$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20323037353530.roa File: 35382e36372e302e302f31372d3234203d3e20323037353530.roa (raw, json) Hash identifier: Frvud0IAdhSSWifiuhmMqQlIuaNr9K9or1hBbcPLxXw= Subject key identifier: 9D:0A:75:C6:B3:79:FA:C7:28:BC:FB:EB:C7:F6:DE:93:BB:2A:4B:32 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 2B9ECB183E4A8CA2B3E7D6807AFCAEDC3915CAE9 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20323037353530.roa Signing time: Tue 02 Jun 2026 09:25:00 +0000 ROA not before: Tue 02 Jun 2026 09:20:00 +0000 ROA not after: Tue 01 Jun 2027 09:25:00 +0000 asID: 207550 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9e:cb:18:3e:4a:8c:a2:b3:e7:d6:80:7a:fc:ae:dc:39:15:ca:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Jun 2 09:20:00 2026 GMT Not After : Jun 1 09:25:00 2027 GMT Subject: CN=9D0A75C6B379FAC728BCFBEBC7F6DE93BB2A4B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:e2:28:5a:2f:a2:7c:a3:e2:63:85:32:95: db:58:be:66:2f:6a:32:2d:4d:ee:f5:5b:78:c1:ff: 8a:5c:9d:23:1d:28:ba:74:fc:44:11:b9:e2:98:60: 0a:45:ef:63:b2:11:cc:a3:b4:f7:ff:21:3f:bf:57: 80:4a:17:49:bb:21:10:56:33:60:e0:0c:b2:a1:64: c5:85:cd:02:16:c1:8f:e4:6a:0f:21:f0:e1:0c:5a: 40:e8:2f:86:71:71:cf:23:2b:93:95:2f:0f:af:9c: fc:4e:32:97:29:53:5a:1c:5a:26:83:81:6d:63:41: a1:63:5e:26:41:b1:81:b7:dc:50:bc:20:5a:e5:ac: cd:d0:83:1f:0c:bc:41:88:f5:8f:98:b4:ca:7b:56: a4:df:a2:17:85:3f:ca:b5:25:22:85:d1:32:55:aa: 03:64:c3:da:39:19:a9:19:8b:b9:89:28:d8:d5:02: 06:8b:79:33:6e:9d:99:82:75:b6:a2:1a:cd:fc:ac: ac:be:7a:ce:5c:cb:1d:d0:1f:77:1d:3e:55:f4:27: 0d:ee:04:72:a0:5b:41:e2:65:9a:e5:46:d2:3d:74: 6c:9e:01:61:35:8f:28:4c:b9:17:33:f8:ca:50:60: 98:4a:23:49:be:8d:e0:ab:0d:17:82:e3:75:64:5d: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0A:75:C6:B3:79:FA:C7:28:BC:FB:EB:C7:F6:DE:93:BB:2A:4B:32 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20323037353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption a2:0b:34:5a:82:72:77:6b:af:35:53:52:83:64:e4:24:49:1c: 48:a5:7c:9f:2f:c6:a7:99:14:43:b1:4c:95:46:05:f1:56:1a: 98:3b:f1:b5:33:8b:b0:30:4f:7e:09:bc:da:52:fb:d5:c6:d3: 7b:12:2e:52:21:e1:07:7d:1d:73:95:6f:78:33:3f:bc:dd:f6: 16:a7:3b:ad:64:41:4f:e2:84:57:ef:67:b1:53:4f:b3:4e:bb: f9:58:cf:d5:00:1e:6c:d2:87:c3:47:fe:55:3d:c1:83:5b:00: 6d:b3:91:d5:89:a8:ce:6a:42:3c:13:07:78:99:99:f3:69:63: e3:03:26:db:9e:23:af:37:ee:cf:c2:46:67:bd:28:52:0d:a8: 9a:53:f9:f5:a4:76:db:57:6a:b3:e0:9d:70:05:00:c1:99:f3: 74:d8:93:72:cd:b3:85:a6:08:7a:fd:19:ce:aa:50:d8:67:8b: 4a:75:86:9a:c9:55:eb:64:56:1d:12:b8:dd:f3:e3:f4:97:ab: b5:28:3c:05:9c:b9:cb:b4:31:7a:f4:d8:a2:47:2c:17:5c:2f: f8:46:06:82:60:5a:e2:80:40:dc:72:7f:ba:76:57:f4:fd:22: 38:ce:fc:ed:4d:3b:74:6a:20:f7:1d:92:ab:3a:04:d4:1a:3b: c0:ce:51:d7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUK57LGD5KjKKz59aAevyu3DkVyukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA2MDIwOTIwMDBaFw0yNzA2MDEwOTI1MDBaMDMxMTAvBgNV BAMTKDlEMEE3NUM2QjM3OUZBQzcyOEJDRkJFQkM3RjZERTkzQkIyQTRCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANuIoWi+ifKPiY4UyldtYvmYv ajItTe71W3jB/4pcnSMdKLp0/EQRueKYYApF72OyEcyjtPf/IT+/V4BKF0m7IRBW M2DgDLKhZMWFzQIWwY/kag8h8OEMWkDoL4Zxcc8jK5OVLw+vnPxOMpcpU1ocWiaD gW1jQaFjXiZBsYG33FC8IFrlrM3Qgx8MvEGI9Y+YtMp7VqTfoheFP8q1JSKF0TJV qgNkw9o5GakZi7mJKNjVAgaLeTNunZmCdbaiGs38rKy+es5cyx3QH3cdPlX0Jw3u BHKgW0HiZZrlRtI9dGyeAWE1jyhMuRcz+MpQYJhKI0m+jeCrDReC43VkXVjrAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUnQp1xrN5+scovPvrx/bek7sqSzIwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjMwMzczNTM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAc6QwAwDQYJKoZIhvcNAQELBQADggEBAKILNFqCcndrrzVTUoNk5CRJHEilfJ8v xqeZFEOxTJVGBfFWGpg78bUzi7AwT34JvNpS+9XG03sSLlIh4Qd9HXOVb3gzP7zd 9hanO61kQU/ihFfvZ7FTT7NOu/lYz9UAHmzSh8NH/lU9wYNbAG2zkdWJqM5qQjwT B3iZmfNpY+MDJtueI6837s/CRme9KFINqJpT+fWkdttXarPgnXAFAMGZ83TYk3LN s4WmCHr9Gc6qUNhni0p1hprJVetkVh0SuN3z4/SXq7UoPAWcucu0MXr02KJHLBdc L/hGBoJgWuKAQNxyf7p2V/T9IjjO/O1NO3RqIPcdkqs6BNQaO8DOUdc= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:38 2026 by rpki-client