$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e36342e302f31382d3234203d3e203137343239.roa File: 35382e33312e36342e302f31382d3234203d3e203137343239.roa (raw, json) Hash identifier: EUY0P4c7lYWwtqevIXNjEjNdOjyOIXcnYMsyt+B5gmQ= Subject key identifier: 22:2C:F9:AA:94:85:90:D2:4A:FA:16:72:24:0C:B5:E2:0F:50:23:CE Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 216D161A38E003C2F2437199C2F0642AF3065B22 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e36342e302f31382d3234203d3e203137343239.roa Signing time: Mon 13 Apr 2026 03:27:56 +0000 ROA not before: Mon 13 Apr 2026 03:22:56 +0000 ROA not after: Mon 12 Apr 2027 03:27:56 +0000 asID: 17429 IP address blocks: 58.31.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6d:16:1a:38:e0:03:c2:f2:43:71:99:c2:f0:64:2a:f3:06:5b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Apr 13 03:22:56 2026 GMT Not After : Apr 12 03:27:56 2027 GMT Subject: CN=222CF9AA948590D24AFA1672240CB5E20F5023CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:c9:8b:b3:7c:26:19:4f:71:98:85:70:98: f2:21:1e:cf:cc:d2:c9:41:36:09:b3:4a:c9:1e:0e: 48:e6:e2:86:d2:be:ea:34:0b:3a:d0:f6:71:10:61: 8f:f2:ea:d7:35:b5:96:97:cd:be:90:a2:b0:07:6c: 06:de:e7:1a:e5:dc:97:78:04:3e:04:8b:bb:c5:fa: 56:f2:5c:e4:60:04:a0:c3:2b:a7:03:19:4a:47:85: b6:0e:98:08:34:b4:a9:22:c9:9b:58:4d:c5:54:6c: f3:bb:f2:4e:bc:a7:e2:d0:4b:21:63:2e:8c:b2:02: 44:30:c2:33:58:f7:0c:7c:6c:ff:69:28:0f:43:1c: 21:dd:a3:fc:f9:e0:7c:17:46:fb:f9:1f:19:56:9d: f6:78:3e:a4:85:c7:a7:55:c6:59:75:58:57:88:94: 41:c4:76:74:28:cf:50:3e:c3:59:9f:09:4b:cb:21: 6b:0f:91:c4:ae:d0:21:a5:60:ab:f0:bd:6f:71:e9: d3:89:0f:74:e5:d5:8a:d0:5d:ee:75:03:f2:2c:e2: c0:2c:ad:92:55:1b:49:25:6b:f4:21:bd:9c:a2:e8: df:7b:41:40:90:cc:04:8b:c4:34:bc:cb:0c:c3:0a: 44:d8:74:25:d7:94:0c:ab:80:6c:d1:b2:6c:c8:b7: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:F9:AA:94:85:90:D2:4A:FA:16:72:24:0C:B5:E2:0F:50:23:CE X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/35382e33312e36342e302f31382d3234203d3e203137343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.31.64.0/18 Signature Algorithm: sha256WithRSAEncryption 4a:1b:62:2b:08:9c:9b:65:01:29:a5:b0:bd:e4:2a:c0:81:af: 52:15:df:12:cc:77:88:77:17:19:0c:13:b3:80:b2:db:69:dd: 65:d1:f5:ce:dc:9a:4a:73:32:ca:06:26:c9:5e:88:d3:f1:72: 8c:93:18:27:c3:96:50:9c:33:54:02:3a:0f:c4:45:ca:e7:2a: 18:9f:c2:64:56:56:51:7f:d7:54:9a:04:34:1e:8f:f8:82:ff: 0e:d8:7c:54:5b:bf:7c:58:b5:ab:00:12:d9:d6:ec:69:84:05: 7f:a0:87:21:c1:31:0f:83:d1:59:30:6e:8c:2f:1d:1f:2f:a9: 47:1e:10:a1:ec:56:59:71:8d:c4:7b:86:47:71:ef:bb:29:36: b7:59:77:dc:21:43:7f:bd:03:26:bb:3d:32:a3:35:30:ab:f0: 3c:dd:a0:99:7e:7d:07:d1:42:2c:64:03:2f:77:52:a5:4d:79: a1:bf:db:2e:9f:19:ce:e0:91:ae:d0:77:ae:04:b7:08:47:46: 2d:d9:fe:ae:a8:d1:76:f5:5c:0a:f5:30:b6:09:92:51:96:8e: 63:69:cc:82:04:9b:48:b8:d5:ea:cf:9e:5c:b4:ee:87:2b:c2: 4a:af:a7:7f:e5:db:47:9d:09:da:19:fe:20:4e:4b:9b:05:b7: 08:97:7a:3a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUIW0WGjjgA8LyQ3GZwvBkKvMGWyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjA0MTMwMzIyNTZaFw0yNzA0MTIwMzI3NTZaMDMxMTAvBgNV BAMTKDIyMkNGOUFBOTQ4NTkwRDI0QUZBMTY3MjI0MENCNUUyMEY1MDIzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbcmLs3wmGU9xmIVwmPIhHs/M 0slBNgmzSskeDkjm4obSvuo0CzrQ9nEQYY/y6tc1tZaXzb6QorAHbAbe5xrl3Jd4 BD4Ei7vF+lbyXORgBKDDK6cDGUpHhbYOmAg0tKkiyZtYTcVUbPO78k68p+LQSyFj LoyyAkQwwjNY9wx8bP9pKA9DHCHdo/z54HwXRvv5HxlWnfZ4PqSFx6dVxll1WFeI lEHEdnQoz1A+w1mfCUvLIWsPkcSu0CGlYKvwvW9x6dOJD3Tl1YrQXe51A/Is4sAs rZJVG0kla/QhvZyi6N97QUCQzASLxDS8ywzDCkTYdCXXlAyrgGzRsmzIt4ElAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUIiz5qpSFkNJK+hZyJAy14g9QI84wHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3LzAvMzUzODJlMzMzMTJl MzYzNDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMxMzczNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAY6H0AwDQYJKoZIhvcNAQELBQADggEBAEobYisInJtlASmlsL3kKsCBr1IV3xLM d4h3FxkME7OAsttp3WXR9c7cmkpzMsoGJsleiNPxcoyTGCfDllCcM1QCOg/ERcrn KhifwmRWVlF/11SaBDQej/iC/w7YfFRbv3xYtasAEtnW7GmEBX+ghyHBMQ+D0Vkw bowvHR8vqUceEKHsVllxjcR7hkdx77spNrdZd9whQ3+9Aya7PTKjNTCr8DzdoJl+ fQfRQixkAy93UqVNeaG/2y6fGc7gka7Qd64EtwhHRi3Z/q6o0Xb1XAr1MLYJklGW jmNpzIIEm0i41erPnly07ocrwkqvp3/l20edCdoZ/iBOS5sFtwiXejo= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:14 2026 by rpki-client