$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e36342e302f31382d3138203d3e2034383437.roa File: 35392e3130382e36342e302f31382d3138203d3e2034383437.roa (raw, json) Hash identifier: UZg0Pagp0Gw27BW9AwJK8jAPOGF7fxdA7nHKJO5oxaM= Subject key identifier: 93:BC:B5:09:5A:84:CF:4B:51:D6:73:50:E0:BA:63:31:7A:C9:B8:99 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 0B82B87310AD91BD298F52233A58C003183F3F5B Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e36342e302f31382d3138203d3e2034383437.roa Signing time: Sun 19 Apr 2026 10:06:58 +0000 ROA not before: Sun 19 Apr 2026 10:01:58 +0000 ROA not after: Sun 18 Apr 2027 10:06:58 +0000 asID: 4847 IP address blocks: 59.108.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:82:b8:73:10:ad:91:bd:29:8f:52:23:3a:58:c0:03:18:3f:3f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 19 10:01:58 2026 GMT Not After : Apr 18 10:06:58 2027 GMT Subject: CN=93BCB5095A84CF4B51D67350E0BA63317AC9B899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:25:80:f0:06:f0:01:6a:0e:ba:a5:1d:bf: 6a:e4:7f:62:28:02:40:8d:9a:8f:03:37:c5:90:c9: 82:48:56:a6:73:71:ad:05:a4:55:c7:13:e6:82:21: 56:59:f0:6c:e8:41:29:30:0b:f7:de:63:45:ce:9d: f9:5b:13:2a:d5:a1:14:43:6e:1e:75:dd:81:46:bc: 83:c6:34:0b:c2:c5:32:95:c4:fe:12:2d:15:a0:5e: 81:70:15:85:18:4e:a8:e0:f0:5d:42:ae:8f:c2:5a: 20:56:92:dd:67:a0:56:51:ef:bd:d7:bc:a3:ab:d6: 52:c7:7b:91:85:c9:85:4f:33:1e:f7:bc:32:f9:13: 5c:60:3c:40:d4:94:db:cf:b0:3a:82:d2:29:ca:48: ee:f5:a4:0d:c6:c0:1b:80:a3:06:51:c3:56:0a:b2: 59:15:07:fe:3c:67:6b:dd:58:b0:5b:ee:82:36:47: d8:1a:23:2a:72:a3:d4:8f:41:a3:0e:b6:58:ac:e2: ce:73:f0:db:22:96:0c:eb:54:bc:a1:02:f4:ec:3b: 5a:22:5e:a1:0d:ff:86:12:f6:84:b9:ec:03:e0:25: 70:de:da:c2:c7:2a:d1:ab:64:f5:0d:f3:81:d6:ce: ed:ef:ef:59:72:39:2b:89:d0:7f:88:80:d9:75:ca: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BC:B5:09:5A:84:CF:4B:51:D6:73:50:E0:BA:63:31:7A:C9:B8:99 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/35392e3130382e36342e302f31382d3138203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.108.64.0/18 Signature Algorithm: sha256WithRSAEncryption b5:e9:8d:80:a9:e2:6f:ad:cd:37:47:4c:8c:66:0b:de:d2:c0: 10:9f:ce:4b:0f:7b:db:7d:c2:44:0f:24:ba:0e:a6:d2:fd:11: f3:c0:e2:39:a8:0d:8d:0f:15:10:0f:38:d8:32:c2:0c:f1:c9: e1:2f:f0:71:dc:7f:5d:63:1a:99:2d:a0:7e:90:9b:be:ed:ff: b3:d8:79:65:27:33:28:b2:34:ea:5b:56:c1:71:83:4b:f6:58: 23:5a:20:61:24:fe:b1:5a:48:08:8e:64:ad:e6:34:13:ce:7e: 5b:43:30:90:5e:fa:1d:52:9e:92:fb:cd:0b:51:e8:ec:42:24: 37:72:86:1e:a3:cd:10:c2:4b:f4:4f:be:1e:41:92:55:2d:27: 14:db:8e:b2:4c:6e:15:c7:6d:60:75:f3:ae:9d:28:40:72:c0: 4d:51:99:84:04:02:ac:61:7c:46:af:ed:aa:85:7c:26:76:9a: f0:18:fa:5d:7b:d3:30:26:69:86:9a:68:78:bf:9c:7d:ff:5e: d9:ac:7a:90:23:d1:c1:07:9f:14:c0:ac:4a:81:a5:de:c5:7d: 0e:43:34:d0:ad:16:48:9e:75:5d:11:ce:c9:51:96:f9:3a:3c: 72:b5:af:24:ec:f3:e3:9c:30:98:7f:89:c9:91:ab:9f:bd:9d: 4d:e3:b8:a9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUC4K4cxCtkb0pj1IjOljAAxg/P1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTkxMDAxNThaFw0yNzA0MTgxMDA2NThaMDMxMTAvBgNV BAMTKDkzQkNCNTA5NUE4NENGNEI1MUQ2NzM1MEUwQkE2MzMxN0FDOUI4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DiWA8AbwAWoOuqUdv2rkf2Io AkCNmo8DN8WQyYJIVqZzca0FpFXHE+aCIVZZ8GzoQSkwC/feY0XOnflbEyrVoRRD bh513YFGvIPGNAvCxTKVxP4SLRWgXoFwFYUYTqjg8F1Cro/CWiBWkt1noFZR773X vKOr1lLHe5GFyYVPMx73vDL5E1xgPEDUlNvPsDqC0inKSO71pA3GwBuAowZRw1YK slkVB/48Z2vdWLBb7oI2R9gaIypyo9SPQaMOtlis4s5z8NsilgzrVLyhAvTsO1oi XqEN/4YS9oS57APgJXDe2sLHKtGrZPUN84HWzu3v71lyOSuJ0H+IgNl1ypJDAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUk7y1CVqEz0tR1nNQ4LpjMXrJuJkwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzUzOTJlMzEzMDM4 MmUzNjM0MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAY7bEAwDQYJKoZIhvcNAQELBQADggEBALXpjYCp4m+tzTdHTIxmC97SwBCfzksP e9t9wkQPJLoOptL9EfPA4jmoDY0PFRAPONgywgzxyeEv8HHcf11jGpktoH6Qm77t /7PYeWUnMyiyNOpbVsFxg0v2WCNaIGEk/rFaSAiOZK3mNBPOfltDMJBe+h1SnpL7 zQtR6OxCJDdyhh6jzRDCS/RPvh5BklUtJxTbjrJMbhXHbWB1866dKEBywE1RmYQE AqxhfEav7aqFfCZ2mvAY+l170zAmaYaaaHi/nH3/XtmsepAj0cEHnxTArEqBpd7F fQ5DNNCtFkiedV0RzslRlvk6PHK1ryTs8+OcMJh/icmRq5+9nU3juKk= -----END CERTIFICATE-----Generated at Mon Apr 27 13:46:38 2026 by rpki-client