$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2030.roa File: 35382e36362e302e302f31362d3234203d3e2030.roa (raw, json) Hash identifier: v8a1Gnlg4t8oH5XIIZG9Qz3XvkYAKVWxsX31DxYFARY= Subject key identifier: E2:ED:E6:CE:92:4E:DC:69:BF:2F:04:83:FF:E8:E8:92:98:39:32:7B Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 25C99698F6CE9CDFD317037C50B97669F1EE5346 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2030.roa Signing time: Mon 06 Jul 2026 08:41:42 +0000 ROA not before: Mon 06 Jul 2026 08:36:42 +0000 ROA not after: Mon 05 Jul 2027 08:41:42 +0000 asID: 0 IP address blocks: 58.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 05:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c9:96:98:f6:ce:9c:df:d3:17:03:7c:50:b9:76:69:f1:ee:53:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Jul 6 08:36:42 2026 GMT Not After : Jul 5 08:41:42 2027 GMT Subject: CN=E2EDE6CE924EDC69BF2F0483FFE8E8929839327B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:9c:b9:f0:cc:a8:b0:e0:65:2a:22:fe:52: 35:16:7e:a5:7d:03:be:21:df:ce:9e:a5:18:bd:0e: 43:1e:dd:b7:4a:1b:ec:5f:d7:54:d3:fb:a0:da:e1: 53:c4:c5:48:28:ab:fc:66:2f:14:17:71:f1:95:8c: ff:27:9d:d0:69:8c:60:5f:3e:99:a4:1c:0d:b6:57: f7:65:03:e4:86:d1:80:24:1e:dd:53:93:e8:92:99: ef:1b:72:62:b3:f3:89:8d:80:ea:bc:b5:6d:93:02: a4:7e:6a:1a:9f:fa:ee:16:2b:a2:9a:10:8e:9d:56: 3a:42:c5:51:1f:06:c4:4a:f3:0d:b8:28:0f:b3:78: 8c:4e:1a:dc:e7:ff:08:33:8e:1b:7b:4b:af:79:3d: 53:a3:2e:be:b5:d2:b4:37:6a:cd:31:07:0e:2e:65: af:9f:e6:36:57:6e:b4:fe:2d:94:08:c1:d8:9b:e2: bd:b7:86:e4:75:51:9b:2b:db:8e:b2:5e:a4:bc:0a: eb:fc:53:11:1a:96:dc:59:53:fa:d4:92:ad:58:c6: ae:7a:d0:14:c4:6e:03:41:f0:99:8f:e5:7d:41:49: 33:13:c7:28:21:60:81:e5:c8:02:28:46:69:dc:20: 5d:c5:02:f8:bc:64:70:bc:7d:4b:5b:57:81:cf:08: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:ED:E6:CE:92:4E:DC:69:BF:2F:04:83:FF:E8:E8:92:98:39:32:7B X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:d1:7c:d1:42:a6:38:1e:25:99:89:3a:55:0b:ba:21:f5:9f: 2f:e4:fb:71:c5:be:bf:11:1d:6a:1f:a1:55:25:93:bd:a4:94: aa:e3:52:11:75:f8:09:5b:bf:48:0c:a8:c4:3a:76:8c:d1:15: fa:fa:b6:5f:6f:52:cc:f9:da:d1:d7:0b:25:66:10:ff:6b:58: e9:3d:3c:db:f7:9d:df:4a:c4:fd:9b:c4:9c:25:5c:d1:58:0c: 42:41:e0:58:cc:c9:12:8d:0c:b6:3e:18:8e:f4:f5:5f:32:de: 63:e3:b8:b8:41:40:ce:76:35:66:23:ec:09:08:51:7b:dd:80: 51:08:ba:c0:1c:3a:29:25:34:de:c2:47:75:c0:8c:f8:7d:15: a3:c7:47:10:70:dd:ee:ba:6f:38:26:a5:06:4d:57:e9:52:42: a7:0b:6b:ca:d2:4a:64:74:c8:f1:ed:4b:e6:73:d9:12:29:32: ac:6a:45:f2:5a:0d:ba:5e:67:4f:3e:e7:97:33:54:fc:2c:0b: 5c:0f:55:c0:2f:e9:4f:c1:7f:48:8c:60:a6:a4:6f:90:ec:d6: cb:d8:cd:42:6d:8e:96:9c:e6:89:c0:0c:fb:ff:4a:9c:a7:4a: a3:f9:c6:88:c6:b1:dc:83:9c:e7:f0:17:e8:2d:b2:ce:db:b1: 5d:45:2f:f5 -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUJcmWmPbOnN/TFwN8ULl2afHuU0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA3MDYwODM2NDJaFw0yNzA3MDUwODQxNDJaMDMxMTAvBgNV BAMTKEUyRURFNkNFOTI0RURDNjlCRjJGMDQ4M0ZGRThFODkyOTgzOTMyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIpy58MyosOBlKiL+UjUWfqV9 A74h386epRi9DkMe3bdKG+xf11TT+6Da4VPExUgoq/xmLxQXcfGVjP8nndBpjGBf PpmkHA22V/dlA+SG0YAkHt1Tk+iSme8bcmKz84mNgOq8tW2TAqR+ahqf+u4WK6Ka EI6dVjpCxVEfBsRK8w24KA+zeIxOGtzn/wgzjht7S695PVOjLr610rQ3as0xBw4u Za+f5jZXbrT+LZQIwdib4r23huR1UZsr246yXqS8Cuv8UxEaltxZU/rUkq1Yxq56 0BTEbgNB8JmP5X1BSTMTxyghYIHlyAIoRmncIF3FAvi8ZHC8fUtbV4HPCH1PAgMB AAGjggIDMIIB/zAdBgNVHQ4EFgQU4u3mzpJO3Gm/LwSD/+jokpg5MnswHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zNTM4MmUzNjM2MmUz MDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOkIwDQYJKoZI hvcNAQELBQADggEBAAfRfNFCpjgeJZmJOlULuiH1ny/k+3HFvr8RHWofoVUlk72k lKrjUhF1+Albv0gMqMQ6dozRFfr6tl9vUsz52tHXCyVmEP9rWOk9PNv3nd9KxP2b xJwlXNFYDEJB4FjMyRKNDLY+GI709V8y3mPjuLhBQM52NWYj7AkIUXvdgFEIusAc OiklNN7CR3XAjPh9FaPHRxBw3e66bzgmpQZNV+lSQqcLa8rSSmR0yPHtS+Zz2RIp MqxqRfJaDbpeZ08+55czVPwsC1wPVcAv6U/Bf0iMYKakb5Ds1svYzUJtjpac5onA DPv/SpynSqP5xojGsdyDnOfwF+gtss7bsV1FL/U= -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:09 2026 by rpki-client