$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e39362e302f31392d3234203d3e203435303632.roa File: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (raw, json) Hash identifier: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0= Subject key identifier: C9:E0:36:4D:98:57:B0:AC:43:23:45:9B:32:F6:94:D3:E8:54:9E:08 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 01C292DCA1C305E7A6009671F30835E6CD3716A1 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e39362e302f31392d3234203d3e203435303632.roa Signing time: Fri 10 Apr 2026 06:34:53 +0000 ROA not before: Fri 10 Apr 2026 06:29:53 +0000 ROA not after: Fri 09 Apr 2027 06:34:53 +0000 asID: 45062 IP address blocks: 59.111.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c2:92:dc:a1:c3:05:e7:a6:00:96:71:f3:08:35:e6:cd:37:16:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Apr 10 06:29:53 2026 GMT Not After : Apr 9 06:34:53 2027 GMT Subject: CN=C9E0364D9857B0AC4323459B32F694D3E8549E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:d0:78:13:00:43:05:a7:83:70:71:26:59: e8:1c:14:ab:f1:73:79:b0:c9:e9:b8:3f:7b:d7:a9: ba:86:a8:72:d1:1d:91:48:2d:51:ec:f1:fe:5b:e1: 35:47:f9:a1:34:81:09:df:23:87:0c:68:c8:e0:21: f8:b9:26:8d:e2:81:99:ba:e0:39:77:60:b2:d9:e0: 30:bb:ca:c6:b3:54:54:fe:f0:72:da:93:a5:1f:2b: bd:26:bc:02:a3:fc:c8:3c:17:d4:d8:05:50:2a:ed: 7d:6c:60:af:f4:ce:1f:b6:26:2f:cc:f0:e3:d0:a6: 30:fc:b0:c8:69:d5:e9:c5:26:85:51:59:74:5a:3f: 6c:b6:47:e4:17:3d:73:41:59:54:91:17:db:f4:8d: b9:9f:32:2b:cf:b9:e5:32:eb:a1:29:8d:f2:6f:3b: f6:52:84:d9:0b:b6:5c:10:15:ea:2f:ed:73:52:b8: 69:c6:01:71:1c:3b:c7:6d:20:21:0c:3a:92:be:1d: ce:3d:dc:75:43:49:4c:24:7b:3b:d9:c9:bc:95:aa: c8:93:32:22:80:24:37:ef:b4:59:ab:53:03:90:c9: 81:12:96:4d:67:80:46:d2:7e:f6:36:2c:f6:19:5c: 99:61:86:b5:54:5d:c8:81:d9:33:f8:5c:d3:34:a0: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E0:36:4D:98:57:B0:AC:43:23:45:9B:32:F6:94:D3:E8:54:9E:08 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e39362e302f31392d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.111.96.0/19 Signature Algorithm: sha256WithRSAEncryption 24:2f:20:81:97:6d:d5:a8:6f:84:25:e9:47:78:51:49:25:2f: 2b:f9:a1:56:77:bb:83:c4:95:3f:d7:a2:90:73:99:2c:2a:05: 6b:64:e5:d3:62:f9:21:6f:e5:7f:58:6f:d0:0c:af:aa:f1:c3: 66:cc:3a:c7:2a:47:7f:6b:18:e6:71:b8:c0:2c:b3:aa:31:5d: 1e:8a:2f:8f:fb:22:db:4d:77:82:74:05:3d:af:64:e7:6b:10: 25:30:6c:5a:da:59:ae:e5:08:bb:1c:49:ec:32:1a:e6:41:32: cc:da:e3:20:07:8e:e2:f1:d0:17:6e:b9:23:5d:18:4e:46:fc: 75:51:d1:8f:2b:bb:1d:52:a2:7e:15:12:c2:fe:a2:31:e6:b8: 3a:6b:75:02:bc:e9:f7:37:18:aa:52:c7:54:97:28:e9:dc:06: 06:dc:fb:99:28:6f:ee:b9:db:e1:1c:3c:b8:3b:2b:b6:0d:eb: 47:6d:44:35:93:03:68:a9:1f:0d:06:9c:9d:a9:9d:05:6e:f2: b1:d8:13:93:fb:ce:03:1c:43:83:e9:c7:50:66:15:ae:b5:72: d2:e0:81:1d:64:69:cf:db:c9:c3:f1:78:32:4b:55:6d:eb:e7: 75:91:d9:0c:55:3c:46:84:65:ec:a7:e8:50:23:9f:f0:00:43: 40:05:ac:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUAcKS3KHDBeemAJZx8wg15s03FqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA0MTAwNjI5NTNaFw0yNzA0MDkwNjM0NTNaMDMxMTAvBgNV BAMTKEM5RTAzNjREOTg1N0IwQUM0MzIzNDU5QjMyRjY5NEQzRTg1NDlFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgz9B4EwBDBaeDcHEmWegcFKvx c3mwyem4P3vXqbqGqHLRHZFILVHs8f5b4TVH+aE0gQnfI4cMaMjgIfi5Jo3igZm6 4Dl3YLLZ4DC7ysazVFT+8HLak6UfK70mvAKj/Mg8F9TYBVAq7X1sYK/0zh+2Ji/M 8OPQpjD8sMhp1enFJoVRWXRaP2y2R+QXPXNBWVSRF9v0jbmfMivPueUy66EpjfJv O/ZShNkLtlwQFeov7XNSuGnGAXEcO8dtICEMOpK+Hc493HVDSUwkezvZybyVqsiT MiKAJDfvtFmrUwOQyYESlk1ngEbSfvY2LPYZXJlhhrVUXciB2TP4XNM0oFyNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUyeA2TZhXsKxDI0WbMvaU0+hUnggwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1NzEwMjExLzAvMzUzOTJlMzEzMTMx MmUzOTM2MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTtvYDANBgkqhkiG9w0BAQsFAAOCAQEAJC8ggZdt1ahvhCXpR3hRSSUvK/mh Vne7g8SVP9eikHOZLCoFa2Tl02L5IW/lf1hv0AyvqvHDZsw6xypHf2sY5nG4wCyz qjFdHoovj/si2013gnQFPa9k52sQJTBsWtpZruUIuxxJ7DIa5kEyzNrjIAeO4vHQ F265I10YTkb8dVHRjyu7HVKifhUSwv6iMea4Omt1Arzp9zcYqlLHVJco6dwGBtz7 mShv7rnb4Rw8uDsrtg3rR21ENZMDaKkfDQacnamdBW7ysdgTk/vOAxxDg+nHUGYV rrVy0uCBHWRpz9vJw/F4MktVbevndZHZDFU8RoRl7KfoUCOf8ABDQAWsKg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:14 2026 by rpki-client