$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2033343931.roa File: 35382e36362e302e302f31362d3234203d3e2033343931.roa (raw, json) Hash identifier: ox/jz3YD+AaA8fgEj3cEr8NVUbLLGydi054aStkdee8= Subject key identifier: 8B:C3:69:04:42:50:26:56:ED:7C:BF:6F:EC:E6:3A:CD:F0:2E:44:B4 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 74DE1FAB728929D29306E794A84089C90F72F29A Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2033343931.roa Signing time: Tue 26 May 2026 02:19:04 +0000 ROA not before: Tue 26 May 2026 02:14:04 +0000 ROA not after: Tue 25 May 2027 02:19:04 +0000 asID: 3491 IP address blocks: 58.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:de:1f:ab:72:89:29:d2:93:06:e7:94:a8:40:89:c9:0f:72:f2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: May 26 02:14:04 2026 GMT Not After : May 25 02:19:04 2027 GMT Subject: CN=8BC3690442502656ED7CBF6FECE63ACDF02E44B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:56:d4:b9:76:49:97:e2:46:d9:eb:fc:80: e4:fc:f8:6c:53:4a:2c:9a:6c:fc:e8:49:36:a4:23: e2:4e:8f:48:22:96:a4:01:68:82:b5:e7:56:19:08: 6b:83:78:0e:09:54:96:41:eb:40:df:69:8d:4c:49: 47:ef:42:b5:8a:69:16:a2:ae:36:5a:81:46:85:0d: 34:32:47:5a:b0:17:f7:1a:c5:ea:3b:3c:28:1a:94: 19:8c:c0:a7:e3:ef:ed:b0:df:86:84:33:21:4a:1b: 3f:44:d8:57:0b:c3:06:d0:9c:17:d1:41:8d:74:21: 3d:43:67:28:0f:e1:8d:7e:b3:20:48:10:a0:7e:4f: 32:9d:36:19:7f:c8:9c:f1:bb:15:0f:9d:1b:be:a6: 83:7c:70:bf:48:71:ce:a7:f9:b7:fd:76:05:8b:4b: ec:5a:a8:d3:57:6c:3d:9d:ad:bc:f5:35:b3:64:aa: ea:3a:ba:06:08:2e:60:28:ba:01:0d:96:ff:13:09: bf:97:84:5e:04:44:0e:56:d4:7b:6d:99:8b:11:2f: 52:89:08:93:cd:51:66:1b:76:dd:65:3c:6b:02:76: 52:e6:df:23:e4:d1:51:50:1a:83:88:7d:0c:c4:51: e4:bb:82:10:74:88:09:7d:2d:85:f9:ec:5b:ee:24: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C3:69:04:42:50:26:56:ED:7C:BF:6F:EC:E6:3A:CD:F0:2E:44:B4 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2033343931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 02:1f:0a:b4:1d:fc:93:8c:79:f8:a8:ad:80:19:b9:f3:05:06: 23:25:67:21:d6:b6:16:a8:23:f1:cc:dc:f4:13:75:4b:df:75: c3:6e:bd:3c:6f:55:3a:8d:d6:33:ec:10:4d:99:87:a8:a1:c2: fc:b4:e0:e2:1d:0f:b2:d1:15:e2:d2:2a:73:62:a7:46:a6:05: 23:51:79:ca:bb:a9:95:76:a5:97:58:ff:4b:6b:d0:f9:b3:f0: ac:2f:49:09:97:ed:2b:ec:f6:ab:d5:57:d6:4f:75:f0:e6:d4: 6c:97:9f:32:9f:d6:1a:30:bd:9c:f0:a4:b5:07:ac:7a:7c:a0: 9d:a8:9e:3c:ac:92:8b:8a:fd:44:a9:28:54:84:e3:aa:22:c4: 5b:80:b1:49:56:e1:bc:f6:aa:bc:77:6e:fa:5f:d1:ac:17:01: d9:07:15:43:af:d7:d2:6e:e4:33:0d:03:0e:75:66:ee:7d:fd: a0:b7:5e:fd:fa:f9:4c:ce:d9:fd:2c:35:40:42:30:22:80:a8: 09:91:74:64:90:d5:c7:dd:6f:2f:11:22:6e:a0:1a:f9:22:0b: 5c:45:c8:be:1b:1b:11:7a:b9:5c:ff:89:6b:bc:2d:fc:5d:d9: f3:c0:e7:69:ab:1c:81:12:7b:1d:1f:21:d9:05:23:b7:c7:3c: 44:a2:c4:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdN4fq3KJKdKTBueUqECJyQ9y8powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA1MjYwMjE0MDRaFw0yNzA1MjUwMjE5MDRaMDMxMTAvBgNV BAMTKDhCQzM2OTA0NDI1MDI2NTZFRDdDQkY2RkVDRTYzQUNERjAyRTQ0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZfFbUuXZJl+JG2ev8gOT8+GxT SiyabPzoSTakI+JOj0gilqQBaIK151YZCGuDeA4JVJZB60DfaY1MSUfvQrWKaRai rjZagUaFDTQyR1qwF/caxeo7PCgalBmMwKfj7+2w34aEMyFKGz9E2FcLwwbQnBfR QY10IT1DZygP4Y1+syBIEKB+TzKdNhl/yJzxuxUPnRu+poN8cL9Icc6n+bf9dgWL S+xaqNNXbD2drbz1NbNkquo6ugYILmAougENlv8TCb+XhF4ERA5W1HttmYsRL1KJ CJPNUWYbdt1lPGsCdlLm3yPk0VFQGoOIfQzEUeS7ghB0iAl9LYX57FvuJF2dAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUi8NpBEJQJlbtfL9v7OY6zfAuRLQwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNjJl MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMzM0MzkzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADpC MA0GCSqGSIb3DQEBCwUAA4IBAQACHwq0HfyTjHn4qK2AGbnzBQYjJWch1rYWqCPx zNz0E3VL33XDbr08b1U6jdYz7BBNmYeoocL8tODiHQ+y0RXi0ipzYqdGpgUjUXnK u6mVdqWXWP9La9D5s/CsL0kJl+0r7Par1VfWT3Xw5tRsl58yn9YaML2c8KS1B6x6 fKCdqJ48rJKLiv1EqShUhOOqIsRbgLFJVuG89qq8d276X9GsFwHZBxVDr9fSbuQz DQMOdWbuff2gt179+vlMztn9LDVAQjAigKgJkXRkkNXH3W8vESJuoBr5IgtcRci+ GxsRerlc/4lrvC38XdnzwOdpqxyBEnsdHyHZBSO3xzxEosSJ -----END CERTIFICATE-----Generated at Fri May 29 22:55:53 2026 by rpki-client