$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32342e302f32342d3234203d3e20313336393539.roa File: 35392e3130372e32342e302f32342d3234203d3e20313336393539.roa (raw, json) Hash identifier: XPxtTAFQbPaGQVX7OHuhUkaMSOtShjblejfcZiLJeq4= Subject key identifier: D2:DE:B4:4F:64:A4:20:37:EB:82:4F:4B:9B:02:DE:CB:B0:A2:17:03 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 203E517D08F179703D4DF01DFDAE85CDB9F9E7AA Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32342e302f32342d3234203d3e20313336393539.roa Signing time: Tue 14 Apr 2026 03:19:18 +0000 ROA not before: Tue 14 Apr 2026 03:14:18 +0000 ROA not after: Tue 13 Apr 2027 03:19:18 +0000 asID: 136959 IP address blocks: 59.107.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3e:51:7d:08:f1:79:70:3d:4d:f0:1d:fd:ae:85:cd:b9:f9:e7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 14 03:14:18 2026 GMT Not After : Apr 13 03:19:18 2027 GMT Subject: CN=D2DEB44F64A42037EB824F4B9B02DECBB0A21703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:21:d9:f4:0c:01:7d:48:41:ff:19:ab:02: 10:e3:fd:a8:a4:d0:9a:ba:93:63:c5:fa:d9:da:1f: 10:d5:23:22:d4:ae:eb:29:74:4a:53:32:98:71:56: 05:09:5f:5d:af:53:92:2f:0c:d0:fa:2d:ba:67:70: e5:c9:01:f8:d7:4f:08:a5:99:66:c0:af:23:3b:c0: 7f:52:6f:84:30:d9:8c:4f:9f:9f:b6:10:b4:bc:97: 61:46:5d:94:ee:7f:af:57:bf:ff:38:96:76:83:a9: f6:4d:93:43:8a:4d:6c:76:9a:25:65:86:02:42:e4: 95:ec:95:bf:aa:48:46:a3:6c:f9:c8:0a:3b:72:90: 3f:9b:9e:62:2b:27:a3:11:b2:f5:83:52:b4:4e:b7: 5d:c8:2f:ac:e1:fa:70:e9:de:f5:6d:97:53:9b:7d: cd:88:35:ec:ac:34:6a:86:6a:17:66:c3:c2:87:aa: 44:46:f9:a1:2f:84:5a:06:f7:de:74:1f:74:a6:c4: 8c:9a:4f:02:03:a6:6e:0d:5a:ee:6a:5d:ea:47:ab: 8f:4f:2e:eb:6f:49:ee:ee:f7:42:34:cf:dd:de:67: f5:80:a9:08:fe:a9:26:41:42:7b:6f:57:9e:84:97: 8e:70:b5:db:25:9c:f5:ef:1c:fe:45:cf:80:f0:12: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DE:B4:4F:64:A4:20:37:EB:82:4F:4B:9B:02:DE:CB:B0:A2:17:03 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32342e302f32342d3234203d3e20313336393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.107.24.0/24 Signature Algorithm: sha256WithRSAEncryption b2:4e:f1:b9:77:80:bb:f4:78:c9:74:48:d4:c9:f5:74:57:3e: f4:27:68:35:e9:38:36:d8:1b:33:2a:7a:ec:cc:62:72:d5:79: 77:30:32:9d:c3:73:0d:98:c2:09:2c:74:0e:61:35:61:ef:38: 8e:b6:51:bd:e3:4c:35:c9:c6:e1:ed:b3:ef:57:3d:98:e4:a7: a4:e1:d2:6f:2f:de:53:98:fc:bc:5a:9e:3e:0a:66:ab:0a:99: 04:9d:08:3d:fb:02:62:0a:51:20:08:b2:ad:42:84:92:ac:c9: 11:fa:59:bd:9e:75:3e:46:46:e9:30:48:fc:e6:28:58:f7:77: a0:0c:fc:d3:89:26:b7:62:a0:a2:50:2f:a8:01:77:94:e2:9c: f3:c5:2d:84:e2:ed:fd:c0:5f:93:47:88:44:6a:3f:27:f4:0d: 0d:ac:39:24:97:60:d5:2d:84:15:ac:88:1a:7c:cc:c7:b2:9f: 68:0a:7f:9a:cf:b4:5d:79:6d:d5:3f:c1:69:b0:2b:bb:b0:d6: 44:da:9e:04:ea:fd:80:fc:ac:00:de:bf:cd:fd:ac:81:f0:eb: ec:ac:93:f5:1c:03:b5:d2:97:67:b2:0f:85:87:90:0a:33:ae: 30:e1:4e:8e:c7:b0:5b:c7:f6:ac:49:3c:19:75:0b:15:55:6c: 33:f7:1b:37 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUID5RfQjxeXA9TfAd/a6Fzbn556owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTQwMzE0MThaFw0yNzA0MTMwMzE5MThaMDMxMTAvBgNV BAMTKEQyREVCNDRGNjRBNDIwMzdFQjgyNEY0QjlCMDJERUNCQjBBMjE3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJyHZ9AwBfUhB/xmrAhDj/aik 0Jq6k2PF+tnaHxDVIyLUruspdEpTMphxVgUJX12vU5IvDND6LbpncOXJAfjXTwil mWbAryM7wH9Sb4Qw2YxPn5+2ELS8l2FGXZTuf69Xv/84lnaDqfZNk0OKTWx2miVl hgJC5JXslb+qSEajbPnICjtykD+bnmIrJ6MRsvWDUrROt13IL6zh+nDp3vVtl1Ob fc2INeysNGqGahdmw8KHqkRG+aEvhFoG9950H3SmxIyaTwIDpm4NWu5qXepHq49P LutvSe7u90I0z93eZ/WAqQj+qSZBQntvV56El45wtdslnPXvHP5Fz4DwEnDHAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU0t60T2SkIDfrgk9LmwLey7CiFwMwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0NzgxMjg2Ny8wLzM1MzkyZTMxMzAz NzJlMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM5MzUzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEADtrGDANBgkqhkiG9w0BAQsFAAOCAQEAsk7xuXeAu/R4yXRI1Mn1dFc+ 9CdoNek4NtgbMyp67MxictV5dzAyncNzDZjCCSx0DmE1Ye84jrZRveNMNcnG4e2z 71c9mOSnpOHSby/eU5j8vFqePgpmqwqZBJ0IPfsCYgpRIAiyrUKEkqzJEfpZvZ51 PkZG6TBI/OYoWPd3oAz804kmt2KgolAvqAF3lOKc88UthOLt/cBfk0eIRGo/J/QN Daw5JJdg1S2EFayIGnzMx7KfaAp/ms+0XXlt1T/BabAru7DWRNqeBOr9gPysAN6/ zf2sgfDr7KyT9RwDtdKXZ7IPhYeQCjOuMOFOjsewW8f2rEk8GXULFVVsM/cbNw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:34 2026 by rpki-client