$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3232322e302f32342d3234203d3e20313336393539.roa File: 35382e36372e3232322e302f32342d3234203d3e20313336393539.roa (raw, json) Hash identifier: ZGoY3ZmHVbUkGjU3azVD//7VT3Rly5XM5WXH6I3NfaQ= Subject key identifier: 2F:B6:18:E7:02:52:73:58:A4:CB:FC:A0:52:20:EA:F5:DB:DA:5D:01 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 3EFFF1EB9E86080AECF58A13B2E7DF8EDCFDE77D Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3232322e302f32342d3234203d3e20313336393539.roa Signing time: Tue 14 Apr 2026 03:27:43 +0000 ROA not before: Tue 14 Apr 2026 03:22:43 +0000 ROA not after: Tue 13 Apr 2027 03:27:43 +0000 asID: 136959 IP address blocks: 58.67.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:f1:eb:9e:86:08:0a:ec:f5:8a:13:b2:e7:df:8e:dc:fd:e7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:22:43 2026 GMT Not After : Apr 13 03:27:43 2027 GMT Subject: CN=2FB618E702527358A4CBFCA05220EAF5DBDA5D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:6f:7b:e5:7d:85:bb:97:3b:a8:99:51:56: ba:28:8f:b5:34:3b:1c:eb:56:0a:27:98:b4:47:ac: 63:a9:4e:6f:79:bb:77:a8:2c:e3:be:7e:4b:16:89: 68:4d:15:fb:0f:2b:a8:42:c7:14:66:7a:9d:12:82: 02:29:fd:ed:e4:1f:0c:90:60:4b:e5:d5:ef:cd:72: a0:33:15:c2:3f:a1:e1:79:f0:29:e5:1f:75:0a:84: 1c:5c:b4:03:5b:2f:28:f8:22:94:e8:a3:6b:e1:e9: 45:3d:da:73:4f:e0:12:25:92:7f:84:88:e8:3e:cc: fb:57:4e:ee:3e:d7:04:2f:7f:2c:5b:d3:ed:39:88: fa:03:f7:e3:0c:ef:80:d3:f1:ea:99:8d:15:f9:ea: 2d:99:fa:f7:48:b4:31:91:19:d1:e1:a4:86:0f:4f: c6:31:2f:21:fe:8f:c5:68:3e:99:26:ec:a6:f2:b0: ea:0a:a8:d7:cb:f9:6d:74:44:71:7f:1a:89:b1:54: 15:01:9c:62:a5:f3:10:60:8f:85:b8:eb:c0:94:5b: d2:8f:e2:b4:b6:5c:64:63:9b:7e:6d:79:bd:3c:25: 35:69:09:17:23:89:4e:cb:ea:69:f0:23:8e:46:ae: 62:98:fa:ff:c7:eb:f6:d1:ff:b0:23:82:10:44:32: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B6:18:E7:02:52:73:58:A4:CB:FC:A0:52:20:EA:F5:DB:DA:5D:01 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3232322e302f32342d3234203d3e20313336393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.67.222.0/24 Signature Algorithm: sha256WithRSAEncryption b7:7c:b8:40:74:4e:a8:ea:5d:e3:f5:14:9a:fc:14:2e:5f:7f: 6b:8e:e7:6f:a2:c7:23:4a:0c:99:2e:45:44:63:ba:e0:8f:13: 2f:30:b8:ac:81:60:23:cf:65:2f:cf:7d:b8:bb:57:df:2c:7d: 17:70:a0:49:91:d8:5c:5c:4c:36:50:0b:36:31:b3:f4:7c:45: 4b:f9:8e:ca:34:2b:6e:5e:1e:cc:01:fb:9f:ef:c2:f8:60:09: 05:19:64:1a:d1:0f:96:93:b4:e5:14:75:97:31:85:94:6a:48: b0:55:ca:9b:f5:67:47:fb:56:f3:b7:d4:ef:0e:c7:a0:bc:90: 0d:f2:30:87:b2:f5:af:b6:0a:d7:46:2e:6e:7c:c6:cd:c9:5a: 19:82:86:b9:d5:3c:74:14:60:3f:45:e6:50:23:dd:45:9a:92: fb:a1:a0:18:ee:df:3c:e2:ba:3a:5d:ac:9c:61:60:41:76:c7: e9:ce:4d:19:32:09:81:22:e1:f8:c9:03:cd:06:4a:5b:39:c2: b9:5a:e6:30:fb:96:54:94:1b:02:d0:fc:c9:70:5b:13:e9:08: cc:46:ab:19:1a:fb:b0:c3:90:30:ad:66:6d:53:5b:04:e7:f2: ce:31:c9:60:64:07:e1:9a:e6:a1:bd:3c:c4:67:dd:1a:d2:41: 78:74:b6:f2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPv/x656GCArs9YoTsuffjtz9530wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzIyNDNaFw0yNzA0MTMwMzI3NDNaMDMxMTAvBgNV BAMTKDJGQjYxOEU3MDI1MjczNThBNENCRkNBMDUyMjBFQUY1REJEQTVEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF5m975X2Fu5c7qJlRVrooj7U0 OxzrVgonmLRHrGOpTm95u3eoLOO+fksWiWhNFfsPK6hCxxRmep0SggIp/e3kHwyQ YEvl1e/NcqAzFcI/oeF58CnlH3UKhBxctANbLyj4IpToo2vh6UU92nNP4BIlkn+E iOg+zPtXTu4+1wQvfyxb0+05iPoD9+MM74DT8eqZjRX56i2Z+vdItDGRGdHhpIYP T8YxLyH+j8VoPpkm7KbysOoKqNfL+W10RHF/GomxVBUBnGKl8xBgj4W468CUW9KP 4rS2XGRjm35teb08JTVpCRcjiU7L6mnwI45GrmKY+v/H6/bR/7AjghBEMmCZAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUL7YY5wJSc1iky/ygUiDq9dvaXQEwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzM1MzgyZTM2Mzcy ZTMyMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM5MzUzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADpD3jANBgkqhkiG9w0BAQsFAAOCAQEAt3y4QHROqOpd4/UUmvwULl9/ a47nb6LHI0oMmS5FRGO64I8TLzC4rIFgI89lL899uLtX3yx9F3CgSZHYXFxMNlAL NjGz9HxFS/mOyjQrbl4ezAH7n+/C+GAJBRlkGtEPlpO05RR1lzGFlGpIsFXKm/Vn R/tW87fU7w7HoLyQDfIwh7L1r7YK10YubnzGzclaGYKGudU8dBRgP0XmUCPdRZqS +6GgGO7fPOK6Ol2snGFgQXbH6c5NGTIJgSLh+MkDzQZKWznCuVrmMPuWVJQbAtD8 yXBbE+kIzEarGRr7sMOQMK1mbVNbBOfyzjHJYGQH4Zrmob08xGfdGtJBeHS28g== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:25 2026 by rpki-client