$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2032393134.roa File: 35382e36362e302e302f31362d3234203d3e2032393134.roa (raw, json) Hash identifier: ezWzEXZHJ0KH0vbT8JBI6sD0SAsUQs8d1dhGEPvTEQQ= Subject key identifier: 8C:E4:85:2D:0D:9F:3D:81:2C:B1:5E:A8:E7:26:ED:BC:98:30:11:6E Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 433CFC7851FE43CA077336F4EE438DF0CD3B8E75 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2032393134.roa Signing time: Tue 26 May 2026 02:19:04 +0000 ROA not before: Tue 26 May 2026 02:14:04 +0000 ROA not after: Tue 25 May 2027 02:19:04 +0000 asID: 2914 IP address blocks: 58.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3c:fc:78:51:fe:43:ca:07:73:36:f4:ee:43:8d:f0:cd:3b:8e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: May 26 02:14:04 2026 GMT Not After : May 25 02:19:04 2027 GMT Subject: CN=8CE4852D0D9F3D812CB15EA8E726EDBC9830116E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:ea:e4:ae:90:15:cc:b4:77:62:fb:74:63: 97:f7:70:56:fe:dc:10:77:eb:21:66:c8:ad:fc:50: b7:9f:b0:4c:0d:e4:14:14:3a:ec:6c:8b:55:df:85: 4b:a4:8f:cc:39:3b:17:89:c8:3c:e4:5a:38:e5:26: 0b:98:65:08:ae:46:fb:26:68:c4:51:d2:14:72:17: d4:98:c3:48:d4:bf:35:68:54:1b:f6:35:e9:99:35: f3:e8:5d:ca:e7:a1:27:db:f3:a8:e6:7a:4c:d9:45: b5:a1:39:3b:fd:23:9c:f7:e1:bf:0f:82:54:fc:ce: dd:26:6b:65:72:1c:63:c4:14:8a:2e:2b:9d:7f:7b: 44:e6:65:8f:fe:94:56:93:86:bb:de:9a:e7:1a:99: 7e:96:d5:38:f7:13:47:9c:aa:c7:4f:28:b9:26:20: d8:ea:1f:dd:8f:a8:3b:e3:53:e4:5b:41:fa:b1:68: 88:81:5f:aa:83:1e:6f:c5:a4:a6:53:c5:23:d4:2d: ca:23:dd:d5:a4:a9:a4:09:bc:5c:b0:bb:f5:0d:c8: 94:2c:ff:ec:51:2a:59:30:80:e2:31:c1:2c:ec:49: 38:14:ee:d4:7c:1c:ed:cc:4d:89:ac:44:0b:ce:20: ea:a8:35:5c:42:8d:c8:e0:9b:cb:6d:f6:94:de:f2: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E4:85:2D:0D:9F:3D:81:2C:B1:5E:A8:E7:26:ED:BC:98:30:11:6E X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:a4:c7:d0:35:e1:46:32:9d:da:bd:83:29:6f:6e:3b:80:42: 89:64:95:16:40:57:15:c4:fe:5d:f7:a2:0f:70:8a:fb:96:c2: 37:c2:30:7d:2c:c8:01:8e:a2:ba:c6:1a:b4:30:fb:ac:52:11: 33:ec:9c:f3:25:4b:05:f0:34:81:f2:43:50:64:7d:11:7c:a2: c3:e2:96:86:78:c1:ff:ab:0c:21:ea:ad:30:b1:f2:68:0c:f7: 6c:8e:9b:a1:8c:7d:3b:89:3b:72:b1:0f:e4:cf:84:7b:1a:63: 51:7b:1e:ae:67:f3:9f:f8:ac:a0:9e:09:2b:d8:5f:84:d4:7f: 8f:85:20:d6:09:0b:8a:b1:38:93:8a:0f:28:83:3b:5d:c3:e3: e2:34:37:e7:9e:cd:d5:c6:da:e4:a4:5b:63:fc:15:a5:b8:94: 7f:9b:cb:3b:f0:1c:dd:9f:dc:6c:a5:79:10:89:72:89:ec:6d: d4:10:68:23:0a:17:96:61:06:93:fd:02:6f:14:ae:52:52:f3: 13:14:85:0d:2b:6a:b0:b4:fd:61:8e:34:0c:5c:eb:0f:2b:13: ba:64:ea:92:c4:62:80:6c:43:dc:9c:f7:11:da:0e:7e:20:55: 90:52:b2:82:08:0d:cc:b5:d8:89:89:6f:ce:18:07:61:f1:05: e0:77:80:7c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQzz8eFH+Q8oHczb07kON8M07jnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA1MjYwMjE0MDRaFw0yNzA1MjUwMjE5MDRaMDMxMTAvBgNV BAMTKDhDRTQ4NTJEMEQ5RjNEODEyQ0IxNUVBOEU3MjZFREJDOTgzMDExNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvOrkrpAVzLR3Yvt0Y5f3cFb+ 3BB36yFmyK38ULefsEwN5BQUOuxsi1XfhUukj8w5OxeJyDzkWjjlJguYZQiuRvsm aMRR0hRyF9SYw0jUvzVoVBv2NemZNfPoXcrnoSfb86jmekzZRbWhOTv9I5z34b8P glT8zt0ma2VyHGPEFIouK51/e0TmZY/+lFaThrvemucamX6W1Tj3E0ecqsdPKLkm INjqH92PqDvjU+RbQfqxaIiBX6qDHm/FpKZTxSPULcoj3dWkqaQJvFywu/UNyJQs /+xRKlkwgOIxwSzsSTgU7tR8HO3MTYmsRAvOIOqoNVxCjcjgm8tt9pTe8r4NAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUjOSFLQ2fPYEssV6o5ybtvJgwEW4wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNjJl MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADpC MA0GCSqGSIb3DQEBCwUAA4IBAQCgpMfQNeFGMp3avYMpb247gEKJZJUWQFcVxP5d 96IPcIr7lsI3wjB9LMgBjqK6xhq0MPusUhEz7JzzJUsF8DSB8kNQZH0RfKLD4paG eMH/qwwh6q0wsfJoDPdsjpuhjH07iTtysQ/kz4R7GmNRex6uZ/Of+Kygngkr2F+E 1H+PhSDWCQuKsTiTig8ogztdw+PiNDfnns3VxtrkpFtj/BWluJR/m8s78Bzdn9xs pXkQiXKJ7G3UEGgjCheWYQaT/QJvFK5SUvMTFIUNK2qwtP1hjjQMXOsPKxO6ZOqS xGKAbEPcnPcR2g5+IFWQUrKCCA3MtdiJiW/OGAdh8QXgd4B8 -----END CERTIFICATE-----Generated at Fri May 29 22:55:54 2026 by rpki-client