvTgzYdqLzmATbXxd8cpjZ2M58/GzcbxgU 9XVpTbOcYljgotNKdDoSN/k+tAPIy2LJrnrbqFK+WrPWmz6ymDpE3LcvQtR3oar6 HLspWltWr/PTrFw/ecsdCQAP0iMD5h/11BE83a5HjU+7PUoduBdLQv7Z3eX5vQNT TY9sTjypzgewACzylU4+g+Uy6UH0c+yKW6D4yoXC45GgnT1RhP4Kpnn1QcvPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUiaInnaIKf7iJgv1R/l/LeqZzTG0wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMTJl MzEzMjM4MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBjofgDANBgkqhkiG9w0BAQsFAAOCAQEACt+LnIbdWnFR7rfLGLFZFXZiyo7P IQw+ZRYNC7LCFVn9pVYw7LmGg9H6PRZcFgOO3toDAt4HCeT3ebWD0WlTBcY0zBL8 3hELbkodv9sdlcrM9RB2SWxia3itesb5c75dvF6utBMm93Zr5aNSNHxbwL/Xez4U 9h411ZoARAjJG7ZsLB+hKMEXrOrTQeMFtyz8/B38H2YJ9Z3Lp4tFgid7gMiRdp96 QSzgK85YaBNr7mtaH6vKTkusyU7qIlIlWe9Em8jKEwlC2DYoTJImr0wJ6bxK7tbe JQYaGZyCFD4k9as1eF34gubIWWjWqwen7I/rQZwRCm3K7sbBSM7+AmVLZQ== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:22 2026 by rpki-client