
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2039333034.roa
File: 35382e36372e302e302f31372d3234203d3e2039333034.roa (raw, json)
Hash identifier: yuDWXQQStEJhT9lr51AZp5KDa7z6NzoYayppUp+/ACg=
Subject key identifier: B2:5B:AE:70:F8:23:A1:EC:EA:2B:94:79:A2:DB:CD:DC:E1:4A:7D:EC
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 4F150145681276246755C4325D518ED7167D94EE
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2039333034.roa
Signing time: Tue 26 May 2026 02:19:04 +0000
ROA not before: Tue 26 May 2026 02:14:04 +0000
ROA not after: Tue 25 May 2027 02:19:04 +0000
asID: 9304
IP address blocks: 58.67.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:15:01:45:68:12:76:24:67:55:c4:32:5d:51:8e:d7:16:7d:94:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: May 26 02:14:04 2026 GMT
Not After : May 25 02:19:04 2027 GMT
Subject: CN=B25BAE70F823A1ECEA2B9479A2DBCDDCE14A7DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:eb:e9:9d:97:70:6c:63:0b:eb:00:aa:3b:
fe:0f:16:d5:e0:ea:93:af:c9:a0:ba:ff:63:58:ba:
53:bb:34:ef:04:78:81:a7:c8:9e:49:2c:1e:6a:6b:
05:d4:fa:00:02:df:77:94:49:5b:72:3d:04:a3:b1:
5a:3d:5c:29:ab:07:c4:84:55:b2:47:76:0c:bb:41:
56:4a:bf:37:b4:a3:0f:9d:a0:36:ce:ff:9f:8a:9c:
02:65:e1:d6:b1:7a:15:12:0f:78:95:fa:a4:dc:00:
20:79:77:43:08:37:d1:8a:32:cb:bd:d8:0d:cd:28:
40:03:c6:9d:97:95:4a:f5:f4:05:ea:d3:23:a8:b4:
b7:28:55:c5:3c:a9:9b:e4:3d:12:96:a3:be:a8:69:
88:2e:c0:cf:05:34:2a:a8:8c:9d:f2:cc:ae:79:54:
b4:73:fc:37:c9:4c:a1:54:c5:89:77:07:9a:f3:0a:
56:a3:e3:b5:52:7d:c2:93:68:41:a2:26:7c:34:47:
40:2d:0c:06:2c:8d:66:a0:38:fe:8e:c7:b7:5a:8b:
21:c5:08:74:87:64:27:e1:36:6c:a1:f0:5b:76:5b:
fe:31:31:34:2f:d5:be:ef:09:63:c3:86:a2:a3:ac:
88:a7:04:3c:d3:17:bd:dc:64:04:ad:de:df:97:5b:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:AE:70:F8:23:A1:EC:EA:2B:94:79:A2:DB:CD:DC:E1:4A:7D:EC
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e302e302f31372d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5a:fb:19:22:b9:a7:3c:c9:ae:1a:05:1c:5a:ac:bf:95:79:a2:
61:ab:45:67:ac:a3:33:02:20:c2:75:c2:45:80:71:1a:4e:b2:
ca:70:61:89:56:02:bd:11:da:2d:62:8c:92:dd:01:88:e9:af:
22:0b:f3:c2:88:2b:9d:8f:0a:f8:92:fe:bd:9a:1b:de:28:0a:
6b:4f:69:36:eb:0a:2b:b3:c7:04:a6:46:2e:9d:7a:fa:99:eb:
57:51:c8:30:55:e5:3e:ed:15:22:88:1e:b2:18:90:1d:36:97:
0a:8a:c2:d8:a0:d6:19:0c:c9:2e:cc:78:b9:07:42:2d:24:16:
02:6b:be:91:8c:d2:9a:4b:cc:79:0f:6b:33:2d:66:87:c0:d8:
b4:e7:ba:3a:bb:59:33:4c:9f:fd:7b:ef:8f:f6:34:df:a0:60:
31:7d:7e:d7:02:25:74:93:c2:a9:87:e0:75:72:06:b2:ce:f9:
0a:d7:92:63:d4:a1:67:17:93:fa:83:e9:d1:97:02:db:ad:dc:
81:af:7b:19:f6:0b:0b:02:2a:75:83:d6:56:04:10:e8:9f:72:
46:57:db:f6:10:1d:4c:6a:b8:46:29:f4:09:b1:5b:5e:0d:da:
11:15:80:92:87:3d:53:ab:14:45:0a:07:48:c7:74:ee:39:ba:
a4:8e:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:56 2026 by rpki-client