$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3233362e302f32342d3234203d3e2034383038.roa File: 35382e36382e3233362e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: 1/R2aEpOWgtdDnQfgWZ51jRozTedImSoGCeiSolVWzk= Subject key identifier: 0C:BB:A7:78:8B:D5:1B:B8:CB:2F:4A:DC:8F:44:76:0C:7C:AB:7B:B3 Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Certificate serial: 2264811C8F7B37F953A0F10D5733878C5ECA0A0B Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3233362e302f32342d3234203d3e2034383038.roa Signing time: Tue 19 May 2026 05:36:38 +0000 ROA not before: Tue 19 May 2026 05:31:38 +0000 ROA not after: Tue 18 May 2027 05:36:38 +0000 asID: 4808 IP address blocks: 58.68.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:64:81:1c:8f:7b:37:f9:53:a0:f1:0d:57:33:87:8c:5e:ca:0a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Validity Not Before: May 19 05:31:38 2026 GMT Not After : May 18 05:36:38 2027 GMT Subject: CN=0CBBA7788BD51BB8CB2F4ADC8F44760C7CAB7BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:2f:ee:ce:12:4c:5f:94:46:a7:07:3c:f3: d1:1a:09:07:b7:0c:df:7d:e4:67:24:44:9c:21:6a: c9:c8:28:36:99:7e:e3:98:af:03:6c:28:b1:25:82: f1:2b:14:40:31:6b:5f:7d:36:19:63:75:68:91:f8: 28:87:c0:a1:50:70:98:14:de:0a:d8:a3:d7:17:65: e4:b1:f7:90:ce:3e:99:fb:79:14:ca:64:1e:7e:f3: 79:84:50:ae:4e:88:b6:d9:e5:9b:64:39:ce:a6:bb: 08:48:80:4a:f6:bb:dc:3d:f2:9b:42:1c:1d:67:df: 48:a3:68:24:e0:56:ab:fc:e9:ff:2e:f7:0e:7e:c1: 67:06:db:e6:8b:87:da:07:c0:b8:21:a4:5a:ca:be: 86:c2:6a:77:64:4e:85:a9:dd:1d:f2:1d:47:af:27: 82:76:79:74:72:24:da:7c:5d:b8:e8:de:d8:fd:f9: 23:83:5c:05:ce:5d:1e:e4:8b:cf:af:2f:b3:b0:6f: 0c:a9:5a:c4:54:a7:a3:07:5b:29:bf:3b:86:9e:04: 36:aa:bb:eb:68:32:16:27:85:f2:b2:46:de:6d:2d: 1b:12:f3:0d:a6:60:f0:c6:19:f2:84:52:95:27:f5: ff:31:7a:20:05:53:b9:96:e4:bf:b9:e0:eb:97:2b: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BB:A7:78:8B:D5:1B:B8:CB:2F:4A:DC:8F:44:76:0C:7C:AB:7B:B3 X509v3 Authority Key Identifier: keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3233362e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.68.236.0/24 Signature Algorithm: sha256WithRSAEncryption c0:71:fb:34:e0:44:3f:25:4e:23:59:de:3b:00:19:f0:47:96: e4:e5:3f:b0:6a:a9:48:0f:19:c5:97:09:cd:88:4b:74:e9:3d: 8c:84:cb:2b:94:49:2f:7c:88:71:61:ab:dd:ee:6a:6a:4f:85: 69:74:73:90:0c:c3:b6:3e:f0:b9:3f:11:9e:74:8f:85:41:ad: 79:93:37:9a:f0:a5:18:b5:29:68:19:ba:38:6c:10:de:74:ac: 85:56:b0:ca:e1:a7:94:07:63:41:1f:f8:01:a8:c1:cd:fb:69: cc:cd:b9:9e:1d:14:7d:f4:35:2a:88:d5:0c:d3:21:9a:68:a9: 71:70:f5:09:c8:e5:cf:17:64:a1:9d:74:e0:a2:58:31:15:2b: 74:20:10:a7:cb:e9:34:b0:8e:c2:53:07:69:4b:6f:1a:ec:dd: fa:7c:63:17:f3:58:2c:a0:9f:0a:f8:51:c3:75:1c:04:9f:7d: fc:13:b4:7d:3d:8e:a9:da:f5:1b:72:d1:fa:62:f0:ea:86:49: aa:6b:b9:31:df:03:7d:9c:e2:8b:24:5d:70:05:4e:16:7e:f2: 55:bc:88:33:a9:75:9d:9b:34:fa:33:d3:2d:f3:8d:f2:78:bf: fc:ad:bf:f6:f3:df:a2:3d:f3:aa:02:01:a9:74:9a:02:93:8c: 45:d7:0a:99 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUImSBHI97N/lToPENVzOHjF7KCgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC NUYxOTU1MTAeFw0yNjA1MTkwNTMxMzhaFw0yNzA1MTgwNTM2MzhaMDMxMTAvBgNV BAMTKDBDQkJBNzc4OEJENTFCQjhDQjJGNEFEQzhGNDQ3NjBDN0NBQjdCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fi/uzhJMX5RGpwc889EaCQe3 DN995GckRJwhasnIKDaZfuOYrwNsKLElgvErFEAxa199NhljdWiR+CiHwKFQcJgU 3grYo9cXZeSx95DOPpn7eRTKZB5+83mEUK5OiLbZ5ZtkOc6muwhIgEr2u9w98ptC HB1n30ijaCTgVqv86f8u9w5+wWcG2+aLh9oHwLghpFrKvobCandkToWp3R3yHUev J4J2eXRyJNp8Xbjo3tj9+SODXAXOXR7ki8+vL7OwbwypWsRUp6MHWym/O4aeBDaq u+toMhYnhfKyRt5tLRsS8w2mYPDGGfKEUpUn9f8xeiAFU7mW5L+54OuXK4PzAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUDLuneIvVG7jLL0rcj0R2DHyre7MwHwYDVR0j BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDU1Mzk2MDQxODUwODgxLzAvMzUzODJlMzYzODJl MzIzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA6ROwwDQYJKoZIhvcNAQELBQADggEBAMBx+zTgRD8lTiNZ3jsAGfBHluTlP7Bq qUgPGcWXCc2IS3TpPYyEyyuUSS98iHFhq93uampPhWl0c5AMw7Y+8Lk/EZ50j4VB rXmTN5rwpRi1KWgZujhsEN50rIVWsMrhp5QHY0Ef+AGowc37aczNuZ4dFH30NSqI 1QzTIZpoqXFw9QnI5c8XZKGddOCiWDEVK3QgEKfL6TSwjsJTB2lLbxrs3fp8Yxfz WCygnwr4UcN1HASfffwTtH09jqna9Rty0fpi8OqGSapruTHfA32c4oskXXAFThZ+ 8lW8iDOpdZ2bNPoz0y3zjfJ4v/ytv/bz36I986oCAal0mgKTjEXXCpk= -----END CERTIFICATE-----Generated at Fri May 29 22:56:22 2026 by rpki-client