$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2032393134.roa File: 35382e36362e302e302f31362d3234203d3e2032393134.roa (raw, json) Hash identifier: ssNzWEv/XHIRX/lOcoBGJ57SjyT4k8W8EXyNlTLoDJM= Subject key identifier: E8:9A:88:3A:24:56:61:D1:23:A2:CA:2A:DC:16:FC:02:4D:8A:05:35 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 498389254863EB715F88EF5CE32435942DEF22DC Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2032393134.roa Signing time: Sat 12 Sep 2026 16:21:02 +0000 ROA not before: Sat 12 Sep 2026 16:16:02 +0000 ROA not after: Sat 11 Sep 2027 16:21:02 +0000 asID: 2914 IP address blocks: 58.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:83:89:25:48:63:eb:71:5f:88:ef:5c:e3:24:35:94:2d:ef:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 12 16:16:02 2026 GMT Not After : Sep 11 16:21:02 2027 GMT Subject: CN=E89A883A245661D123A2CA2ADC16FC024D8A0535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:5f:6e:2e:93:c6:d0:1c:7e:e6:3f:56:43: 04:a8:6d:2b:df:01:f8:54:65:0b:65:85:2b:10:5f: e1:07:2e:6b:d6:77:5e:68:f0:9b:8a:f1:0a:03:23: 68:0d:f1:9f:e4:21:bf:e2:28:05:a1:b4:eb:84:44: 15:91:54:3f:72:62:e5:5f:77:aa:d4:6a:fd:9b:6b: d4:1a:03:e1:9f:a5:45:19:ec:87:f4:ea:e2:8f:ba: 29:f9:5c:bc:75:55:3e:c7:3b:f7:b7:d0:b5:3c:5b: 41:61:61:54:34:8c:d3:0d:17:2d:cc:b0:c3:9f:aa: 56:5b:91:ec:97:cd:bb:bc:a4:b4:04:4f:f0:3b:16: 25:8f:d4:90:0b:b2:87:4b:b8:4d:41:ca:b3:7d:cd: 08:35:ea:4d:79:1e:62:e6:f1:37:da:86:30:10:26: b8:5f:09:3d:c6:ad:79:c2:ec:5c:99:37:01:a8:71: 46:6f:67:d6:0d:73:a0:91:e6:b6:1f:c9:da:d2:ba: dc:f0:9a:f7:4d:d1:dc:a3:9e:90:fe:a2:0b:97:de: 4b:bc:62:bf:79:b3:7a:60:a7:4c:21:8f:ad:a3:46: 5a:47:47:06:7c:4a:d3:65:53:e5:eb:54:c4:99:1f: 82:eb:d3:cf:04:d1:72:ca:7f:f7:10:30:a0:d0:99: 80:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:88:3A:24:56:61:D1:23:A2:CA:2A:DC:16:FC:02:4D:8A:05:35 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:ba:8c:1d:95:64:48:1e:1f:6b:73:d2:dd:ba:62:fb:56:00: cc:fd:5e:83:21:96:4d:c7:00:67:e7:aa:ae:77:8f:d0:01:93: ae:ac:3f:87:39:99:60:d8:f1:67:9f:03:8a:da:fb:0f:54:39: 8e:83:d6:e0:7f:56:41:a9:6f:1b:8f:4a:68:b6:4c:f6:b7:50: 4a:2d:c7:84:ba:9c:b3:a0:5f:6e:e8:90:f0:1d:78:be:c6:ca: 18:6e:59:1e:78:dc:9d:99:fc:cf:33:22:a1:f6:20:3e:d7:2c: 0c:24:a3:2f:e3:b0:0d:86:ab:38:f7:19:f8:4a:f6:c7:1b:1e: 5a:98:c7:e4:b8:9d:8a:32:9f:a4:37:3c:96:a9:7f:2c:b0:af: f3:41:ce:86:78:6b:c5:5e:b1:97:07:4b:9b:7f:d1:83:3c:21: 8b:8d:98:67:7a:d3:76:2e:02:db:7b:a6:62:df:85:da:6e:64: 2b:69:ef:9a:54:58:1a:aa:17:1a:b4:f6:73:9f:1d:04:03:79: 39:6b:c1:50:10:20:83:55:e2:fa:4d:d3:e6:d4:bc:fc:6c:3d: bd:a6:72:5b:2f:83:b3:95:29:5f:ca:e9:fc:10:7d:09:c9:4e: 7f:b4:74:fc:23:9e:d1:ef:7b:4f:60:98:e4:c1:8c:95:16:5e: 6b:d7:5a:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSYOJJUhj63FfiO9c4yQ1lC3vItwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTIxNjE2MDJaFw0yNzA5MTExNjIxMDJaMDMxMTAvBgNV BAMTKEU4OUE4ODNBMjQ1NjYxRDEyM0EyQ0EyQURDMTZGQzAyNEQ4QTA1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLV9uLpPG0Bx+5j9WQwSobSvf AfhUZQtlhSsQX+EHLmvWd15o8JuK8QoDI2gN8Z/kIb/iKAWhtOuERBWRVD9yYuVf d6rUav2ba9QaA+GfpUUZ7If06uKPuin5XLx1VT7HO/e30LU8W0FhYVQ0jNMNFy3M sMOfqlZbkeyXzbu8pLQET/A7FiWP1JALsodLuE1ByrN9zQg16k15HmLm8TfahjAQ JrhfCT3GrXnC7FyZNwGocUZvZ9YNc6CR5rYfydrSutzwmvdN0dyjnpD+oguX3ku8 Yr95s3pgp0whj62jRlpHRwZ8StNlU+XrVMSZH4Lr088E0XLKf/cQMKDQmYCFAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU6JqIOiRWYdEjosoq3Bb8Ak2KBTUwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNjJl MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADpC MA0GCSqGSIb3DQEBCwUAA4IBAQALuowdlWRIHh9rc9LdumL7VgDM/V6DIZZNxwBn 56qud4/QAZOurD+HOZlg2PFnnwOK2vsPVDmOg9bgf1ZBqW8bj0potkz2t1BKLceE upyzoF9u6JDwHXi+xsoYblkeeNydmfzPMyKh9iA+1ywMJKMv47ANhqs49xn4SvbH Gx5amMfkuJ2KMp+kNzyWqX8ssK/zQc6GeGvFXrGXB0ubf9GDPCGLjZhnetN2LgLb e6Zi34XabmQrae+aVFgaqhcatPZznx0EA3k5a8FQECCDVeL6TdPm1Lz8bD29pnJb L4OzlSlfyun8EH0JyU5/tHT8I57R73tPYJjkwYyVFl5r11pd -----END CERTIFICATE-----Generated at Tue Sep 22 11:58:02 2026 by rpki-client