$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e203138383131.roa File: 35382e36372e302e302f31372d3234203d3e203138383131.roa (raw, json) Hash identifier: KmW0VeGbVlzgD3zUui8uYvo/SD5KZ9uVN9omqUFWmoM= Subject key identifier: 5B:FA:12:9F:83:EF:CF:4D:B9:B6:E2:66:F4:E8:D7:79:ED:71:9A:32 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 628E132CA4EDAF1C4F9E4B08304E161BBD8F80CE Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e203138383131.roa Signing time: Tue 26 May 2026 02:19:04 +0000 ROA not before: Tue 26 May 2026 02:14:04 +0000 ROA not after: Tue 25 May 2027 02:19:04 +0000 asID: 18811 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8e:13:2c:a4:ed:af:1c:4f:9e:4b:08:30:4e:16:1b:bd:8f:80:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: May 26 02:14:04 2026 GMT Not After : May 25 02:19:04 2027 GMT Subject: CN=5BFA129F83EFCF4DB9B6E266F4E8D779ED719A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:c7:7e:4c:9f:15:bc:a0:47:04:ee:e7:c1: d7:eb:5f:8c:97:19:a3:ce:c9:b7:93:b2:a1:0e:bd: 54:82:a7:55:64:a7:2e:8e:92:e9:a4:54:21:9f:eb: cc:61:1d:71:67:c4:bb:86:7c:4f:c9:c2:f9:88:b1: 1b:5a:10:7d:4c:fc:d2:f9:4a:9f:76:89:d2:ee:93: b7:c9:3d:fd:7d:15:84:40:48:10:7c:61:fb:72:37: 6f:a2:0f:8c:b5:ec:d2:47:b4:8e:50:65:7b:1a:41: 8a:98:3a:fc:e9:14:39:e4:d7:9f:00:eb:7a:72:0c: 43:24:c1:89:7e:23:30:41:c2:8f:9a:f7:f2:7d:67: 23:5b:62:4c:02:9a:fd:43:4d:e0:0d:f7:87:f5:12: 27:eb:5f:9a:fe:1e:b1:cd:e9:72:40:0e:95:b4:c8: c8:7f:71:1c:3b:07:7b:f5:ee:73:71:b9:93:01:6c: 45:0f:aa:55:b3:66:5b:9f:58:b7:7b:c9:98:8f:d3: a6:01:1c:89:67:22:23:43:98:c2:ce:ca:58:bc:28: 7a:ed:20:88:4f:f2:a4:71:c3:2c:ad:89:d5:88:4b: 5e:90:00:58:b3:ec:36:48:c1:22:04:fd:d7:82:84: a9:8b:cf:75:e7:41:73:bd:4c:2e:22:89:8d:a3:8d: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:12:9F:83:EF:CF:4D:B9:B6:E2:66:F4:E8:D7:79:ED:71:9A:32 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e203138383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption c1:ef:30:6d:9b:9f:6d:86:df:82:15:22:46:1d:85:05:c7:13: 1f:d5:fd:95:af:49:92:de:fd:b7:6c:5a:03:ae:df:00:6f:2b: 97:93:e8:b4:75:1b:d5:62:68:5c:6b:3a:b2:40:96:3c:62:bc: 00:83:97:91:16:a5:21:e8:41:05:56:88:7f:81:65:9f:ed:a5: c3:77:cf:c3:5c:52:42:95:c5:96:e0:58:bb:e0:23:63:9a:51: 42:ad:4a:18:6a:ae:d4:05:d5:97:a2:14:bf:42:99:30:6c:5c: 13:f4:ae:3a:c4:3a:62:95:1d:f3:25:a0:3f:fb:7f:62:a2:ed: f8:c4:90:dc:1a:91:8d:24:18:46:3a:4f:68:33:bb:90:eb:ac: 0d:71:fa:4b:bc:66:d5:d4:2a:34:68:81:aa:fe:7d:91:d4:51: fa:4a:d8:52:76:f7:70:64:78:fe:f9:35:7d:31:55:3c:45:f9: 51:e3:f1:60:8a:39:ef:b5:fd:29:14:1a:18:dd:92:ea:1f:78: 1a:88:42:3e:b3:6e:d6:43:53:8e:62:15:60:3c:90:77:b2:ae: c5:1a:a3:1c:3a:82:d7:63:5d:9f:db:72:29:7c:af:74:f8:84: 77:f0:03:f6:ee:76:9c:25:dc:83:7d:78:c2:3b:34:35:e6:b7: b3:cc:bb:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUYo4TLKTtrxxPnksIME4WG72PgM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA1MjYwMjE0MDRaFw0yNzA1MjUwMjE5MDRaMDMxMTAvBgNV BAMTKDVCRkExMjlGODNFRkNGNERCOUI2RTI2NkY0RThENzc5RUQ3MTlBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLcd+TJ8VvKBHBO7nwdfrX4yX GaPOybeTsqEOvVSCp1Vkpy6OkumkVCGf68xhHXFnxLuGfE/JwvmIsRtaEH1M/NL5 Sp92idLuk7fJPf19FYRASBB8YftyN2+iD4y17NJHtI5QZXsaQYqYOvzpFDnk158A 63pyDEMkwYl+IzBBwo+a9/J9ZyNbYkwCmv1DTeAN94f1EifrX5r+HrHN6XJADpW0 yMh/cRw7B3v17nNxuZMBbEUPqlWzZlufWLd7yZiP06YBHIlnIiNDmMLOyli8KHrt IIhP8qRxwyytidWIS16QAFiz7DZIwSIE/deChKmLz3XnQXO9TC4iiY2jjf5/AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUW/oSn4Pvz025tuJm9OjXee1xmjIwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMTM4MzgzMTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH OkMAMA0GCSqGSIb3DQEBCwUAA4IBAQDB7zBtm59tht+CFSJGHYUFxxMf1f2Vr0mS 3v23bFoDrt8AbyuXk+i0dRvVYmhcazqyQJY8YrwAg5eRFqUh6EEFVoh/gWWf7aXD d8/DXFJClcWW4Fi74CNjmlFCrUoYaq7UBdWXohS/QpkwbFwT9K46xDpilR3zJaA/ +39iou34xJDcGpGNJBhGOk9oM7uQ66wNcfpLvGbV1Co0aIGq/n2R1FH6SthSdvdw ZHj++TV9MVU8RflR4/Fgijnvtf0pFBoY3ZLqH3gaiEI+s27WQ1OOYhVgPJB3sq7F GqMcOoLXY12f23IpfK90+IR38AP27nacJdyDfXjCOzQ15rezzLtV -----END CERTIFICATE-----Generated at Fri May 29 23:49:43 2026 by rpki-client