$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2039333034.roa File: 35392e3130372e3132382e302f31372d3234203d3e2039333034.roa (raw, json) Hash identifier: 024I6lCKIEHYhUwCC70flkZtYM7WMXlg+P24rTMcrk8= Subject key identifier: 34:D8:D9:9C:EB:33:1C:AD:DD:48:13:AD:21:FC:E8:6E:FA:40:35:5F Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 294E551CA7632FE3AD59C5AC481C184E1DE0CA24 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2039333034.roa Signing time: Tue 26 May 2026 02:19:03 +0000 ROA not before: Tue 26 May 2026 02:14:03 +0000 ROA not after: Tue 25 May 2027 02:19:03 +0000 asID: 9304 IP address blocks: 59.107.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4e:55:1c:a7:63:2f:e3:ad:59:c5:ac:48:1c:18:4e:1d:e0:ca:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: May 26 02:14:03 2026 GMT Not After : May 25 02:19:03 2027 GMT Subject: CN=34D8D99CEB331CADDD4813AD21FCE86EFA40355F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:3b:f5:63:b4:25:6d:66:2f:15:e6:91:f5: bc:7a:81:59:23:fc:6d:6d:bf:37:60:e3:b5:95:8d: 51:a3:b8:96:c1:c8:c4:90:54:df:72:73:57:d2:7a: 8c:23:70:36:e7:8d:26:ff:ea:be:a3:72:47:6d:47: 82:11:00:bb:0b:c0:0e:b9:19:7b:7e:36:d5:b4:83: 70:a5:d6:d4:68:ca:b7:74:db:7a:f8:d8:c5:42:ab: 62:05:1f:42:ff:14:f7:65:53:65:97:ff:9b:92:0a: 37:0b:f2:44:18:7a:cc:fe:43:cf:c5:8b:ea:f5:ab: f6:c1:d9:3b:51:ff:8a:88:f5:2e:fc:e7:0e:49:e5: 4f:8f:81:a9:2a:06:aa:eb:1c:58:59:1a:cd:9c:ab: 07:be:23:e6:45:d3:e2:cb:35:68:58:17:dd:2a:42: 53:e7:ca:be:3d:03:4f:c2:fe:2c:97:c5:fa:61:3e: 3c:3f:91:01:c1:96:27:f7:e8:60:62:21:15:b6:fe: 5e:41:37:c2:5c:c8:b0:9a:fa:27:46:75:65:1b:fe: 7d:62:14:f5:2c:fb:d5:c8:82:e6:87:19:c5:5f:e0: 9c:52:0f:b2:6e:b4:7a:2f:c0:1f:be:bf:a4:5f:99: 32:9e:ff:99:04:ef:f6:8b:e8:34:44:0a:5b:f5:0d: 2a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D8:D9:9C:EB:33:1C:AD:DD:48:13:AD:21:FC:E8:6E:FA:40:35:5F X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e3132382e302f31372d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.107.128.0/17 Signature Algorithm: sha256WithRSAEncryption a8:28:2f:bf:98:64:33:47:3d:37:c8:90:e7:c4:55:f8:0e:47: ef:61:98:5a:49:e7:31:54:34:e6:31:8b:67:f7:6d:2b:98:33: f2:13:c7:95:34:ae:98:b4:98:7a:99:33:6d:59:a7:17:75:3b: 8f:08:a5:db:57:e0:a8:bc:f9:3f:f3:bc:11:17:15:66:19:69: 16:a8:99:e9:61:c5:42:59:0a:1d:0c:04:66:e6:7b:62:8c:6a: c0:b7:f2:f5:ea:23:21:16:3a:0f:b7:92:e1:26:ab:19:0d:f1: e5:94:14:e9:59:85:1e:0d:6b:02:d9:ed:26:b0:ed:43:c9:70: 04:d3:75:f4:d5:5d:33:36:98:20:1f:31:95:4f:19:55:94:6c: d4:ee:26:d4:6c:46:93:a0:ec:56:60:64:a0:d5:2d:c5:b2:6c: 66:5f:ac:2f:b3:d0:fb:23:a8:6c:8f:e3:f2:7d:a6:ca:c3:b3: 1d:03:bb:fd:99:3d:6d:91:29:bd:8e:a6:ed:c0:69:19:c2:8c: 5c:11:b5:d2:46:6b:66:74:98:a2:7b:c8:38:f0:b8:64:91:83: ec:77:62:5e:ae:aa:3e:44:29:db:2b:e2:9a:10:e2:8b:76:cb: 59:fc:e5:2c:a6:fb:9d:bf:2d:a2:32:12:c6:1a:33:76:64:97: be:97:44:8e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKU5VHKdjL+OtWcWsSBwYTh3gyiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA1MjYwMjE0MDNaFw0yNzA1MjUwMjE5MDNaMDMxMTAvBgNV BAMTKDM0RDhEOTlDRUIzMzFDQURERDQ4MTNBRDIxRkNFODZFRkE0MDM1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2Dv1Y7QlbWYvFeaR9bx6gVkj /G1tvzdg47WVjVGjuJbByMSQVN9yc1fSeowjcDbnjSb/6r6jckdtR4IRALsLwA65 GXt+NtW0g3Cl1tRoyrd023r42MVCq2IFH0L/FPdlU2WX/5uSCjcL8kQYesz+Q8/F i+r1q/bB2TtR/4qI9S785w5J5U+PgakqBqrrHFhZGs2cqwe+I+ZF0+LLNWhYF90q QlPnyr49A0/C/iyXxfphPjw/kQHBlif36GBiIRW2/l5BN8JcyLCa+idGdWUb/n1i FPUs+9XIguaHGcVf4JxSD7JutHovwB++v6RfmTKe/5kE7/aL6DREClv1DSrdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUNNjZnOszHK3dSBOtIfzobvpANV8wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzOTJlMzEzMDM3 MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBztrgDANBgkqhkiG9w0BAQsFAAOCAQEAqCgvv5hkM0c9N8iQ58RV+A5H72GY WknnMVQ05jGLZ/dtK5gz8hPHlTSumLSYepkzbVmnF3U7jwil21fgqLz5P/O8ERcV ZhlpFqiZ6WHFQlkKHQwEZuZ7YoxqwLfy9eojIRY6D7eS4SarGQ3x5ZQU6VmFHg1r AtntJrDtQ8lwBNN19NVdMzaYIB8xlU8ZVZRs1O4m1GxGk6DsVmBkoNUtxbJsZl+s L7PQ+yOobI/j8n2mysOzHQO7/Zk9bZEpvY6m7cBpGcKMXBG10kZrZnSYonvIOPC4 ZJGD7HdiXq6qPkQp2yvimhDii3bLWfzlLKb7nb8tojISxhozdmSXvpdEjg== -----END CERTIFICATE-----Generated at Fri May 29 22:56:35 2026 by rpki-client