
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e203138383131.roa
File: 35382e36362e302e302f31362d3234203d3e203138383131.roa (raw, json)
Hash identifier: qkkGIc511BBJsVcfTetkIy4oxzZ3+XENvrd5vsltcyg=
Subject key identifier: 44:0F:D6:91:08:2F:62:D3:DF:02:59:F6:33:49:6F:E0:27:15:3B:1E
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 79F9FDCCA344C07B3801F49F8C5E1BF759A7B957
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e203138383131.roa
Signing time: Tue 26 May 2026 02:19:04 +0000
ROA not before: Tue 26 May 2026 02:14:04 +0000
ROA not after: Tue 25 May 2027 02:19:04 +0000
asID: 18811
IP address blocks: 58.66.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f9:fd:cc:a3:44:c0:7b:38:01:f4:9f:8c:5e:1b:f7:59:a7:b9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: May 26 02:14:04 2026 GMT
Not After : May 25 02:19:04 2027 GMT
Subject: CN=440FD691082F62D3DF0259F633496FE027153B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:87:37:24:45:5b:cf:47:2e:bb:2a:98:b1:
35:a4:3d:da:e9:5c:a9:af:42:b5:25:3c:e3:c9:0d:
54:d0:af:d4:65:fb:7e:ce:f0:12:74:5e:68:b0:b5:
f5:27:8b:a8:0e:7b:ef:09:14:b5:c0:e0:67:8c:ba:
79:71:8f:d4:2e:31:dd:e9:1d:d1:8f:83:5c:ef:2b:
eb:c1:40:ab:10:18:fa:70:ca:3b:33:6b:4d:db:fe:
01:22:31:47:13:2a:f2:9d:66:d6:96:18:85:bd:86:
70:8e:28:76:0f:05:80:5e:bd:01:5e:a2:69:cd:38:
f7:15:15:f2:29:42:81:1e:e4:39:6f:08:2d:3f:a9:
44:25:8c:df:82:72:c8:d9:50:9c:06:6c:0c:4a:d0:
91:3d:65:fc:13:e7:a2:31:f2:f3:f2:92:ee:72:9b:
91:8b:c4:73:7d:d5:36:b6:90:54:a4:0b:85:56:26:
27:bb:fd:88:77:8b:18:e1:1f:8a:68:9c:75:52:35:
84:7d:03:66:a0:af:be:79:4d:c1:aa:c5:2b:44:e8:
ad:cf:0c:bb:dc:34:c7:ae:c2:a3:c9:36:08:0a:4a:
1e:6c:98:32:9a:e1:1e:f6:38:31:ba:e1:1c:53:9c:
72:be:ba:f0:ef:02:f2:3b:c2:0b:e2:69:28:ed:78:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:D6:91:08:2F:62:D3:DF:02:59:F6:33:49:6F:E0:27:15:3B:1E
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e203138383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:31:f2:9a:9c:cf:84:99:c7:b4:21:78:5e:1f:ab:7c:61:8e:
36:e9:0c:44:87:9f:a6:84:ce:8b:b7:20:b6:f4:6d:ab:95:ba:
d5:47:90:78:cd:bd:14:dc:f1:af:69:ec:ca:c6:3d:91:19:e4:
d6:7b:cd:dd:57:9d:aa:ae:11:98:d4:29:cb:95:ec:39:76:65:
01:a9:58:dd:38:e4:de:54:c1:98:8c:29:15:a1:20:21:cc:1c:
8e:f4:99:ef:7d:fc:d1:70:89:53:c3:99:dd:e1:70:83:37:13:
d0:cb:7d:e5:96:6c:f9:fe:51:18:45:9a:bf:66:19:a3:2f:52:
47:d3:26:a3:9d:7d:3b:11:a2:37:10:12:80:f3:ff:5a:42:32:
83:97:0f:d6:5f:48:e1:29:83:7b:c8:27:86:ce:d9:e4:a5:f9:
25:e8:6b:72:c9:a9:35:56:17:4b:3d:54:73:b7:20:c4:63:6c:
10:aa:6f:e2:6f:01:14:76:34:0e:45:63:ff:5d:4b:18:8a:75:
42:c0:3b:d4:da:da:20:2c:84:ad:20:96:58:86:99:56:d6:18:
c4:10:53:f2:ea:53:05:c5:e5:ac:68:4e:b6:f1:c2:80:07:28:
6c:74:59:a3:8e:81:05:c9:64:94:2a:16:0c:f2:06:fa:73:f5:
d1:ef:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:48 2026 by rpki-client