$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2033343931.roa File: 35392e3130372e3132382e302f31372d3234203d3e2033343931.roa (raw, json) Hash identifier: gXi3318ODjNnkAY7UzwflTI+emRjx6OdjoL3gTwfaxc= Subject key identifier: C8:0F:9C:9F:90:BC:72:5F:B3:32:04:CB:FA:08:04:E6:9B:9C:38:0D Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 52E8BF9D34EAA1E7CE9251229E19BA60072A00AC Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2033343931.roa Signing time: Tue 26 May 2026 02:19:04 +0000 ROA not before: Tue 26 May 2026 02:14:04 +0000 ROA not after: Tue 25 May 2027 02:19:04 +0000 asID: 3491 IP address blocks: 59.107.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e8:bf:9d:34:ea:a1:e7:ce:92:51:22:9e:19:ba:60:07:2a:00:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: May 26 02:14:04 2026 GMT Not After : May 25 02:19:04 2027 GMT Subject: CN=C80F9C9F90BC725FB33204CBFA0804E69B9C380D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:be:17:ad:26:5e:5c:48:db:25:ca:62:6c: bc:19:d7:49:71:6b:5c:04:0a:1c:89:ce:fc:6e:f5: ad:ed:01:aa:4c:ea:34:28:eb:05:ff:14:60:ef:97: d8:2f:aa:20:8f:a7:42:22:6f:8b:ae:d5:c8:54:25: 20:2f:37:24:b3:04:ed:ad:bf:17:0d:72:7b:83:37: a7:75:93:39:2d:26:3d:d7:95:26:f1:d4:77:94:c7: 47:a2:df:09:8e:ef:04:ee:05:1b:68:7f:85:28:13: 6b:db:20:0a:52:e5:3a:04:c4:04:62:83:43:c2:88: 92:0f:d2:41:7e:d2:c7:a8:05:0e:3e:a7:0b:f4:56: 18:1c:11:eb:b1:8b:6b:9e:fb:47:0b:bd:fc:f0:74: 21:68:42:eb:ab:8e:24:40:01:12:84:5e:d2:c6:71: 98:97:4d:a2:99:dc:17:32:eb:6e:a3:b8:28:2c:39: 77:47:94:13:fe:2c:48:be:28:7a:a8:bf:d7:e0:3f: 89:91:09:de:e5:81:d3:67:7e:cd:ef:26:0b:45:22: 34:8c:6f:3c:cf:5c:97:fc:39:bf:4d:e4:0a:09:79: 45:52:9c:ba:88:12:2b:8e:f1:eb:43:0f:85:19:ce: b0:8f:0c:e5:56:55:27:6d:94:8c:d8:db:0c:4f:43: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0F:9C:9F:90:BC:72:5F:B3:32:04:CB:FA:08:04:E6:9B:9C:38:0D X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2033343931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.107.128.0/17 Signature Algorithm: sha256WithRSAEncryption 11:ce:c1:43:8e:17:16:b2:37:f8:b8:53:b1:96:7b:c8:e1:23: b1:97:7d:63:bc:09:6d:b1:56:05:83:a5:db:70:23:06:66:d5: 2b:66:be:cc:46:ee:39:f6:ee:3b:66:1e:c4:61:c3:ee:7c:2b: 7d:db:3d:34:13:e7:34:42:9f:fb:20:8a:b7:62:f5:91:d0:0b: 9c:0b:6b:34:d7:1e:6f:e0:46:6c:20:14:96:52:63:01:33:42: 0f:a0:c8:f1:0f:78:5f:d8:0e:7a:e6:4c:d7:61:ef:58:1c:e0: fe:73:b2:ae:60:26:e6:de:48:c6:81:9f:4e:70:1b:b9:ab:1f: 06:6a:9f:29:32:e3:40:ce:af:87:28:fd:b8:71:35:8a:4f:db: 17:81:e6:07:0f:24:f3:36:bc:9c:1c:2f:1e:50:d0:6e:16:03: 51:5c:68:07:e5:f0:c8:6d:14:ee:f3:1f:13:74:cb:fb:c2:31: 42:6a:bd:75:12:63:d7:ab:9b:43:a7:c6:4e:97:06:1e:25:76: 59:58:0a:56:87:2f:d2:35:97:e3:f7:0a:bd:91:10:3b:2c:14: 11:a4:d8:b8:59:d9:f8:b0:90:e2:a4:6b:2c:68:6e:f6:a8:30: 36:d3:78:a6:2e:a5:dd:f5:75:b3:c4:b7:1c:06:0e:75:11:f8: a0:9d:d2:f5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUui/nTTqoefOklEinhm6YAcqAKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA1MjYwMjE0MDRaFw0yNzA1MjUwMjE5MDRaMDMxMTAvBgNV BAMTKEM4MEY5QzlGOTBCQzcyNUZCMzMyMDRDQkZBMDgwNEU2OUI5QzM4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEL4XrSZeXEjbJcpibLwZ10lx a1wEChyJzvxu9a3tAapM6jQo6wX/FGDvl9gvqiCPp0Iib4uu1chUJSAvNySzBO2t vxcNcnuDN6d1kzktJj3XlSbx1HeUx0ei3wmO7wTuBRtof4UoE2vbIApS5ToExARi g0PCiJIP0kF+0seoBQ4+pwv0VhgcEeuxi2ue+0cLvfzwdCFoQuurjiRAARKEXtLG cZiXTaKZ3Bcy626juCgsOXdHlBP+LEi+KHqov9fgP4mRCd7lgdNnfs3vJgtFIjSM bzzPXJf8Ob9N5AoJeUVSnLqIEiuO8etDD4UZzrCPDOVWVSdtlIzY2wxPQ5AXAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUyA+cn5C8cl+zMgTL+ggE5pucOA0wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzOTJlMzEzMDM3 MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMzM0MzkzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBztrgDANBgkqhkiG9w0BAQsFAAOCAQEAEc7BQ44XFrI3+LhTsZZ7yOEjsZd9 Y7wJbbFWBYOl23AjBmbVK2a+zEbuOfbuO2YexGHD7nwrfds9NBPnNEKf+yCKt2L1 kdALnAtrNNceb+BGbCAUllJjATNCD6DI8Q94X9gOeuZM12HvWBzg/nOyrmAm5t5I xoGfTnAbuasfBmqfKTLjQM6vhyj9uHE1ik/bF4HmBw8k8za8nBwvHlDQbhYDUVxo B+XwyG0U7vMfE3TL+8IxQmq9dRJj16ubQ6fGTpcGHiV2WVgKVocv0jWX4/cKvZEQ OywUEaTYuFnZ+LCQ4qRrLGhu9qgwNtN4pi6l3fV1s8S3HAYOdRH4oJ3S9Q== -----END CERTIFICATE-----Generated at Fri May 29 22:56:35 2026 by rpki-client