
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2036303937.roa
File: 35382e36362e302e302f31362d3234203d3e2036303937.roa (raw, json)
Hash identifier: SmzM0NXIZhakw8vc2276gUiza4k2JvGmIZM0iVJEIoQ=
Subject key identifier: 6C:72:15:C8:DA:AB:D5:D1:DF:62:2E:3B:81:F5:FF:C6:FE:81:65:C2
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 4F4F16D5E4903F717F1BBCA9299C64CFA6334A4E
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2036303937.roa
Signing time: Tue 26 May 2026 02:19:04 +0000
ROA not before: Tue 26 May 2026 02:14:04 +0000
ROA not after: Tue 25 May 2027 02:19:04 +0000
asID: 6097
IP address blocks: 58.66.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4f:16:d5:e4:90:3f:71:7f:1b:bc:a9:29:9c:64:cf:a6:33:4a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: May 26 02:14:04 2026 GMT
Not After : May 25 02:19:04 2027 GMT
Subject: CN=6C7215C8DAABD5D1DF622E3B81F5FFC6FE8165C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:ce:f3:1d:88:3d:2b:91:25:d8:fb:27:be:
b6:96:0b:fa:e9:f5:ad:fe:70:84:0b:0f:f4:ef:c7:
39:47:d0:48:6b:4e:b3:fa:bd:ce:81:63:3f:fa:a9:
b1:a6:02:65:41:7b:3b:63:58:66:d8:8b:0a:f3:8f:
82:90:17:a6:e7:c3:05:ed:b9:fb:eb:08:a3:13:1c:
c6:b8:ee:a4:e0:0d:0d:18:7a:95:7d:d8:4f:b1:12:
70:8b:7e:01:7a:53:95:d3:c1:a9:4a:d4:dd:fe:7e:
42:ec:0d:9c:27:cc:df:b0:7c:b0:55:8b:57:5e:5a:
32:c5:34:da:7a:e7:33:b7:ae:21:1e:19:0d:db:5f:
78:30:7b:38:4e:0e:87:80:ef:b5:ff:7e:a4:4e:23:
19:e7:a3:7c:93:af:1c:90:c0:76:c2:1a:81:06:6f:
25:07:1d:a5:c4:65:3d:58:20:83:56:20:d9:0c:1e:
8e:dd:c4:11:98:1d:26:57:fb:a2:ab:ce:b2:b9:01:
12:4d:83:06:41:99:c5:36:ce:65:a2:07:3c:44:7c:
fe:1a:7c:9b:73:53:81:bd:ae:8f:0f:c9:10:55:40:
13:18:5f:43:a5:aa:d6:ff:ec:fb:ee:d1:95:c8:28:
a6:5a:46:02:68:30:4a:af:94:c1:4f:76:8f:15:70:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:15:C8:DA:AB:D5:D1:DF:62:2E:3B:81:F5:FF:C6:FE:81:65:C2
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36362e302e302f31362d3234203d3e2036303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:fb:81:ff:d3:78:e7:e4:57:5d:77:36:3b:c2:a0:94:cf:4e:
42:30:b5:2a:cf:15:8b:06:05:32:fe:f8:f2:bf:dd:43:40:c7:
2e:3a:ea:83:69:33:17:9e:9c:63:af:a7:4e:cf:82:e6:b1:2f:
d5:c6:a6:15:f4:0f:fb:d1:df:40:72:bd:8a:ca:fb:d1:06:ab:
cf:44:46:6a:03:93:5f:59:f6:15:10:e4:63:c0:88:5c:63:c0:
54:f2:4b:e8:6d:dc:78:9e:f5:3d:8e:27:bb:05:3b:57:ab:fb:
4c:ad:5a:96:f3:20:72:bc:25:95:9c:ea:03:e3:77:d6:ae:fd:
82:5e:7d:6f:16:32:f1:5f:6c:21:2e:d8:3c:a6:0d:64:6e:be:
60:3b:65:0b:16:b2:0f:1d:29:bd:2a:ea:70:44:34:2c:5b:3d:
59:91:15:f2:97:25:16:9c:7f:ba:46:09:e5:73:99:f0:74:2c:
ea:24:f8:6a:67:88:1d:a9:dd:03:dd:e3:d6:d3:27:cb:63:e8:
e5:f0:97:9a:d8:ef:21:ca:04:9b:95:5d:59:b3:88:9e:32:3b:
44:70:e0:61:5c:0d:43:fb:4d:1f:ac:24:1b:ad:29:9d:db:94:
14:6e:34:48:cc:e8:e1:0b:68:ba:0a:c8:3c:54:0d:89:15:3f:
7f:d4:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:52 2026 by rpki-client