$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2032393134.roa File: 35382e36372e302e302f31372d3234203d3e2032393134.roa (raw, json) Hash identifier: yxRjnKE5cXKAPd4rQuMZo5SvRCI43jaUXb86qqhodlA= Subject key identifier: 1F:1B:00:E7:B5:99:DC:C4:43:EE:EC:C3:F3:AF:12:A5:D7:BB:AF:98 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 45663D011E1CA6FC3295BEA0DA0003F3973F3749 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2032393134.roa Signing time: Fri 11 Sep 2026 12:26:41 +0000 ROA not before: Fri 11 Sep 2026 12:21:41 +0000 ROA not after: Fri 10 Sep 2027 12:26:41 +0000 asID: 2914 IP address blocks: 58.67.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:66:3d:01:1e:1c:a6:fc:32:95:be:a0:da:00:03:f3:97:3f:37:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Sep 11 12:21:41 2026 GMT Not After : Sep 10 12:26:41 2027 GMT Subject: CN=1F1B00E7B599DCC443EEECC3F3AF12A5D7BBAF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:50:4b:11:95:2c:02:ac:1d:95:30:11:7c: da:df:34:c1:a8:b7:25:eb:86:bd:fd:ad:3c:83:c3: d7:0f:d8:33:52:c7:22:a4:36:f0:c5:a8:e5:8d:85: 8e:0e:05:33:e2:c3:60:86:c3:3c:8e:44:82:77:c6: 49:38:75:3f:98:f5:23:27:1a:1a:e2:34:51:84:99: 64:b6:fa:3e:8e:fe:7d:74:b5:be:90:03:ee:14:52: dc:80:ff:a0:26:2c:a6:34:68:87:41:fb:0e:ec:c3: 86:cc:46:97:6b:31:ed:52:39:47:64:1a:88:0e:5c: d3:43:8b:94:9f:ac:7c:6a:be:f2:9f:db:15:f6:fc: d3:b7:7d:d1:8e:c4:02:48:b7:9b:b4:2a:61:e4:f5: 2c:07:17:f7:61:31:68:df:9e:38:35:0b:b2:13:9c: 02:ba:ac:e0:1f:23:e7:07:c7:e8:36:5e:5c:88:82: 3c:5f:8a:43:19:d7:e8:81:7e:c5:7e:d3:22:2d:9d: 40:ac:ab:a2:d4:61:0f:51:09:f3:12:55:cf:a0:33: a0:5c:74:7a:f2:34:48:97:f1:74:2c:09:8d:30:a5: 72:b2:2f:50:b7:3f:9d:f4:55:f5:8d:62:6e:ce:6c: fc:92:28:17:c9:a5:24:0c:30:72:d3:88:d4:77:11: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1B:00:E7:B5:99:DC:C4:43:EE:EC:C3:F3:AF:12:A5:D7:BB:AF:98 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.0.0/17 Signature Algorithm: sha256WithRSAEncryption c0:8d:67:87:a8:1d:8b:60:33:41:ac:a6:6f:04:0c:2f:e2:71: a9:cd:54:f4:98:1d:0c:a3:75:24:ce:64:ca:f4:95:aa:e4:78: 24:1a:57:08:fd:5e:94:35:43:d9:cb:07:8c:80:ef:e5:7a:a1: 9c:fb:6b:56:f0:8d:93:b4:12:59:ee:f1:2d:ad:f9:01:c7:49: 21:ae:6b:9d:ad:c7:c9:6d:e8:62:8b:34:0c:1c:98:af:ae:ab: 6b:c1:a4:ab:0c:ea:52:0b:bc:11:24:5c:00:3a:0b:95:e3:26: 02:18:5f:70:ff:06:51:81:41:01:e4:af:95:b7:7d:ce:8b:3f: 4f:1b:50:7e:e7:2a:70:7a:50:79:a7:d4:6a:bd:fb:cf:97:f3: c3:55:1d:b9:ea:d7:ab:90:cb:0a:cb:e6:e4:f2:c9:c9:c7:d4: a9:d5:84:0c:c0:85:10:83:0f:74:fb:36:7b:53:36:1a:f3:2b: 82:46:f4:2c:24:d2:eb:26:e1:fb:9c:7d:d4:df:e4:60:b5:6e: e1:f3:bb:a0:e4:12:c0:c1:40:57:f2:8d:b3:62:6f:5e:3f:fa: d9:6b:ca:55:ae:45:7a:1b:5d:22:8c:f4:84:07:6f:6e:10:04: ae:dc:1e:9c:5e:97:37:3b:2f:66:32:84:f6:59:c9:c8:7d:a5: 1f:a0:1b:35 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIURWY9AR4cpvwylb6g2gAD85c/N0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA5MTExMjIxNDFaFw0yNzA5MTAxMjI2NDFaMDMxMTAvBgNV BAMTKDFGMUIwMEU3QjU5OURDQzQ0M0VFRUNDM0YzQUYxMkE1RDdCQkFGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRLVBLEZUsAqwdlTARfNrfNMGo tyXrhr39rTyDw9cP2DNSxyKkNvDFqOWNhY4OBTPiw2CGwzyORIJ3xkk4dT+Y9SMn GhriNFGEmWS2+j6O/n10tb6QA+4UUtyA/6AmLKY0aIdB+w7sw4bMRpdrMe1SOUdk GogOXNNDi5SfrHxqvvKf2xX2/NO3fdGOxAJIt5u0KmHk9SwHF/dhMWjfnjg1C7IT nAK6rOAfI+cHx+g2XlyIgjxfikMZ1+iBfsV+0yItnUCsq6LUYQ9RCfMSVc+gM6Bc dHryNEiX8XQsCY0wpXKyL1C3P530VfWNYm7ObPySKBfJpSQMMHLTiNR3EUafAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUHxsA57WZ3MRD7uzD868Spde7r5gwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzpD ADANBgkqhkiG9w0BAQsFAAOCAQEAwI1nh6gdi2AzQaymbwQML+Jxqc1U9JgdDKN1 JM5kyvSVquR4JBpXCP1elDVD2csHjIDv5XqhnPtrVvCNk7QSWe7xLa35AcdJIa5r na3HyW3oYos0DByYr66ra8GkqwzqUgu8ESRcADoLleMmAhhfcP8GUYFBAeSvlbd9 zos/TxtQfucqcHpQeafUar37z5fzw1UduerXq5DLCsvm5PLJycfUqdWEDMCFEIMP dPs2e1M2GvMrgkb0LCTS6ybh+5x91N/kYLVu4fO7oOQSwMFAV/KNs2JvXj/62WvK Va5FehtdIoz0hAdvbhAErtwenF6XNzsvZjKE9lnJyH2lH6AbNQ== -----END CERTIFICATE-----Generated at Tue Sep 22 00:52:28 2026 by rpki-client