
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313438393936.roa
File: 35382e36372e302e302f31372d3234203d3e20313438393936.roa (raw, json)
Hash identifier: T0ho5F3cnxqujRKmBRLys9ymQ/BPposKuoKGQ9R77RI=
Subject key identifier: 77:FE:07:2A:68:1C:BD:51:0D:08:BB:32:A3:58:E9:1A:D1:6B:29:6D
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 1F5B130353F8D413BC1D35A4CED169EC217EB9DA
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313438393936.roa
Signing time: Fri 11 Sep 2026 12:26:41 +0000
ROA not before: Fri 11 Sep 2026 12:21:41 +0000
ROA not after: Fri 10 Sep 2027 12:26:41 +0000
asID: 148996
IP address blocks: 58.67.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5b:13:03:53:f8:d4:13:bc:1d:35:a4:ce:d1:69:ec:21:7e:b9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:21:41 2026 GMT
Not After : Sep 10 12:26:41 2027 GMT
Subject: CN=77FE072A681CBD510D08BB32A358E91AD16B296D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:1b:c5:64:91:b0:03:44:89:e1:48:f6:45:
c4:dd:f1:6e:f3:1b:eb:3f:05:06:ed:cb:43:f0:08:
a2:83:83:95:82:67:c8:7d:04:85:d1:bb:ee:69:86:
91:64:c8:0e:8f:a0:9f:54:48:d2:5a:05:08:67:f9:
4c:b0:18:f1:db:1c:5e:a3:e5:2e:d3:ec:a4:35:ba:
92:0a:4a:bd:82:fa:20:60:35:d4:b6:b3:48:df:e1:
1f:32:75:5e:8c:6c:96:eb:8e:39:fa:7d:b9:ed:c1:
61:74:10:41:b7:5f:59:d6:ec:17:45:19:01:ba:ae:
fe:77:a3:ee:05:03:ed:90:e0:85:a8:8b:0e:cd:47:
6f:c2:7d:a1:34:f9:aa:96:e2:3f:d0:5e:24:75:8a:
9e:40:b8:21:21:0a:3b:8a:f2:d6:b9:c1:a1:4c:48:
d5:33:be:73:0c:1f:14:ba:aa:7a:f5:fc:db:ae:52:
d7:ff:ea:e9:f6:0c:8f:8f:c3:37:50:27:ba:2a:3e:
b8:1c:52:ae:98:f0:51:85:98:ee:ef:97:ec:d6:d8:
af:2f:80:5e:35:ea:05:5c:c1:ba:46:ea:31:50:24:
dd:f5:c7:d8:56:f6:c1:6f:da:37:0a:80:45:a4:a5:
83:35:e9:e2:d8:ad:52:36:2c:64:31:b9:cd:98:5f:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:07:2A:68:1C:BD:51:0D:08:BB:32:A3:58:E9:1A:D1:6B:29:6D
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313438393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.0.0/17
Signature Algorithm: sha256WithRSAEncryption
50:91:f9:c9:7e:5f:f2:41:18:d1:95:75:91:14:5e:92:e5:11:
4a:b7:c5:5d:4a:a2:1c:ce:27:58:d9:ea:86:8d:db:a2:e9:3a:
08:38:38:f7:00:6b:44:47:85:c4:b7:94:4a:e4:54:70:79:3c:
a0:e5:d2:f3:5e:53:3b:9f:e8:c5:db:9f:1a:09:cb:a9:14:4f:
c7:0c:0c:a4:a0:b2:e8:ae:fe:4c:ef:1f:3f:21:d8:5a:9b:4b:
14:88:ab:24:c4:16:bf:4a:e8:35:b3:e6:7d:ed:33:37:02:cb:
a9:33:da:cc:39:b7:3c:d4:b4:61:5c:a7:2c:3b:d8:c7:2c:62:
fa:bb:12:18:07:32:78:7a:50:53:18:4f:0f:51:ea:ec:99:dc:
46:52:4e:3d:6f:5b:7c:67:27:92:e8:0c:ac:16:28:92:fd:6c:
dc:dd:77:35:b9:f5:82:12:82:c0:3e:5d:8f:b2:93:25:5e:ca:
b9:8d:17:bb:21:99:94:a8:b6:96:e2:e4:fc:d4:fc:cf:ab:19:
21:53:d1:f1:30:ca:8e:fd:9d:73:45:b4:de:70:44:34:b0:c2:
00:2e:ac:d9:7f:81:34:11:e2:21:32:9d:d8:ba:26:49:5b:03:
cd:1f:64:90:2f:37:8a:fd:89:29:b6:19:3a:81:6f:69:e0:37:
36:ce:d2:1d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUH1sTA1P41BO8HTWkztFp7CF+udowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA5MTExMjIxNDFaFw0yNzA5MTAxMjI2NDFaMDMxMTAvBgNV
BAMTKDc3RkUwNzJBNjgxQ0JENTEwRDA4QkIzMkEzNThFOTFBRDE2QjI5NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXxvFZJGwA0SJ4Uj2RcTd8W7z
G+s/BQbty0PwCKKDg5WCZ8h9BIXRu+5phpFkyA6PoJ9USNJaBQhn+UywGPHbHF6j
5S7T7KQ1upIKSr2C+iBgNdS2s0jf4R8ydV6MbJbrjjn6fbntwWF0EEG3X1nW7BdF
GQG6rv53o+4FA+2Q4IWoiw7NR2/CfaE0+aqW4j/QXiR1ip5AuCEhCjuK8ta5waFM
SNUzvnMMHxS6qnr1/NuuUtf/6un2DI+PwzdQJ7oqPrgcUq6Y8FGFmO7vl+zW2K8v
gF416gVcwbpG6jFQJN31x9hW9sFv2jcKgEWkpYM16eLYrVI2LGQxuc2YX1vxAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUd/4HKmgcvVENCLsyo1jpGtFrKW0wHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzODJlMzYzNzJl
MzAyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMTM0MzgzOTM5MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAc6QwAwDQYJKoZIhvcNAQELBQADggEBAFCR+cl+X/JBGNGVdZEUXpLlEUq3xV1K
ohzOJ1jZ6oaN26LpOgg4OPcAa0RHhcS3lErkVHB5PKDl0vNeUzuf6MXbnxoJy6kU
T8cMDKSgsuiu/kzvHz8h2FqbSxSIqyTEFr9K6DWz5n3tMzcCy6kz2sw5tzzUtGFc
pyw72McsYvq7EhgHMnh6UFMYTw9R6uyZ3EZSTj1vW3xnJ5LoDKwWKJL9bNzddzW5
9YISgsA+XY+ykyVeyrmNF7shmZSotpbi5PzU/M+rGSFT0fEwyo79nXNFtN5wRDSw
wgAurNl/gTQR4iEyndi6JklbA80fZJAvN4r9iSm2GTqBb2ngNzbO0h0=
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:48:35 2026 by rpki-client