$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2032393134.roa File: 35382e36372e302e302f31372d3234203d3e2032393134.roa (raw, json) Hash identifier: sgg0s5axV2wJN3v2U1X074pwwRnFAJ9T8vTPJBv7/e8= Subject key identifier: D1:CD:9F:56:33:70:5D:CC:9F:E5:BB:27:93:C1:BA:7A:FD:6F:CA:34 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 743D8F123D649B9EEF5DC7D0C3FDA000C8735304 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2032393134.roa Signing time: Tue 26 May 2026 02:19:04 +0000 ROA not before: Tue 26 May 2026 02:14:04 +0000 ROA not after: Tue 25 May 2027 02:19:04 +0000 asID: 2914 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3d:8f:12:3d:64:9b:9e:ef:5d:c7:d0:c3:fd:a0:00:c8:73:53:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: May 26 02:14:04 2026 GMT Not After : May 25 02:19:04 2027 GMT Subject: CN=D1CD9F5633705DCC9FE5BB2793C1BA7AFD6FCA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:6c:23:31:a8:f9:89:c5:1b:ad:b2:d7:ed: a1:ba:85:85:ed:d4:a0:59:73:17:18:9e:88:2a:95: 61:f1:39:c6:b8:b9:e1:7c:6c:d4:5c:9f:fa:d1:02: 8e:94:86:46:b9:27:ab:ba:35:f3:f1:ef:81:9b:3d: cb:86:57:8a:93:b2:c1:cf:85:1b:f7:b1:6a:1a:44: 11:f9:ba:b6:88:3e:1e:11:af:04:0c:b7:49:66:c5: 18:12:6e:db:0a:6b:a7:7d:89:6f:6c:04:33:dd:1b: 27:1b:fc:3b:24:53:60:af:b6:9f:0b:b2:5d:f8:e9: 99:8d:b2:f0:52:61:fe:ab:5c:65:22:eb:85:8d:7d: a4:a8:56:b4:7e:dd:1a:16:dd:a0:0b:a1:72:72:d1: e1:8e:1a:f3:07:e2:d5:16:5c:fc:83:c0:3f:e7:77: 7f:8f:cf:8e:4a:c0:5b:63:8c:da:b5:a2:47:40:0e: f7:cc:06:46:e8:9c:69:13:89:90:83:2a:cb:3b:3a: 07:34:da:20:79:18:d1:10:e8:6e:21:92:22:0f:f1: 29:9a:9b:6f:45:46:35:7a:bc:2e:04:0d:72:a4:d7: 5c:78:3d:ec:bf:59:b2:b8:3a:6d:ac:61:9c:2e:d6: a6:0b:84:59:1b:b3:f6:4d:19:d0:5e:db:c3:eb:6a: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CD:9F:56:33:70:5D:CC:9F:E5:BB:27:93:C1:BA:7A:FD:6F:CA:34 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption 01:56:f3:a8:ee:4c:71:66:70:8e:37:cb:40:8b:56:a9:a5:01: ea:04:1c:14:56:e3:b7:75:88:77:aa:ff:90:e2:dd:ab:0d:80: 03:a7:e7:b8:f8:fe:c9:8b:29:34:df:32:95:62:bd:57:20:89: 1a:c8:e6:60:f1:0c:07:2e:f3:1c:10:23:9d:a8:b1:12:35:f4: ac:68:31:ab:5b:9d:55:29:72:1e:8f:97:a7:ef:dd:3a:17:f4: c7:e0:82:2b:fd:ac:af:b8:d2:60:f9:97:38:d5:76:77:06:34: 75:93:6a:be:1c:ff:1f:68:93:92:04:2d:e4:c2:f3:72:0d:93: f5:ca:cf:00:e6:9d:1f:68:63:84:3c:53:e6:ef:01:3c:18:e6: 9e:e3:8f:ae:0e:8e:75:ae:47:ea:20:bc:44:13:03:4a:fd:a0: 12:ae:89:a8:8a:91:6a:7a:a0:5a:78:b5:d1:d6:f1:90:13:40: e2:ab:e8:32:5a:6a:58:a3:29:11:ba:69:91:a8:3f:84:3d:1c: 1c:d3:38:b0:3e:90:df:02:4a:23:6d:c0:9c:cb:36:cf:d9:8a: 81:f5:94:e7:19:0f:96:a9:3d:12:78:83:c1:4e:bf:12:19:75: de:5d:80:37:c0:e9:9d:a2:03:a6:b8:5f:fc:ca:99:17:75:fd: 2d:12:9a:23 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUdD2PEj1km57vXcfQw/2gAMhzUwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA1MjYwMjE0MDRaFw0yNzA1MjUwMjE5MDRaMDMxMTAvBgNV BAMTKEQxQ0Q5RjU2MzM3MDVEQ0M5RkU1QkIyNzkzQzFCQTdBRkQ2RkNBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz92wjMaj5icUbrbLX7aG6hYXt 1KBZcxcYnogqlWHxOca4ueF8bNRcn/rRAo6Uhka5J6u6NfPx74GbPcuGV4qTssHP hRv3sWoaRBH5uraIPh4RrwQMt0lmxRgSbtsKa6d9iW9sBDPdGycb/DskU2Cvtp8L sl346ZmNsvBSYf6rXGUi64WNfaSoVrR+3RoW3aALoXJy0eGOGvMH4tUWXPyDwD/n d3+Pz45KwFtjjNq1okdADvfMBkbonGkTiZCDKss7Ogc02iB5GNEQ6G4hkiIP8Sma m29FRjV6vC4EDXKk11x4Pey/WbK4Om2sYZwu1qYLhFkbs/ZNGdBe28PrauB1AgMB AAGjggILMIICBzAdBgNVHQ4EFgQU0c2fVjNwXcyf5bsnk8G6ev1vyjQwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzpD ADANBgkqhkiG9w0BAQsFAAOCAQEAAVbzqO5McWZwjjfLQItWqaUB6gQcFFbjt3WI d6r/kOLdqw2AA6fnuPj+yYspNN8ylWK9VyCJGsjmYPEMBy7zHBAjnaixEjX0rGgx q1udVSlyHo+Xp+/dOhf0x+CCK/2sr7jSYPmXONV2dwY0dZNqvhz/H2iTkgQt5MLz cg2T9crPAOadH2hjhDxT5u8BPBjmnuOPrg6Oda5H6iC8RBMDSv2gEq6JqIqRanqg Wni10dbxkBNA4qvoMlpqWKMpEbppkag/hD0cHNM4sD6Q3wJKI23AnMs2z9mKgfWU 5xkPlqk9EniDwU6/Ehl13l2AN8DpnaIDprhf/MqZF3X9LRKaIw== -----END CERTIFICATE-----Generated at Fri May 29 22:55:57 2026 by rpki-client