$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130342e302f32332d3234203d3e203435303632.roa File: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (raw, json) Hash identifier: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784= Subject key identifier: 53:D6:5B:13:86:81:4E:75:E3:CA:4C:AB:AC:60:D5:71:12:AD:34:33 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 1E24A659D8919156C378BDD4B12A8F81C610A839 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130342e302f32332d3234203d3e203435303632.roa Signing time: Fri 15 May 2026 02:42:13 +0000 ROA not before: Fri 15 May 2026 02:37:13 +0000 ROA not after: Fri 14 May 2027 02:42:13 +0000 asID: 45062 IP address blocks: 59.111.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:24:a6:59:d8:91:91:56:c3:78:bd:d4:b1:2a:8f:81:c6:10:a8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: May 15 02:37:13 2026 GMT Not After : May 14 02:42:13 2027 GMT Subject: CN=53D65B1386814E75E3CA4CABAC60D57112AD3433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:e1:24:e2:7e:c1:18:98:16:2d:c5:df:a0: db:a3:ea:79:d5:2e:c4:86:32:98:e8:73:98:47:c0: 27:cc:49:bf:4b:09:f3:b0:b5:d8:3a:49:a4:2f:18: 33:70:93:f9:fe:18:bb:b5:a5:7e:1b:7e:66:20:e9: 92:90:d9:16:2e:8d:e8:c7:3e:eb:af:6e:22:f6:0d: f9:8a:a1:f4:cb:a2:cd:25:10:c4:bf:e3:38:d2:fd: 0e:82:60:18:62:c7:74:92:4a:13:29:60:16:b6:76: b4:83:87:cf:43:17:dd:86:bd:66:5b:22:c2:dd:d9: a5:fe:bf:be:71:f8:2d:c6:c8:24:5d:6f:1b:11:e4: 32:f0:af:7c:d6:ed:1f:bf:23:23:1e:6a:a1:0e:a2: a1:cc:05:cf:96:7f:17:11:07:a6:19:f3:ad:b9:1f: ad:b8:0e:0d:2e:18:75:80:39:08:75:48:91:50:ee: 2f:16:aa:6e:58:b4:09:78:c3:f7:d0:23:64:b3:1e: ae:61:04:4a:f2:98:42:57:3a:a1:35:8e:52:9a:67: 5a:20:8b:67:45:d0:2e:63:9b:6c:8d:9e:5b:c1:f7: 46:7a:01:73:29:81:52:c9:91:95:46:66:30:c2:fd: 6f:3a:bc:c8:19:4d:af:d6:d4:7f:67:24:df:4c:95: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:5B:13:86:81:4E:75:E3:CA:4C:AB:AC:60:D5:71:12:AD:34:33 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130342e302f32332d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.111.104.0/23 Signature Algorithm: sha256WithRSAEncryption 40:3c:23:9c:cb:13:58:9e:e6:38:ee:56:67:82:57:64:0a:79: 49:bc:d7:d4:cc:e8:aa:54:f1:12:16:29:b6:88:88:2b:f5:c5: 09:de:d3:84:79:ee:0d:fd:c4:a0:87:28:c2:49:04:00:7f:64: 07:2e:67:08:e6:00:e4:44:a7:a4:04:ff:30:de:6e:8a:80:ca: 5f:89:85:b2:c3:09:91:ea:37:b1:43:bc:96:49:7e:2b:53:fc: 94:d0:b2:89:a9:05:ab:86:ff:71:46:d3:29:a0:23:73:b1:96: 1f:3a:05:8a:46:83:10:93:b5:f0:8a:ea:fe:3d:dd:44:eb:2b: 37:b2:77:97:61:4b:9e:5f:b6:84:58:68:24:72:91:e6:31:82: 06:a9:4d:f2:43:05:51:11:81:ea:38:a8:a7:71:e6:7b:ac:d7: 6e:c7:60:b2:4c:da:68:a8:3b:18:7a:d3:5c:3a:e8:d8:ec:dd: 39:f2:57:8f:89:11:a0:c4:cd:93:24:85:79:e0:9b:97:ce:ca: a5:0f:55:7f:6f:72:ea:f5:aa:06:08:06:1a:4b:2d:6b:d9:e9: 77:ca:cf:5b:02:c7:35:70:c7:4e:33:1d:88:98:a8:d7:14:60: ae:45:04:ee:2d:6e:e2:8f:85:2c:c7:d4:b1:5a:da:4b:7c:0b: 7b:d1:d1:6f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHiSmWdiRkVbDeL3UsSqPgcYQqDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA1MTUwMjM3MTNaFw0yNzA1MTQwMjQyMTNaMDMxMTAvBgNV BAMTKDUzRDY1QjEzODY4MTRFNzVFM0NBNENBQkFDNjBENTcxMTJBRDM0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyOEk4n7BGJgWLcXfoNuj6nnV LsSGMpjoc5hHwCfMSb9LCfOwtdg6SaQvGDNwk/n+GLu1pX4bfmYg6ZKQ2RYujejH PuuvbiL2DfmKofTLos0lEMS/4zjS/Q6CYBhix3SSShMpYBa2drSDh89DF92GvWZb IsLd2aX+v75x+C3GyCRdbxsR5DLwr3zW7R+/IyMeaqEOoqHMBc+WfxcRB6YZ8625 H624Dg0uGHWAOQh1SJFQ7i8Wqm5YtAl4w/fQI2SzHq5hBErymEJXOqE1jlKaZ1og i2dF0C5jm2yNnlvB90Z6AXMpgVLJkZVGZjDC/W86vMgZTa/W1H9nJN9MlVkDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUU9ZbE4aBTnXjykyrrGDVcRKtNDMwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5NTcxMDIxMS8wLzM1MzkyZTMxMzEz MTJlMzEzMDM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEATtvaDANBgkqhkiG9w0BAQsFAAOCAQEAQDwjnMsTWJ7mOO5WZ4JXZAp5 SbzX1MzoqlTxEhYptoiIK/XFCd7ThHnuDf3EoIcowkkEAH9kBy5nCOYA5ESnpAT/ MN5uioDKX4mFssMJkeo3sUO8lkl+K1P8lNCyiakFq4b/cUbTKaAjc7GWHzoFikaD EJO18Irq/j3dROsrN7J3l2FLnl+2hFhoJHKR5jGCBqlN8kMFURGB6jiop3Hme6zX bsdgskzaaKg7GHrTXDro2OzdOfJXj4kRoMTNkySFeeCbl87KpQ9Vf29y6vWqBggG Gksta9npd8rPWwLHNXDHTjMdiJio1xRgrkUE7i1u4o+FLMfUsVraS3wLe9HRbw== -----END CERTIFICATE-----Generated at Fri May 29 23:52:42 2026 by rpki-client