$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e39362e302f32312d3234203d3e203435303632.roa File: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (raw, json) Hash identifier: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI= Subject key identifier: DD:99:F3:FE:23:06:47:00:C2:85:51:48:D4:D6:3F:9E:8A:07:12:25 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 6BE2F5C3D117454E40FE52B10BE53772A245B058 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e39362e302f32312d3234203d3e203435303632.roa Signing time: Fri 15 May 2026 02:42:13 +0000 ROA not before: Fri 15 May 2026 02:37:13 +0000 ROA not after: Fri 14 May 2027 02:42:13 +0000 asID: 45062 IP address blocks: 59.111.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e2:f5:c3:d1:17:45:4e:40:fe:52:b1:0b:e5:37:72:a2:45:b0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: May 15 02:37:13 2026 GMT Not After : May 14 02:42:13 2027 GMT Subject: CN=DD99F3FE23064700C2855148D4D63F9E8A071225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:6d:f0:7b:dc:0a:11:c0:b4:08:87:4e:b5: 5c:53:a7:85:6d:66:cc:da:50:60:59:06:f4:9d:93: a0:d1:e6:85:f9:c1:65:ea:63:5e:99:79:3b:ec:0f: 71:d4:b0:42:38:9d:7a:3c:d4:e2:51:99:ac:40:5f: 6a:a4:5b:99:7f:b4:2a:e8:d9:8a:bc:fb:a0:7b:b6: fe:ec:76:5b:96:76:52:b9:40:db:f2:18:cc:41:34: 08:89:b3:eb:1f:7b:60:fc:f3:d4:06:4e:63:c1:6f: ee:c3:5c:6c:27:e1:e3:ee:64:f5:0c:14:03:d6:51: 19:71:f7:60:3a:e5:f9:39:26:23:ec:f6:b8:59:e9: 11:fe:cc:01:cf:db:09:c2:a2:4d:c5:4b:76:41:af: 89:cf:20:ea:4f:db:cd:2d:c0:b4:8d:63:9a:63:ff: 84:6a:16:39:f5:0a:c1:10:b5:9d:4f:45:af:cd:be: b9:79:b9:a2:06:22:63:ff:23:38:6b:22:00:f8:3b: 01:4e:6f:d6:46:c7:bb:34:89:9f:b4:b6:88:d0:72: 94:36:81:d2:39:aa:cc:92:9e:70:a7:79:e3:a9:e9: 57:ec:cd:06:ba:bb:39:47:08:49:51:42:28:00:fe: 86:cc:4c:15:90:4d:89:12:9f:93:d3:39:66:ef:59: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:99:F3:FE:23:06:47:00:C2:85:51:48:D4:D6:3F:9E:8A:07:12:25 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e39362e302f32312d3234203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.111.96.0/21 Signature Algorithm: sha256WithRSAEncryption 38:4f:cc:7b:d7:83:b5:5c:2f:62:68:a2:12:f3:ec:de:10:3e: 81:4f:24:b9:0a:be:0e:b5:22:b3:c2:19:8f:a4:87:93:74:10: a9:de:c4:8d:33:da:68:9c:f7:aa:36:ca:23:01:06:3d:41:45: 21:85:1a:35:1c:1f:c6:e9:18:c1:28:9b:5b:e0:45:25:c4:98: eb:21:ea:30:38:2c:78:e0:fb:a3:5b:5c:da:81:af:af:02:de: bb:97:e5:0e:3d:08:68:c4:39:03:e5:49:32:fc:87:6c:ec:d0: 87:84:0f:21:5e:bb:e2:06:c8:9c:8b:f4:3c:56:b9:e8:e7:19: 06:ef:97:5d:03:7a:aa:4e:43:77:90:ae:f9:85:4b:ac:f3:75: 1d:cb:b6:0b:7d:93:3f:38:22:5b:63:0f:c5:ea:02:4e:3e:b6: 21:85:87:36:f8:a4:94:74:71:a0:ed:fe:23:76:dd:89:a9:11: be:6c:b4:91:8a:56:44:2d:98:54:50:a6:26:43:26:5d:49:ac: c9:da:48:d1:51:dd:32:0b:95:5f:db:37:20:fe:f4:83:2a:04: a0:80:6b:d0:88:92:d3:45:18:aa:60:3b:4a:49:1b:fb:ff:e3: 14:b5:f3:ef:2f:5c:59:d6:b6:f3:7e:4c:26:73:33:f6:57:86: 1d:b0:1b:fc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUa+L1w9EXRU5A/lKxC+U3cqJFsFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA1MTUwMjM3MTNaFw0yNzA1MTQwMjQyMTNaMDMxMTAvBgNV BAMTKEREOTlGM0ZFMjMwNjQ3MDBDMjg1NTE0OEQ0RDYzRjlFOEEwNzEyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfW3we9wKEcC0CIdOtVxTp4Vt ZszaUGBZBvSdk6DR5oX5wWXqY16ZeTvsD3HUsEI4nXo81OJRmaxAX2qkW5l/tCro 2Yq8+6B7tv7sdluWdlK5QNvyGMxBNAiJs+sfe2D889QGTmPBb+7DXGwn4ePuZPUM FAPWURlx92A65fk5JiPs9rhZ6RH+zAHP2wnCok3FS3ZBr4nPIOpP280twLSNY5pj /4RqFjn1CsEQtZ1PRa/Nvrl5uaIGImP/IzhrIgD4OwFOb9ZGx7s0iZ+0tojQcpQ2 gdI5qsySnnCneeOp6VfszQa6uzlHCElRQigA/obMTBWQTYkSn5PTOWbvWf7ZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU3Znz/iMGRwDChVFI1NY/nooHEiUwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1NzEwMjExLzAvMzUzOTJlMzEzMTMx MmUzOTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAztvYDANBgkqhkiG9w0BAQsFAAOCAQEAOE/Me9eDtVwvYmiiEvPs3hA+gU8k uQq+DrUis8IZj6SHk3QQqd7EjTPaaJz3qjbKIwEGPUFFIYUaNRwfxukYwSibW+BF JcSY6yHqMDgseOD7o1tc2oGvrwLeu5flDj0IaMQ5A+VJMvyHbOzQh4QPIV674gbI nIv0PFa56OcZBu+XXQN6qk5Dd5Cu+YVLrPN1Hcu2C32TPzgiW2MPxeoCTj62IYWH NviklHRxoO3+I3bdiakRvmy0kYpWRC2YVFCmJkMmXUmsydpI0VHdMguVX9s3IP70 gyoEoIBr0IiS00UYqmA7Skkb+//jFLXz7y9cWda2835MJnMz9leGHbAb/A== -----END CERTIFICATE-----Generated at Fri May 29 23:52:42 2026 by rpki-client