$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3132382e302f31382d3138203d3e20313336323030.roa File: 35382e36372e3132382e302f31382d3138203d3e20313336323030.roa (raw, json) Hash identifier: BzId6FgwmcPl+hqwHy1LLn+582+t6NmRHbu3s+l2+Sk= Subject key identifier: CC:72:5F:67:50:0F:0D:7A:F6:56:95:A3:4D:12:AB:B0:34:A6:6C:2F Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 0474848A837B7C5EB3BFC7DB9D501D6E7F6E641D Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3132382e302f31382d3138203d3e20313336323030.roa Signing time: Tue 14 Apr 2026 03:25:35 +0000 ROA not before: Tue 14 Apr 2026 03:20:35 +0000 ROA not after: Tue 13 Apr 2027 03:25:35 +0000 asID: 136200 IP address blocks: 58.67.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:74:84:8a:83:7b:7c:5e:b3:bf:c7:db:9d:50:1d:6e:7f:6e:64:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:20:35 2026 GMT Not After : Apr 13 03:25:35 2027 GMT Subject: CN=CC725F67500F0D7AF65695A34D12ABB034A66C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:4e:92:8a:52:13:63:f5:ee:6a:2b:df:da: 6f:a8:53:fe:b1:be:0d:1c:9a:09:21:e6:c6:5f:f3: dc:f4:18:60:78:b4:a3:8b:0a:c6:df:21:51:ac:47: 50:ce:13:03:03:54:f9:fe:d5:23:ba:39:7b:33:9d: 5c:78:45:70:1c:9f:59:0e:2e:03:67:fb:81:66:01: 7f:d0:1e:9f:22:bb:63:30:c7:a5:e2:3f:82:b3:be: 02:3e:9e:bc:27:c5:41:a0:43:1b:fd:8a:88:2d:bf: c2:49:0c:f2:fa:e9:d3:f5:93:5a:63:61:b2:cb:bf: 78:39:a1:fb:e2:85:83:65:49:60:f2:19:43:83:3f: 45:1f:de:14:eb:2f:c1:66:97:45:94:2d:22:c4:33: e0:59:02:0c:38:e4:b5:60:f1:3f:75:f7:d4:5c:98: c0:75:0b:fd:86:af:bd:4c:5b:06:b3:12:b6:00:ab: 70:20:26:4f:63:8c:a0:c9:a1:ab:f9:57:0f:91:80: ec:30:f6:77:b0:5c:37:16:9f:5d:b1:23:82:5e:7a: 62:b5:e1:d5:ca:16:60:97:e9:97:30:4c:41:8a:8b: ff:c3:7a:02:ed:16:0c:11:ba:8f:37:c1:2d:08:fe: 48:76:db:71:47:ae:d6:58:3f:aa:0b:01:d6:81:75: d8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:72:5F:67:50:0F:0D:7A:F6:56:95:A3:4D:12:AB:B0:34:A6:6C:2F X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3132382e302f31382d3138203d3e20313336323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.128.0/18 Signature Algorithm: sha256WithRSAEncryption 09:ab:d5:97:45:9f:3c:96:23:33:7c:6b:04:5b:c7:5e:03:26: 3b:33:ea:0b:63:46:df:5b:8a:60:e0:e3:93:26:b2:5f:28:e2: 96:1a:c7:6e:18:dc:1b:34:9b:4a:3a:ca:4f:7e:6c:e1:e5:cf: 19:38:eb:61:70:76:20:8f:08:6b:84:0f:04:03:45:3e:9d:65: a0:58:2a:44:2d:9b:89:86:73:fd:dd:ab:31:d9:09:89:f9:2c: 87:f1:3c:74:e0:11:cb:a1:3e:23:b6:51:21:98:d1:74:68:b1: 35:b2:86:9a:3e:a3:c7:38:af:26:64:36:48:85:08:f4:da:39: 46:72:36:80:07:c6:8c:78:f2:f4:81:08:07:5e:4b:8a:f4:73: c2:44:cd:9e:29:ad:d5:0b:e9:e3:3a:5d:be:8f:c4:02:89:c7: 1e:4c:05:39:2a:d6:e3:0e:ad:3c:06:73:b7:b7:a2:cf:d5:06: ea:b8:80:8c:95:2e:44:b2:4d:51:00:7c:8a:19:7d:58:36:c7: 18:0b:9d:94:0b:ef:69:89:79:df:50:cf:ae:a7:05:28:46:f4: a7:f7:e1:8d:20:60:94:aa:41:78:96:af:54:e6:57:07:52:95: 36:d6:14:13:2e:09:70:b0:ae:d0:ed:1a:47:69:07:c0:06:b3: 01:65:21:27 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBHSEioN7fF6zv8fbnVAdbn9uZB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzIwMzVaFw0yNzA0MTMwMzI1MzVaMDMxMTAvBgNV BAMTKENDNzI1RjY3NTAwRjBEN0FGNjU2OTVBMzREMTJBQkIwMzRBNjZDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eU6SilITY/Xuaivf2m+oU/6x vg0cmgkh5sZf89z0GGB4tKOLCsbfIVGsR1DOEwMDVPn+1SO6OXsznVx4RXAcn1kO LgNn+4FmAX/QHp8iu2Mwx6XiP4KzvgI+nrwnxUGgQxv9iogtv8JJDPL66dP1k1pj YbLLv3g5ofvihYNlSWDyGUODP0Uf3hTrL8Fml0WULSLEM+BZAgw45LVg8T9199Rc mMB1C/2Gr71MWwazErYAq3AgJk9jjKDJoav5Vw+RgOww9newXDcWn12xI4JeemK1 4dXKFmCX6ZcwTEGKi//DegLtFgwRuo83wS0I/kh223FHrtZYP6oLAdaBddhpAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUzHJfZ1APDXr2VpWjTRKrsDSmbC8wHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzM1MzgyZTM2Mzcy ZTMxMzIzODJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzMzNjMyMzAzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBjpDgDANBgkqhkiG9w0BAQsFAAOCAQEACavVl0WfPJYjM3xrBFvHXgMm OzPqC2NG31uKYODjkyayXyjilhrHbhjcGzSbSjrKT35s4eXPGTjrYXB2II8Ia4QP BANFPp1loFgqRC2biYZz/d2rMdkJifksh/E8dOARy6E+I7ZRIZjRdGixNbKGmj6j xzivJmQ2SIUI9No5RnI2gAfGjHjy9IEIB15LivRzwkTNnimt1Qvp4zpdvo/EAonH HkwFOSrW4w6tPAZzt7eiz9UG6riAjJUuRLJNUQB8ihl9WDbHGAudlAvvaYl531DP rqcFKEb0p/fhjSBglKpBeJavVOZXB1KVNtYUEy4JcLCu0O0aR2kHwAazAWUhJw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:32 2026 by rpki-client