$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/35392e3131302e302e302f31362d3234203d3e203337393633.roa File: 35392e3131302e302e302f31362d3234203d3e203337393633.roa (raw, json) Hash identifier: /UuE+qfWK+I0fiLLJ5G1+T6+v+m5NU4fGU9YLuU8L2Q= Subject key identifier: BD:3C:CD:87:D1:A7:12:F1:91:DB:14:23:A8:43:3E:5F:4E:F0:79:52 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 229AE3B58DE3A6A2B9896E45D23EDCD8C6412946 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/35392e3131302e302e302f31362d3234203d3e203337393633.roa Signing time: Fri 17 Apr 2026 08:29:38 +0000 ROA not before: Fri 17 Apr 2026 08:24:38 +0000 ROA not after: Fri 16 Apr 2027 08:29:38 +0000 asID: 37963 IP address blocks: 59.110.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9a:e3:b5:8d:e3:a6:a2:b9:89:6e:45:d2:3e:dc:d8:c6:41:29:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 17 08:24:38 2026 GMT Not After : Apr 16 08:29:38 2027 GMT Subject: CN=BD3CCD87D1A712F191DB1423A8433E5F4EF07952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:68:a7:b8:f4:8b:61:cc:91:d9:c0:28:34: 17:89:c5:df:e2:e5:a6:15:91:5f:7b:d2:a0:03:46: 34:ae:97:d7:6b:8a:82:8d:f2:5e:b5:b9:b8:00:a8: 67:38:37:db:b4:80:a8:84:96:07:82:12:e8:02:1d: 12:6d:bc:b2:e7:0f:90:2a:68:e2:55:72:44:6a:9f: 2d:ba:17:52:a9:2b:61:c7:b1:f2:2a:da:c7:98:0f: 69:95:ca:b0:ea:7a:c7:7d:fc:e8:5e:df:3b:16:37: 51:6b:8f:46:38:8a:7c:c8:0d:3c:6b:9e:0e:ee:8f: 16:74:11:cb:46:b0:8a:1f:5a:6e:42:87:49:c6:75: 9c:e9:b2:aa:11:a4:ff:af:cc:34:2c:34:fa:88:d6: 3a:8c:1c:dd:9d:31:59:3b:58:e7:b7:10:fd:ca:26: e8:a0:ef:74:ef:57:ed:82:dc:3d:37:c0:8b:73:fe: 19:16:4f:64:11:f0:45:03:0a:20:05:c2:36:90:a5: 89:32:7b:ae:12:6d:f8:e2:44:8b:c1:3a:05:22:64: 13:2d:4d:99:fe:e3:26:d2:13:09:43:74:7c:9d:e2: 0b:ed:46:bb:24:cf:9f:ca:00:dc:51:e6:23:8d:ce: b8:1c:e6:6b:57:5e:1e:96:31:ea:b6:0d:ab:99:9c: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3C:CD:87:D1:A7:12:F1:91:DB:14:23:A8:43:3E:5F:4E:F0:79:52 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/35392e3131302e302e302f31362d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.110.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:fb:5b:90:c9:0b:5a:c3:af:54:82:d0:98:12:06:ed:ca:c3: 23:b0:2a:9b:69:7c:0c:20:57:f3:01:08:5d:8d:dc:da:ef:e4: a8:33:bf:85:6d:cd:5e:08:15:4c:22:12:6a:d6:8a:07:17:4b: fa:2e:d8:80:7d:60:34:97:b6:00:30:52:15:a2:4a:c2:3b:66: 11:64:0d:ba:e0:fa:c8:f9:03:1d:41:97:87:24:7a:26:7f:49: 88:20:93:5d:c6:91:cc:d3:fd:c7:03:94:76:0b:05:cd:02:69: bf:62:d2:8a:6c:11:0c:9a:38:8f:3e:fa:74:cd:d4:39:4c:88: 0f:c5:ee:6c:79:87:c8:de:ce:32:91:2c:66:72:96:ac:29:eb: 96:50:5a:a8:56:01:c8:e9:33:cb:e4:5d:3c:b7:5f:74:a1:12: a5:40:58:86:6c:e7:30:8c:29:7a:ed:ee:e1:c7:7d:71:dc:7f: 41:06:71:03:fc:e7:ad:a1:e2:af:15:d5:33:d3:7f:c7:73:ff: 79:db:03:43:cb:e9:c2:9b:2d:d2:b4:1b:96:73:e7:be:9b:7a: d5:7e:4d:60:85:1f:d2:8e:e4:90:a0:10:7f:16:da:e9:e0:ab: 96:6e:ff:14:c8:8b:18:7f:6d:3a:c3:b8:a2:27:24:1b:6d:71: f7:3e:fa:d2 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUIprjtY3jpqK5iW5F0j7c2MZBKUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MTcwODI0MzhaFw0yNzA0MTYwODI5MzhaMDMxMTAvBgNV BAMTKEJEM0NDRDg3RDFBNzEyRjE5MURCMTQyM0E4NDMzRTVGNEVGMDc5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/minuPSLYcyR2cAoNBeJxd/i 5aYVkV970qADRjSul9drioKN8l61ubgAqGc4N9u0gKiElgeCEugCHRJtvLLnD5Aq aOJVckRqny26F1KpK2HHsfIq2seYD2mVyrDqesd9/Ohe3zsWN1Frj0Y4inzIDTxr ng7ujxZ0EctGsIofWm5Ch0nGdZzpsqoRpP+vzDQsNPqI1jqMHN2dMVk7WOe3EP3K Juig73TvV+2C3D03wItz/hkWT2QR8EUDCiAFwjaQpYkye64SbfjiRIvBOgUiZBMt TZn+4ybSEwlDdHyd4gvtRrskz5/KANxR5iONzrgc5mtXXh6WMeq2DauZnHGnAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUvTzNh9GnEvGR2xQjqEM+X07weVIwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzUzOTJlMzEzMTMw MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwA7bjANBgkqhkiG9w0BAQsFAAOCAQEABftbkMkLWsOvVILQmBIG7crDI7Aqm2l8 DCBX8wEIXY3c2u/kqDO/hW3NXggVTCISataKBxdL+i7YgH1gNJe2ADBSFaJKwjtm EWQNuuD6yPkDHUGXhyR6Jn9JiCCTXcaRzNP9xwOUdgsFzQJpv2LSimwRDJo4jz76 dM3UOUyID8XubHmHyN7OMpEsZnKWrCnrllBaqFYByOkzy+RdPLdfdKESpUBYhmzn MIwpeu3u4cd9cdx/QQZxA/znraHirxXVM9N/x3P/edsDQ8vpwpst0rQblnPnvpt6 1X5NYIUf0o7kkKAQfxba6eCrlm7/FMiLGH9tOsO4oickG21x9z760g== -----END CERTIFICATE-----Generated at Sat Apr 18 04:13:23 2026 by rpki-client