
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313532313739.roa
File: 35382e36372e302e302f31372d3234203d3e20313532313739.roa (raw, json)
Hash identifier: 8+2G6eYq5LBh3RAKBzuouIND0mmbSuroCsfD0VkWSYU=
Subject key identifier: 9F:54:B4:64:6B:70:50:C5:34:DA:C6:A3:07:78:4A:01:6A:23:A5:11
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 0D39B354713889644CAFFAE91A474C04B643CA18
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313532313739.roa
Signing time: Wed 27 May 2026 03:23:24 +0000
ROA not before: Wed 27 May 2026 03:18:24 +0000
ROA not after: Wed 26 May 2027 03:23:24 +0000
asID: 152179
IP address blocks: 58.67.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:39:b3:54:71:38:89:64:4c:af:fa:e9:1a:47:4c:04:b6:43:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: May 27 03:18:24 2026 GMT
Not After : May 26 03:23:24 2027 GMT
Subject: CN=9F54B4646B7050C534DAC6A307784A016A23A511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:77:47:78:ba:be:e1:54:72:dc:d4:68:5a:
7e:61:ec:cc:1e:34:ab:c5:3c:74:2d:72:1f:8f:6a:
67:51:bd:05:ab:24:8e:35:4a:65:c2:1c:9f:c4:fb:
34:c1:0f:96:3a:64:21:5f:dc:45:a0:78:62:c0:23:
cf:ce:7a:46:ec:1e:d3:f0:1c:24:15:80:9d:4e:b6:
f8:a8:a0:cc:c0:99:bc:77:ff:03:0d:11:c9:1e:63:
e2:ba:a4:4c:e9:6a:e1:78:56:79:55:be:54:80:8c:
4c:58:4b:04:9a:54:9f:a8:a3:37:25:48:cc:32:a7:
23:3e:a7:e0:81:ea:6e:a8:b2:71:bb:b2:24:f5:fb:
c8:28:6d:5b:70:db:60:25:a3:9c:7c:76:8d:27:93:
1b:ec:07:67:1a:b3:d9:c4:fa:64:cc:63:47:44:0b:
24:9f:95:fa:49:08:3b:67:47:d9:df:f2:9f:0d:20:
4d:ec:5e:bf:bf:2f:61:dc:8e:3c:ba:d8:bb:01:e6:
77:a3:4f:1d:77:97:9e:86:21:43:8d:32:a4:42:5d:
a1:e4:32:2e:e5:27:cf:45:17:ff:df:36:f3:b9:09:
17:97:c5:9f:eb:6a:2c:63:82:d5:70:96:de:a2:7f:
0a:16:31:59:1a:79:80:c5:30:d3:9e:2b:68:d7:3f:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:B4:64:6B:70:50:C5:34:DA:C6:A3:07:78:4A:01:6A:23:A5:11
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.0.0/17
Signature Algorithm: sha256WithRSAEncryption
08:8f:e3:4e:cc:90:ba:19:88:34:75:f6:0c:08:21:9f:01:54:
7c:20:f9:7d:64:08:8f:46:5f:d5:9f:e9:32:1f:39:07:0e:b0:
6b:b8:d3:81:d1:58:50:10:c5:88:ec:4c:c2:45:bd:55:ca:72:
4f:5a:d6:af:d4:b6:58:e7:25:dd:f2:20:cb:1c:84:76:f1:b1:
29:07:5d:96:2f:e7:93:40:18:d1:a6:1f:f3:c1:27:d4:de:fe:
4f:5d:f0:ec:e7:86:25:3e:fc:e1:44:4b:89:8a:a5:6b:09:39:
f3:16:f7:0c:8b:db:cf:8c:3b:b1:bf:38:8e:2b:d1:72:18:83:
1f:8c:06:87:bf:70:24:91:54:4b:9a:4d:c3:53:53:3c:f2:5a:
4f:d9:4b:2b:4c:41:e2:ed:b3:3e:7a:cb:bf:d8:48:5d:c0:49:
43:ae:ad:cb:12:7c:9c:46:dd:bf:c9:2b:b3:e9:fe:73:51:88:
ae:15:1d:b5:93:df:f9:13:68:7e:c0:29:da:1b:f2:db:04:99:
7b:3d:f9:3d:09:1b:a2:b1:d9:6b:cf:05:49:83:56:cc:cd:10:
6d:dd:b5:04:e0:35:25:cd:2f:5b:2b:1c:06:1b:e4:3d:fd:b6:
3b:f5:bb:fb:bb:a9:7d:1b:04:52:5a:e7:bd:5d:5f:20:f8:ab:
c4:ad:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:27 2026 by rpki-client