$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2030.roa File: 35382e36372e302e302f31372d3234203d3e2030.roa (raw, json) Hash identifier: obBxv9Ws2uWoZ6r84I7CTvSVeGo63W44UXob+aPtoac= Subject key identifier: B5:80:0D:38:AB:7F:64:E7:11:F1:6A:42:3B:DD:33:46:7E:86:5A:6A Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 23D758628DB11E58326187A79CBEF868095F6A67 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2030.roa Signing time: Fri 16 Oct 2026 02:32:26 +0000 ROA not before: Fri 16 Oct 2026 02:27:26 +0000 ROA not after: Fri 15 Oct 2027 02:32:26 +0000 asID: 0 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 19:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d7:58:62:8d:b1:1e:58:32:61:87:a7:9c:be:f8:68:09:5f:6a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Oct 16 02:27:26 2026 GMT Not After : Oct 15 02:32:26 2027 GMT Subject: CN=B5800D38AB7F64E711F16A423BDD33467E865A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:d2:09:e9:a5:d2:1e:18:c7:40:b2:39:54: e7:fd:86:22:70:36:5b:50:12:12:41:71:8a:b7:52: 2c:df:99:ab:1b:6f:57:28:63:7d:94:4f:d4:f6:e8: e4:67:b1:54:f1:c1:46:21:b0:ed:5a:0e:4d:2b:95: e4:36:a9:70:08:02:47:99:24:32:bd:76:ed:22:de: 88:9a:12:14:db:4b:33:83:9d:15:35:cb:91:3c:ff: a5:0c:8a:e5:93:3d:21:1d:74:64:44:e9:73:1b:26: c4:5a:c0:df:61:dc:f6:98:55:77:2e:81:18:bd:15: 2e:a3:0b:17:8b:65:94:2a:ad:52:f2:95:79:92:a7: 03:8f:a0:fa:bc:5e:21:e4:cc:44:eb:1b:f8:4e:3b: ab:12:73:ed:c2:9d:22:2d:4d:c6:e4:9a:20:d9:42: 24:32:dc:f2:ab:57:8e:1e:b1:a8:95:39:0c:41:20: 0e:85:46:d8:c9:e6:17:24:c9:d9:1f:9e:1b:9a:82: c7:35:26:b6:c6:48:08:31:4b:49:ee:72:e4:db:3b: 45:75:c5:44:5d:b8:22:39:79:d7:a2:9e:0e:4b:11: 40:e0:82:09:de:f4:63:75:82:7a:d0:d8:12:38:a7: 8a:61:ee:f5:c1:1c:30:13:46:7b:00:04:5f:a4:ff: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:80:0D:38:AB:7F:64:E7:11:F1:6A:42:3B:DD:33:46:7E:86:5A:6A X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption 85:f2:14:49:ba:40:7a:3c:5f:6f:a3:8b:3a:8e:93:a3:56:d8: a4:d3:d3:f1:2e:ad:46:27:09:46:5a:87:42:f0:83:c9:c3:8f: 8d:18:57:63:fb:9d:13:cd:12:1b:eb:49:8f:18:0c:a9:12:47: 83:39:5b:3f:7b:d1:29:c1:b4:d7:7a:08:7c:93:2a:0f:67:72: 57:30:22:48:50:0c:00:d9:2d:d9:b3:f8:f9:43:59:aa:f1:2c: f9:ab:02:c9:f6:38:fa:84:d4:f5:a3:3c:40:c1:aa:6c:64:88: e3:f9:56:32:fd:83:48:b0:29:f3:27:54:53:1a:83:74:c7:e7: 8b:ce:bf:c3:75:53:51:38:f2:91:4c:dd:54:56:ae:14:24:7f: 38:97:26:db:f7:37:58:1b:69:0d:de:fc:81:9b:bf:a3:ae:88: d1:8a:b6:53:96:4c:b8:ac:d0:19:f3:9d:a8:d7:d5:d5:26:69: 7a:60:42:9e:45:b1:a8:95:5c:a2:36:26:06:d9:a8:e1:40:21: 09:4e:26:45:ff:a4:e8:5e:50:49:0c:02:7b:2e:07:c3:0c:94: fa:73:7f:0a:ac:27:13:5d:b8:b3:f5:5e:15:dc:f1:04:f7:7f: cc:26:31:c5:0e:79:74:97:09:2f:40:d3:65:56:5a:6d:10:86: b3:f4:7e:54 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUI9dYYo2xHlgyYYennL74aAlfamcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjEwMTYwMjI3MjZaFw0yNzEwMTUwMjMyMjZaMDMxMTAvBgNV BAMTKEI1ODAwRDM4QUI3RjY0RTcxMUYxNkE0MjNCREQzMzQ2N0U4NjVBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6N9IJ6aXSHhjHQLI5VOf9hiJw NltQEhJBcYq3Uizfmasbb1coY32UT9T26ORnsVTxwUYhsO1aDk0rleQ2qXAIAkeZ JDK9du0i3oiaEhTbSzODnRU1y5E8/6UMiuWTPSEddGRE6XMbJsRawN9h3PaYVXcu gRi9FS6jCxeLZZQqrVLylXmSpwOPoPq8XiHkzETrG/hOO6sSc+3CnSItTcbkmiDZ QiQy3PKrV44esaiVOQxBIA6FRtjJ5hckydkfnhuagsc1JrbGSAgxS0nucuTbO0V1 xURduCI5edeing5LEUDgggne9GN1gnrQ2BI4p4ph7vXBHDATRnsABF+k/4H1AgMB AAGjggIEMIICADAdBgNVHQ4EFgQUtYANOKt/ZOcR8WpCO90zRn6GWmowHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC8zNTM4MmUzNjM3MmUz MDJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHOkMAMA0GCSqG SIb3DQEBCwUAA4IBAQCF8hRJukB6PF9vo4s6jpOjVtik09PxLq1GJwlGWodC8IPJ w4+NGFdj+50TzRIb60mPGAypEkeDOVs/e9EpwbTXegh8kyoPZ3JXMCJIUAwA2S3Z s/j5Q1mq8Sz5qwLJ9jj6hNT1ozxAwapsZIjj+VYy/YNIsCnzJ1RTGoN0x+eLzr/D dVNROPKRTN1UVq4UJH84lybb9zdYG2kN3vyBm7+jrojRirZTlky4rNAZ852o19XV Jml6YEKeRbGolVyiNiYG2ajhQCEJTiZF/6ToXlBJDAJ7LgfDDJT6c38KrCcTXbiz 9V4V3PEE93/MJjHFDnl0lwkvQNNlVlptEIaz9H5U -----END CERTIFICATE-----Generated at Thu Nov 5 04:53:23 2026 by rpki-client