$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2030.roa File: 35382e36372e302e302f31372d3234203d3e2030.roa (raw, json) Hash identifier: jM2mWgdrBRuqvHw9wFMZEIUhn/D4DyWxy9KS6hP9qjw= Subject key identifier: 6C:CE:28:83:9A:19:6E:CB:EE:5C:73:78:48:E2:17:C4:62:60:FB:AF Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 6E126DCAC777E79805AEB3AA6B56B5F78431E712 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2030.roa Signing time: Mon 06 Jul 2026 08:41:42 +0000 ROA not before: Mon 06 Jul 2026 08:36:42 +0000 ROA not after: Mon 05 Jul 2027 08:41:42 +0000 asID: 0 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 05:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:12:6d:ca:c7:77:e7:98:05:ae:b3:aa:6b:56:b5:f7:84:31:e7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Jul 6 08:36:42 2026 GMT Not After : Jul 5 08:41:42 2027 GMT Subject: CN=6CCE28839A196ECBEE5C737848E217C46260FBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:dd:18:65:91:05:55:d7:54:11:75:e0:18: d2:db:da:f7:62:54:f3:65:56:8c:e0:74:be:6c:da: 34:88:c9:d0:94:97:30:5b:86:a4:db:82:51:99:9a: fe:74:5a:fd:60:2d:79:30:1e:44:27:ee:93:9f:5a: 40:03:8d:3f:77:15:87:17:49:da:9b:62:16:03:d8: 16:dd:7a:d2:74:2b:70:de:d1:43:f1:5b:4e:7f:ae: 0e:38:9a:1e:00:a0:b6:67:28:b3:81:e6:4b:2f:8e: 7c:67:34:a2:5d:83:f4:36:b8:96:3d:5d:6f:37:78: b9:89:0b:53:64:21:cc:ad:91:b0:ba:ef:3c:09:9a: 54:b3:2f:f7:52:be:55:0b:0b:b8:82:fc:42:23:93: 71:bc:56:f4:d4:72:28:89:7f:f4:79:03:33:38:a9: f8:a9:6f:63:8a:06:ed:9c:72:b7:30:83:d5:40:6f: 9c:4b:2a:5a:fb:69:d8:56:d7:22:6d:31:5d:2a:0a: 62:df:d4:f3:ab:ff:85:1c:57:05:fc:d0:ba:d5:37: 1d:a9:d1:00:42:72:c9:52:20:10:f1:3a:a8:be:1d: c1:47:a4:84:23:c3:59:a4:38:67:95:78:3e:80:f5: 1b:ba:f4:06:40:09:ac:22:8b:c8:84:81:1e:3b:cc: ad:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CE:28:83:9A:19:6E:CB:EE:5C:73:78:48:E2:17:C4:62:60:FB:AF X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1b:aa:e6:ae:02:fc:87:47:7d:c9:7a:74:16:1f:c8:ce:ed:7a: de:1a:65:67:b8:7d:54:97:09:68:e9:55:37:36:9e:9d:4c:5d: 0f:02:d2:aa:9d:9e:87:b9:75:09:87:5a:81:5c:c6:e5:1a:7e: 2c:e2:1c:26:a5:40:22:37:51:03:96:8e:da:71:31:af:34:f0: 06:fc:67:46:ff:9f:45:7f:1c:bf:7a:c4:49:a5:bd:d1:63:58: 1b:62:f7:a9:fe:7e:61:ac:a9:75:50:19:76:03:05:13:35:9c: ca:5f:cb:e4:8d:b6:b2:23:b6:36:4e:06:eb:33:ec:ee:0a:23: 4f:95:ad:73:b9:9c:31:54:d8:3a:5d:ec:3d:29:cb:1b:a5:95: 70:d6:fa:e5:77:fb:9c:e5:9a:60:8d:aa:fd:e5:c2:5f:9e:36: 08:70:87:97:aa:e2:00:bc:f6:06:cf:dc:a6:53:d7:2c:94:0f: 79:94:c1:90:d6:ac:f8:b9:da:37:a6:45:6b:99:e8:94:87:df: 6b:3c:1f:d9:9a:2f:5c:9f:19:84:5f:b4:1d:e8:f0:e3:8b:59: 73:13:d3:01:dd:5d:35:08:1e:9d:24:cf:b1:c9:91:a5:fd:8e: d6:55:73:96:5d:bc:ae:9b:ae:01:d7:3d:a8:ca:df:28:52:21: 51:4b:43:32 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUbhJtysd355gFrrOqa1a194Qx5xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA3MDYwODM2NDJaFw0yNzA3MDUwODQxNDJaMDMxMTAvBgNV BAMTKDZDQ0UyODgzOUExOTZFQ0JFRTVDNzM3ODQ4RTIxN0M0NjI2MEZCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtd0YZZEFVddUEXXgGNLb2vdi VPNlVozgdL5s2jSIydCUlzBbhqTbglGZmv50Wv1gLXkwHkQn7pOfWkADjT93FYcX SdqbYhYD2BbdetJ0K3De0UPxW05/rg44mh4AoLZnKLOB5ksvjnxnNKJdg/Q2uJY9 XW83eLmJC1NkIcytkbC67zwJmlSzL/dSvlULC7iC/EIjk3G8VvTUciiJf/R5AzM4 qfipb2OKBu2ccrcwg9VAb5xLKlr7adhW1yJtMV0qCmLf1POr/4UcVwX80LrVNx2p 0QBCcslSIBDxOqi+HcFHpIQjw1mkOGeVeD6A9Ru69AZACawii8iEgR47zK2VAgMB AAGjggIEMIICADAdBgNVHQ4EFgQUbM4og5oZbsvuXHN4SOIXxGJg+68wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zNTM4MmUzNjM3MmUz MDJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHOkMAMA0GCSqG SIb3DQEBCwUAA4IBAQAbquauAvyHR33JenQWH8jO7XreGmVnuH1Ulwlo6VU3Np6d TF0PAtKqnZ6HuXUJh1qBXMblGn4s4hwmpUAiN1EDlo7acTGvNPAG/GdG/59Ffxy/ esRJpb3RY1gbYvep/n5hrKl1UBl2AwUTNZzKX8vkjbayI7Y2TgbrM+zuCiNPla1z uZwxVNg6Xew9KcsbpZVw1vrld/uc5Zpgjar95cJfnjYIcIeXquIAvPYGz9ymU9cs lA95lMGQ1qz4udo3pkVrmeiUh99rPB/Zmi9cnxmEX7Qd6PDji1lzE9MB3V01CB6d JM+xyZGl/Y7WVXOWXbyum64B1z2oyt8oUiFRS0My -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:12 2026 by rpki-client