$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130372e302f32342d3234203d3e203435303632.roa File: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (raw, json) Hash identifier: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w= Subject key identifier: E9:93:4A:A1:77:8C:0D:DC:84:1D:26:AB:8E:F2:08:06:07:65:45:AB Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 7C00E3857E7C5592080BF634D1E27D3FD06171D8 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130372e302f32342d3234203d3e203435303632.roa Signing time: Fri 15 May 2026 02:42:13 +0000 ROA not before: Fri 15 May 2026 02:37:13 +0000 ROA not after: Fri 14 May 2027 02:42:13 +0000 asID: 45062 IP address blocks: 59.111.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:00:e3:85:7e:7c:55:92:08:0b:f6:34:d1:e2:7d:3f:d0:61:71:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: May 15 02:37:13 2026 GMT Not After : May 14 02:42:13 2027 GMT Subject: CN=E9934AA1778C0DDC841D26AB8EF20806076545AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:72:d8:c6:ec:d4:ba:09:04:62:09:cf:71: 45:37:66:cc:76:fc:5c:57:54:34:21:16:06:60:bc: d0:aa:d7:02:9f:d7:67:22:da:17:6a:3c:bf:d1:64: 20:34:69:52:84:ca:ab:38:ab:9d:60:c2:d0:45:8d: 51:04:88:e7:dc:ef:76:0b:6e:e9:2b:9d:07:44:3b: f7:96:37:b8:a6:63:f0:8c:e6:00:cb:1e:a3:f0:b4: 05:bd:f5:67:0f:5c:d1:66:86:7b:93:0f:63:31:4e: a2:fd:7b:97:0d:04:b4:92:e9:4e:e0:ee:13:db:b7: cd:27:67:66:a0:3b:f4:ad:c4:69:eb:fb:19:82:23: 10:1f:d0:72:61:49:9e:7a:18:79:a9:2c:f2:ad:80: fd:90:96:16:50:9b:b5:f2:1b:ff:ae:7d:b9:da:63: 33:1e:5e:40:8d:2d:42:55:05:36:46:23:84:5b:8b: 94:cf:34:87:2b:af:01:12:9d:0e:9c:e0:ad:af:24: b9:d8:19:40:5e:b7:d7:d5:ad:97:d1:be:f5:51:7c: a4:53:15:63:c6:0f:58:5c:6a:b2:5f:78:86:8d:95: 28:0c:2d:f7:36:c2:bf:f7:8e:be:9b:2d:48:e6:b5: ab:3e:f3:1f:e4:1c:72:15:87:2c:85:66:d1:f5:4b: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:4A:A1:77:8C:0D:DC:84:1D:26:AB:8E:F2:08:06:07:65:45:AB X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130372e302f32342d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.111.107.0/24 Signature Algorithm: sha256WithRSAEncryption 82:6b:3a:35:c8:5f:41:68:4a:f9:e1:7c:69:30:d6:ba:23:93: 77:3d:12:73:39:40:f0:02:76:a2:90:44:86:08:04:6a:f6:e1: d6:30:82:a9:cd:25:ea:61:50:eb:a9:df:ab:8c:1e:87:76:cf: 13:ba:51:4f:d4:b4:b8:44:44:49:c7:8c:17:ff:f7:a3:d9:01: 28:ac:c2:03:29:41:68:1f:fa:e0:14:76:8d:a3:41:32:2a:dc: 38:86:9d:dc:02:b8:aa:75:ad:54:6a:1b:8c:34:d2:5c:f2:30: 4d:f5:d2:62:63:47:da:6f:57:6f:d6:d6:98:4a:a1:10:4f:41: aa:4b:30:41:ef:76:6d:1c:d6:06:e5:c3:76:99:62:aa:23:0a: 84:c2:ca:f2:8f:ea:9e:be:fe:5a:71:7a:80:6f:86:f2:37:ef: a2:51:f9:2e:23:29:8e:ad:cf:76:37:b4:34:a9:05:db:9c:77: 2a:bc:1b:e5:79:45:9a:00:0b:36:fa:f7:64:7e:6c:e4:43:d7: bf:a8:ba:e4:bf:e0:b9:4b:b5:29:be:f9:78:af:c3:9a:f5:ae: 13:2b:ca:1c:ab:11:fe:25:22:b0:5b:59:2b:5f:26:6c:fd:1d: ff:83:f4:0d:44:74:45:f1:8f:fe:ac:d9:52:95:c5:c7:59:e7: e3:e0:48:97 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfADjhX58VZIIC/Y00eJ9P9BhcdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA1MTUwMjM3MTNaFw0yNzA1MTQwMjQyMTNaMDMxMTAvBgNV BAMTKEU5OTM0QUExNzc4QzBEREM4NDFEMjZBQjhFRjIwODA2MDc2NTQ1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUnLYxuzUugkEYgnPcUU3Zsx2 /FxXVDQhFgZgvNCq1wKf12ci2hdqPL/RZCA0aVKEyqs4q51gwtBFjVEEiOfc73YL bukrnQdEO/eWN7imY/CM5gDLHqPwtAW99WcPXNFmhnuTD2MxTqL9e5cNBLSS6U7g 7hPbt80nZ2agO/StxGnr+xmCIxAf0HJhSZ56GHmpLPKtgP2QlhZQm7XyG/+ufbna YzMeXkCNLUJVBTZGI4Rbi5TPNIcrrwESnQ6c4K2vJLnYGUBet9fVrZfRvvVRfKRT FWPGD1hcarJfeIaNlSgMLfc2wr/3jr6bLUjmtas+8x/kHHIVhyyFZtH1S//XAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU6ZNKoXeMDdyEHSarjvIIBgdlRaswHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5NTcxMDIxMS8wLzM1MzkyZTMxMzEz MTJlMzEzMDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADtvazANBgkqhkiG9w0BAQsFAAOCAQEAgms6NchfQWhK+eF8aTDWuiOT dz0SczlA8AJ2opBEhggEavbh1jCCqc0l6mFQ66nfq4weh3bPE7pRT9S0uERESceM F//3o9kBKKzCAylBaB/64BR2jaNBMircOIad3AK4qnWtVGobjDTSXPIwTfXSYmNH 2m9Xb9bWmEqhEE9BqkswQe92bRzWBuXDdpliqiMKhMLK8o/qnr7+WnF6gG+G8jfv olH5LiMpjq3Pdje0NKkF25x3Krwb5XlFmgALNvr3ZH5s5EPXv6i65L/guUu1Kb75 eK/DmvWuEyvKHKsR/iUisFtZK18mbP0d/4P0DUR0RfGP/qzZUpXFx1nn4+BIlw== -----END CERTIFICATE-----Generated at Fri May 29 23:53:07 2026 by rpki-client