$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2030.roa File: 35382e36362e302e302f31362d3234203d3e2030.roa (raw, json) Hash identifier: nbSpXwb6oK6ZtJ8mRwlpcgqLuUTZptjMz/OHcYyUQ98= Subject key identifier: 11:6A:97:F9:61:CB:53:47:E0:C6:7E:E4:8A:E5:F4:3E:14:8A:98:5E Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 21F2122E58F8CF4598A14B3EE54B0D87CD4822F9 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2030.roa Signing time: Fri 16 Oct 2026 02:32:27 +0000 ROA not before: Fri 16 Oct 2026 02:27:27 +0000 ROA not after: Fri 15 Oct 2027 02:32:27 +0000 asID: 0 IP address blocks: 58.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 19:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f2:12:2e:58:f8:cf:45:98:a1:4b:3e:e5:4b:0d:87:cd:48:22:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Oct 16 02:27:27 2026 GMT Not After : Oct 15 02:32:27 2027 GMT Subject: CN=116A97F961CB5347E0C67EE48AE5F43E148A985E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:bc:4d:34:a6:52:f7:70:26:35:cc:07:af: b3:ec:87:8b:bb:53:22:7f:e1:48:1f:1f:8e:54:ab: 7c:31:a8:93:c7:34:26:e0:89:f3:73:13:48:2b:be: 09:ab:f6:56:6d:39:1b:ca:ae:fe:0a:c0:80:c4:89: 20:56:84:a8:83:ac:0f:9d:21:6d:88:40:bd:7e:82: b5:92:c6:b4:8f:ec:ec:78:d7:43:13:46:99:6f:18: 0f:c3:07:50:7f:df:bf:63:39:50:30:37:0c:57:4f: db:ca:39:c5:24:df:40:5c:fc:17:0a:76:5b:4f:ef: 3f:91:9f:f1:3b:1f:b9:4c:be:24:a1:9f:8f:d5:4b: e7:91:0a:d5:75:43:8b:77:a8:f1:22:38:d2:cf:bb: f4:01:2f:f9:8a:34:79:ed:8f:df:8a:90:ab:48:94: b3:fa:0f:b1:49:94:3f:ec:87:55:d6:f7:ed:83:ba: c6:00:14:90:08:31:1c:c3:81:4a:16:d9:5a:c1:0b: 14:df:71:1b:cf:d3:89:9e:42:4a:7e:40:03:19:c9: 32:f8:98:83:7f:1d:e0:5b:2a:e8:2b:b7:e6:a2:5e: 41:e6:6a:6d:ee:e2:47:f8:17:ee:f1:54:47:c2:2f: 00:61:8b:15:fc:16:26:95:4e:6a:b4:e2:8a:b6:8a: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6A:97:F9:61:CB:53:47:E0:C6:7E:E4:8A:E5:F4:3E:14:8A:98:5E X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:16:58:65:56:f8:82:1d:57:1e:dc:23:ff:3f:89:5e:f3:e8: 9f:a1:ef:c4:69:05:1b:83:20:82:09:2c:74:d0:73:c2:00:32: 1c:3b:30:d0:f6:5d:76:47:35:ee:e9:b3:87:dd:b1:99:0e:e3: a9:36:ef:4e:d1:a8:02:48:93:4c:0f:49:11:5b:82:ce:0c:2d: 58:5e:65:0b:f6:bc:53:10:f7:3c:ef:da:01:55:c2:f5:ff:fd: b4:22:ab:40:e2:6e:8e:4b:a9:b8:d2:8f:ee:84:06:9e:03:63: b6:e6:fb:be:b2:a9:68:b4:44:d2:da:ef:2c:4b:b7:9f:34:dc: c5:48:c4:de:a4:a9:c3:de:9e:d6:53:2f:11:88:07:f0:99:86: e1:4e:02:74:4f:74:00:84:6c:e1:78:0a:7b:fd:8d:e9:a0:b8: 02:8f:76:a9:1d:1b:34:4f:5c:72:d4:f7:81:b9:01:f6:e7:f8: 57:78:31:06:e3:08:df:00:fc:45:fa:aa:8b:21:aa:62:0c:11: 98:14:c7:18:4b:89:8e:fd:0a:c3:3b:3a:6b:05:79:10:d6:a4: 54:f1:c1:59:88:83:29:f9:d5:2b:30:a2:68:d9:21:a4:67:7f: 86:02:7a:fb:4d:85:95:cf:d2:6e:cb:42:90:7b:a4:d9:d9:3f: 98:8a:69:5d -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUIfISLlj4z0WYoUs+5UsNh81IIvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjEwMTYwMjI3MjdaFw0yNzEwMTUwMjMyMjdaMDMxMTAvBgNV BAMTKDExNkE5N0Y5NjFDQjUzNDdFMEM2N0VFNDhBRTVGNDNFMTQ4QTk4NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC427xNNKZS93AmNcwHr7Psh4u7 UyJ/4UgfH45Uq3wxqJPHNCbgifNzE0grvgmr9lZtORvKrv4KwIDEiSBWhKiDrA+d IW2IQL1+grWSxrSP7Ox410MTRplvGA/DB1B/379jOVAwNwxXT9vKOcUk30Bc/BcK dltP7z+Rn/E7H7lMviShn4/VS+eRCtV1Q4t3qPEiONLPu/QBL/mKNHntj9+KkKtI lLP6D7FJlD/sh1XW9+2DusYAFJAIMRzDgUoW2VrBCxTfcRvP04meQkp+QAMZyTL4 mIN/HeBbKugrt+aiXkHmam3u4kf4F+7xVEfCLwBhixX8FiaVTmq04oq2io63AgMB AAGjggIDMIIB/zAdBgNVHQ4EFgQUEWqX+WHLU0fgxn7kiuX0PhSKmF4wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zNTM4MmUzNjM2MmUz MDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOkIwDQYJKoZI hvcNAQELBQADggEBAGEWWGVW+IIdVx7cI/8/iV7z6J+h78RpBRuDIIIJLHTQc8IA Mhw7MND2XXZHNe7ps4fdsZkO46k2707RqAJIk0wPSRFbgs4MLVheZQv2vFMQ9zzv 2gFVwvX//bQiq0Dibo5LqbjSj+6EBp4DY7bm+76yqWi0RNLa7yxLt5803MVIxN6k qcPentZTLxGIB/CZhuFOAnRPdACEbOF4Cnv9jemguAKPdqkdGzRPXHLU94G5Afbn +Fd4MQbjCN8A/EX6qoshqmIMEZgUxxhLiY79CsM7OmsFeRDWpFTxwVmIgyn51Ssw omjZIaRnf4YCevtNhZXP0m7LQpB7pNnZP5iKaV0= -----END CERTIFICATE-----Generated at Thu Nov 5 19:40:08 2026 by rpki-client