
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20313532313739.roa
File: 35382e36362e302e302f31362d3234203d3e20313532313739.roa (raw, json)
Hash identifier: sEWOp+E0nUEACIpYaeGtDXYxj2Cn9IrTzX0hCJXh8Lw=
Subject key identifier: 72:74:D3:BF:DD:D3:C0:49:FE:20:85:F6:30:8A:FA:17:B3:1F:DF:DB
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 5303F700472559331D3E26A4AED5DE9AD95338A5
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20313532313739.roa
Signing time: Wed 27 May 2026 03:23:24 +0000
ROA not before: Wed 27 May 2026 03:18:24 +0000
ROA not after: Wed 26 May 2027 03:23:24 +0000
asID: 152179
IP address blocks: 58.66.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:03:f7:00:47:25:59:33:1d:3e:26:a4:ae:d5:de:9a:d9:53:38:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: May 27 03:18:24 2026 GMT
Not After : May 26 03:23:24 2027 GMT
Subject: CN=7274D3BFDDD3C049FE2085F6308AFA17B31FDFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:4f:f1:bc:55:55:4b:42:44:b0:e3:19:d3:
ff:41:5e:88:c9:b3:44:60:7a:c6:2e:ea:07:58:46:
99:33:46:82:a5:70:64:7a:f3:8d:33:d6:86:f2:4f:
e3:dd:fc:99:1d:34:e8:49:2d:4d:34:b3:35:9f:08:
c9:57:8f:d6:97:4a:6f:b9:c0:2f:d2:12:86:c1:22:
bd:c4:57:84:6e:30:cd:61:18:50:f5:d3:42:81:66:
bf:d6:9d:fe:d2:1a:4c:78:0f:fb:2f:91:df:a2:c1:
94:19:4c:85:0a:ff:ae:7a:bf:b8:58:20:96:27:eb:
a0:58:7c:f2:bb:dc:3e:dc:2e:b9:30:5b:62:9d:b3:
e0:10:d7:6e:2a:c1:4f:21:a4:0a:30:49:86:cf:2c:
3f:e9:28:aa:55:5b:2d:36:f4:b4:88:9a:69:a8:51:
15:fc:46:0a:97:53:39:96:c0:9f:ce:a7:8d:2d:ce:
6b:56:58:59:ce:59:7f:b4:2c:12:29:f0:0c:67:7e:
0f:a1:db:e9:30:bd:4e:bb:25:d9:42:a7:39:cd:f0:
9d:3f:3b:7b:4f:60:ae:51:f3:4d:cf:13:5e:40:d7:
d8:02:83:a5:03:29:34:6c:20:89:21:eb:54:92:ee:
03:8e:98:02:06:7a:d0:df:4d:ae:f1:35:5d:0e:8a:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:D3:BF:DD:D3:C0:49:FE:20:85:F6:30:8A:FA:17:B3:1F:DF:DB
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:7e:d7:96:13:af:66:d8:5c:6a:1b:85:bd:9d:e1:fe:70:54:
df:8e:30:b4:89:25:cb:fb:f3:8b:bb:3d:84:e4:c8:6e:94:2e:
41:79:9a:e0:f9:af:8c:c9:36:55:ff:ac:fb:12:41:d1:71:a3:
3d:3c:18:92:be:32:e9:f8:22:13:2d:0c:4d:c2:5f:33:44:68:
77:4d:db:34:42:24:93:62:55:1f:2c:e0:bc:a9:f9:bf:26:22:
63:7b:4b:bb:fb:a3:6f:ea:72:d9:26:60:5c:f8:ab:75:57:14:
e7:4f:67:99:a3:ba:c3:17:a8:97:b2:55:9c:ce:b0:65:d6:0a:
60:6f:9c:6c:c9:63:19:bb:a3:5e:b6:a5:38:05:ca:28:18:ac:
de:ef:0a:9e:6b:95:9f:a2:ce:ad:e8:6b:a7:e0:c2:2e:1c:a2:
a4:b4:69:cd:ac:ca:a4:31:f5:e9:09:68:c4:e3:af:c4:eb:00:
ca:fc:83:40:19:71:20:8e:3f:01:e5:32:48:37:4f:bb:db:b8:
b4:f0:a3:34:03:3c:4b:0e:14:0b:4e:dc:f2:83:a8:f6:1b:69:
cc:05:65:41:06:7d:6c:ac:d3:41:34:6a:0d:23:fb:fd:ee:ee:
4d:8f:80:14:b1:2d:c4:f9:f0:8e:68:ee:d4:b1:9b:a3:73:a5:
67:3c:f9:d5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUUwP3AEclWTMdPiakrtXemtlTOKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA1MjcwMzE4MjRaFw0yNzA1MjYwMzIzMjRaMDMxMTAvBgNV
BAMTKDcyNzREM0JGREREM0MwNDlGRTIwODVGNjMwOEFGQTE3QjMxRkRGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UU/xvFVVS0JEsOMZ0/9BXojJ
s0RgesYu6gdYRpkzRoKlcGR6840z1obyT+Pd/JkdNOhJLU00szWfCMlXj9aXSm+5
wC/SEobBIr3EV4RuMM1hGFD100KBZr/Wnf7SGkx4D/svkd+iwZQZTIUK/656v7hY
IJYn66BYfPK73D7cLrkwW2Kds+AQ124qwU8hpAowSYbPLD/pKKpVWy029LSImmmo
URX8RgqXUzmWwJ/Op40tzmtWWFnOWX+0LBIp8Axnfg+h2+kwvU67JdlCpznN8J0/
O3tPYK5R803PE15A19gCg6UDKTRsIIkh61SS7gOOmAIGetDfTa7xNV0OihcDAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUcnTTv93TwEn+IIX2MIr6F7Mf39swHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNjJl
MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMTM1MzIzMTM3Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwA6QjANBgkqhkiG9w0BAQsFAAOCAQEAIn7XlhOvZthcahuFvZ3h/nBU344wtIkl
y/vzi7s9hOTIbpQuQXma4PmvjMk2Vf+s+xJB0XGjPTwYkr4y6fgiEy0MTcJfM0Ro
d03bNEIkk2JVHyzgvKn5vyYiY3tLu/ujb+py2SZgXPirdVcU509nmaO6wxeol7JV
nM6wZdYKYG+cbMljGbujXralOAXKKBis3u8KnmuVn6LOrehrp+DCLhyipLRpzazK
pDH16QloxOOvxOsAyvyDQBlxII4/AeUySDdPu9u4tPCjNAM8Sw4UC07c8oOo9htp
zAVlQQZ9bKzTQTRqDSP7/e7uTY+AFLEtxPnwjmju1LGbo3OlZzz51Q==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:15 2026 by rpki-client