$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3234372e302f32342d3234203d3e2034383437.roa File: 35382e36382e3234372e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: 7dxra9LGxULKIULIH6ZfILFFbXhCh+MMd6bQJWZesSE= Subject key identifier: 6B:F6:63:C0:72:0B:3B:B4:F2:04:2A:B9:5A:06:AB:66:BD:A9:AC:5C Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Certificate serial: 36FBBB00489FD3B5D193BF1BB25F4D72710DBB63 Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3234372e302f32342d3234203d3e2034383437.roa Signing time: Tue 19 May 2026 02:29:57 +0000 ROA not before: Tue 19 May 2026 02:24:57 +0000 ROA not after: Tue 18 May 2027 02:29:57 +0000 asID: 4847 IP address blocks: 58.68.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fb:bb:00:48:9f:d3:b5:d1:93:bf:1b:b2:5f:4d:72:71:0d:bb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Validity Not Before: May 19 02:24:57 2026 GMT Not After : May 18 02:29:57 2027 GMT Subject: CN=6BF663C0720B3BB4F2042AB95A06AB66BDA9AC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:32:3a:5a:d6:d3:9d:03:84:f0:88:f0:c3: 20:b0:93:29:99:72:df:54:b1:e0:d5:ff:7c:bc:c1: 3b:64:ea:ad:bc:08:0e:80:05:b0:83:bb:b9:ba:fe: d6:41:26:17:34:48:3b:49:20:ce:94:1a:6c:80:e6: a1:84:67:41:ef:06:f2:4f:b2:50:30:0a:81:8f:c1: 1f:c3:21:ad:b1:83:9f:5d:aa:08:89:53:2c:d0:c4: 24:ca:14:6e:67:17:df:04:79:5c:70:cb:bf:51:ee: 01:27:1a:98:35:c6:e7:8e:30:4e:f6:2a:8d:72:30: 69:f1:c8:8d:68:c5:03:20:8e:35:12:84:6e:5e:79: c2:23:1d:e7:43:cf:6e:ae:9e:57:07:16:ab:c4:ce: db:94:88:da:b8:4b:3a:92:31:53:c2:b0:d8:3c:4f: 37:97:c9:fd:68:3b:22:c7:b2:fc:cc:24:89:df:22: da:da:ef:0e:3d:71:3f:b5:8a:93:c7:02:15:14:99: 9a:b1:c7:11:71:bf:a7:05:62:8e:27:b5:67:56:d6: 25:83:93:8a:f2:76:52:f7:6a:d8:6f:35:c4:4d:c8: 7c:2c:0c:6f:9f:71:78:85:b6:2d:e8:69:04:a9:2c: 26:ee:9a:bf:3e:b9:1a:4e:2d:3a:ef:d9:17:be:9d: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F6:63:C0:72:0B:3B:B4:F2:04:2A:B9:5A:06:AB:66:BD:A9:AC:5C X509v3 Authority Key Identifier: keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3234372e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.68.247.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:98:ca:35:d8:0c:60:bc:42:f7:6e:b7:56:81:3b:4c:25:5e: 63:74:0a:96:4c:cf:4a:85:aa:bd:14:85:ba:0f:8f:8d:be:a7: bf:a1:6c:9c:15:7c:a4:89:07:c1:b0:2d:1b:1e:93:aa:1a:16: 90:86:e3:cf:60:2d:09:f2:54:59:cf:da:21:8e:8e:ad:f7:45: 3b:e1:e1:5f:1b:ac:02:22:a7:04:39:46:d4:cd:08:65:29:9e: d3:e8:c9:72:09:17:26:2d:38:f6:65:38:9c:8f:f7:59:ee:d0: 45:2c:53:f8:29:92:6c:12:7f:9e:36:08:4b:b9:83:00:67:7d: 7d:6e:d2:5f:b4:e8:7a:ca:da:a7:66:44:da:c4:29:83:bf:76: 0c:bf:49:82:34:5b:59:38:93:3e:0f:02:cc:0a:67:2a:7f:2d: ac:d2:92:f6:da:1e:7b:5c:26:75:ef:f5:45:90:8d:77:30:b7: b9:3d:cf:16:b4:ba:d7:08:90:a9:06:da:35:f6:e2:bb:24:5a: ca:6d:33:5c:b6:34:2e:e0:30:81:08:8b:93:95:89:20:14:8e: c0:32:9a:b9:0a:8f:09:30:84:93:8b:e3:d5:23:04:41:8e:dc: f1:ed:58:45:86:09:a9:9b:6e:e4:aa:1e:06:c4:ea:d7:90:c4: 7c:ca:b2:3c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUNvu7AEif07XRk78bsl9NcnENu2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC NUYxOTU1MTAeFw0yNjA1MTkwMjI0NTdaFw0yNzA1MTgwMjI5NTdaMDMxMTAvBgNV BAMTKDZCRjY2M0MwNzIwQjNCQjRGMjA0MkFCOTVBMDZBQjY2QkRBOUFDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XjI6WtbTnQOE8IjwwyCwkymZ ct9UseDV/3y8wTtk6q28CA6ABbCDu7m6/tZBJhc0SDtJIM6UGmyA5qGEZ0HvBvJP slAwCoGPwR/DIa2xg59dqgiJUyzQxCTKFG5nF98EeVxwy79R7gEnGpg1xueOME72 Ko1yMGnxyI1oxQMgjjUShG5eecIjHedDz26unlcHFqvEztuUiNq4SzqSMVPCsNg8 TzeXyf1oOyLHsvzMJInfItra7w49cT+1ipPHAhUUmZqxxxFxv6cFYo4ntWdW1iWD k4rydlL3athvNcRNyHwsDG+fcXiFti3oaQSpLCbumr8+uRpOLTrv2Re+naETAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUa/ZjwHILO7TyBCq5WgarZr2prFwwHwYDVR0j BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDU1Mzk2MDQxODUwODgxLzAvMzUzODJlMzYzODJl MzIzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA6RPcwDQYJKoZIhvcNAQELBQADggEBAGyYyjXYDGC8Qvdut1aBO0wlXmN0CpZM z0qFqr0UhboPj42+p7+hbJwVfKSJB8GwLRsek6oaFpCG489gLQnyVFnP2iGOjq33 RTvh4V8brAIipwQ5RtTNCGUpntPoyXIJFyYtOPZlOJyP91nu0EUsU/gpkmwSf542 CEu5gwBnfX1u0l+06HrK2qdmRNrEKYO/dgy/SYI0W1k4kz4PAswKZyp/LazSkvba HntcJnXv9UWQjXcwt7k9zxa0utcIkKkG2jX24rskWsptM1y2NC7gMIEIi5OViSAU jsAymrkKjwkwhJOL49UjBEGO3PHtWEWGCambbuSqHgbE6teQxHzKsjw= -----END CERTIFICATE-----Generated at Fri May 29 23:52:40 2026 by rpki-client