$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e33322e302f31392d3139203d3e2034383437.roa File: 35392e3130382e33322e302f31392d3139203d3e2034383437.roa (raw, json) Hash identifier: dxgLrIfF64T7S4w49qMJsSs0eRb10ZprN7ZucyGPm+M= Subject key identifier: 54:05:8F:4F:BF:39:F3:74:1E:BB:1A:C0:39:57:C2:49:C2:5B:6E:50 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 3416A981C485348EABF388C9EDB3F956897D8C3D Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e33322e302f31392d3139203d3e2034383437.roa Signing time: Sun 19 Apr 2026 10:04:00 +0000 ROA not before: Sun 19 Apr 2026 09:59:00 +0000 ROA not after: Sun 18 Apr 2027 10:04:00 +0000 asID: 4847 IP address blocks: 59.108.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:16:a9:81:c4:85:34:8e:ab:f3:88:c9:ed:b3:f9:56:89:7d:8c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 19 09:59:00 2026 GMT Not After : Apr 18 10:04:00 2027 GMT Subject: CN=54058F4FBF39F3741EBB1AC03957C249C25B6E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:5d:da:17:77:34:08:5d:86:f1:cf:e3:07: 63:8e:97:f4:1b:d6:4f:5b:95:e7:31:81:a0:bf:4e: 64:99:99:98:85:aa:2a:ec:8a:c9:34:13:90:b9:8d: 9f:58:e6:d4:74:e2:46:6e:e1:fd:b6:4f:c7:0f:be: 67:82:4a:9b:f7:fc:e9:8f:2a:57:9e:84:d3:82:7a: 1a:2b:cd:ee:ee:f8:b0:03:a1:d3:06:d3:aa:5b:87: 82:4f:8e:b6:d1:ee:c4:6d:04:d8:8f:0c:b4:61:f2: 5f:80:07:ad:be:41:14:da:a0:a5:d8:e6:70:a3:0d: 9d:a6:31:47:6b:f3:5b:a5:74:6e:ca:35:6f:fa:57: d8:1b:87:8d:61:0a:18:db:44:07:a9:c8:48:ac:69: 96:3f:0e:4d:47:54:b1:9b:69:19:f4:e9:46:be:b2: ab:00:2b:48:be:d4:9a:92:55:d1:b9:de:b9:0c:20: 01:c2:01:cf:3a:03:71:48:b0:f0:ad:ef:60:ab:ab: 50:06:01:d3:9f:d8:4a:07:1f:55:64:d6:84:2a:1d: 1d:71:3f:bb:07:26:9e:ef:ee:74:94:fe:2c:dc:d6: 55:52:99:02:42:7e:37:50:e2:3a:45:53:7a:97:19: a7:7b:d5:8a:45:73:0d:27:bf:72:cf:58:ba:50:4a: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:05:8F:4F:BF:39:F3:74:1E:BB:1A:C0:39:57:C2:49:C2:5B:6E:50 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e33322e302f31392d3139203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.108.32.0/19 Signature Algorithm: sha256WithRSAEncryption 45:34:b8:85:53:0c:51:91:60:39:ce:b4:ec:d6:21:8d:59:6b: 2f:94:bd:a1:c7:84:58:e2:14:ad:ef:77:e8:df:33:e8:2d:34: 6b:d0:df:9c:2a:43:ca:6e:e3:53:01:d0:3e:76:37:92:02:e2: ff:94:da:f3:93:95:c1:e7:4c:b5:5c:fd:b1:ff:f6:32:1a:43: a0:76:5a:c5:a3:8a:ec:d7:66:6f:5b:f9:89:a0:51:e4:82:6e: da:c7:f8:c4:bf:86:b3:d9:0c:f2:94:3b:01:dd:8a:0e:63:6d: 06:c5:a2:ca:a4:02:4e:3e:f1:41:ef:b1:05:ed:c7:5e:97:f7: 4f:47:66:64:45:42:5a:8c:b5:19:6c:72:b6:11:1b:c1:a7:56: 88:e9:89:0a:45:f7:23:17:8d:88:90:d6:74:b2:0a:87:0e:6f: 0d:21:26:62:88:79:ae:62:d3:5f:cd:52:56:cc:46:79:6f:37: 15:1b:03:1e:79:13:b2:37:ff:14:5f:3e:a1:ac:b3:44:a7:8c: e9:57:2c:54:58:4f:d8:94:ba:5f:04:bf:9e:8a:43:8d:a8:62: 7f:5b:e4:b1:63:b1:65:83:ea:e7:b0:0b:8f:4e:b2:41:1e:f6: 6e:4e:28:d2:21:7f:48:c5:cb:68:b8:57:63:0b:d2:b9:79:be: a9:3a:67:18 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUNBapgcSFNI6r84jJ7bP5Vol9jD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTkwOTU5MDBaFw0yNzA0MTgxMDA0MDBaMDMxMTAvBgNV BAMTKDU0MDU4RjRGQkYzOUYzNzQxRUJCMUFDMDM5NTdDMjQ5QzI1QjZFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcl3aF3c0CF2G8c/jB2OOl/Qb 1k9blecxgaC/TmSZmZiFqirsisk0E5C5jZ9Y5tR04kZu4f22T8cPvmeCSpv3/OmP KleehNOCehorze7u+LADodMG06pbh4JPjrbR7sRtBNiPDLRh8l+AB62+QRTaoKXY 5nCjDZ2mMUdr81uldG7KNW/6V9gbh41hChjbRAepyEisaZY/Dk1HVLGbaRn06Ua+ sqsAK0i+1JqSVdG53rkMIAHCAc86A3FIsPCt72Crq1AGAdOf2EoHH1Vk1oQqHR1x P7sHJp7v7nSU/izc1lVSmQJCfjdQ4jpFU3qXGad71YpFcw0nv3LPWLpQSpaDAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUVAWPT78583QeuxrAOVfCScJbblAwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzUzOTJlMzEzMDM4 MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAU7bCAwDQYJKoZIhvcNAQELBQADggEBAEU0uIVTDFGRYDnOtOzWIY1Zay+UvaHH hFjiFK3vd+jfM+gtNGvQ35wqQ8pu41MB0D52N5IC4v+U2vOTlcHnTLVc/bH/9jIa Q6B2WsWjiuzXZm9b+YmgUeSCbtrH+MS/hrPZDPKUOwHdig5jbQbFosqkAk4+8UHv sQXtx16X909HZmRFQlqMtRlscrYRG8GnVojpiQpF9yMXjYiQ1nSyCocObw0hJmKI ea5i01/NUlbMRnlvNxUbAx55E7I3/xRfPqGss0SnjOlXLFRYT9iUul8Ev56KQ42o Yn9b5LFjsWWD6uewC49OskEe9m5OKNIhf0jFy2i4V2ML0rl5vqk6Zxg= -----END CERTIFICATE-----Generated at Mon Apr 27 13:46:37 2026 by rpki-client