
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3233362e302f32342d3234203d3e2034383437.roa
File: 35382e36382e3233362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: uRui8yDCTMYFae7+HRfPBrRl3UPND6avcJOq3TAAbsc=
Subject key identifier: 88:2B:37:25:71:28:54:E8:F5:96:21:A2:B9:61:17:D4:0C:C8:4E:44
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 7D4DBD9AD269EE96684378C3708F12289908EA55
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3233362e302f32342d3234203d3e2034383437.roa
Signing time: Tue 19 May 2026 02:29:57 +0000
ROA not before: Tue 19 May 2026 02:24:57 +0000
ROA not after: Tue 18 May 2027 02:29:57 +0000
asID: 4847
IP address blocks: 58.68.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4d:bd:9a:d2:69:ee:96:68:43:78:c3:70:8f:12:28:99:08:ea:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: May 19 02:24:57 2026 GMT
Not After : May 18 02:29:57 2027 GMT
Subject: CN=882B3725712854E8F59621A2B96117D40CC84E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:6f:0e:5b:ae:3c:63:be:1b:0b:d1:53:b2:
ca:f5:f8:21:a0:82:e6:ed:b0:f2:8d:d0:7d:68:95:
7c:db:04:71:60:96:32:74:5a:26:b6:09:18:e8:6e:
c8:93:be:40:d2:a2:54:cd:b8:e3:f1:87:83:6f:c3:
4d:15:ef:07:a7:11:e7:7c:eb:e1:cd:f8:a6:32:60:
64:5c:65:a5:1e:29:40:25:f0:23:b4:31:56:73:8c:
f1:90:46:fc:cb:a9:13:c4:aa:d1:2b:af:d8:cf:78:
e2:09:64:9c:d5:60:af:94:22:b1:c2:b3:f1:b0:82:
a4:41:24:84:bc:03:dd:c3:09:11:1e:7b:67:7d:d6:
13:51:fe:5a:b7:6d:be:d9:d7:8b:5a:20:14:ec:e5:
c6:bb:78:28:0e:d7:7d:ca:e1:ea:d7:5f:a0:9d:a6:
a9:08:25:96:62:2b:ba:2c:6c:82:e2:e1:d1:fb:5c:
c9:5a:a0:0d:7f:95:88:a0:da:cb:8e:80:dc:a4:c9:
e7:0e:34:a2:fc:08:33:f7:54:4e:7b:58:53:4c:da:
4b:5c:fa:3a:b2:4a:d4:a5:84:57:e3:e0:ba:08:29:
7b:b5:90:a9:8d:5b:30:7a:2f:11:81:29:41:f7:62:
48:ae:d4:4a:39:6b:36:91:82:a1:5b:7e:31:92:df:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:37:25:71:28:54:E8:F5:96:21:A2:B9:61:17:D4:0C:C8:4E:44
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/35382e36382e3233362e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.68.236.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8e:a9:69:68:0a:fc:f3:24:7e:bb:7e:46:d3:8e:6f:6e:33:
ce:9c:63:49:43:0b:e7:e5:f9:f2:e0:1a:71:f2:20:b8:65:71:
cb:81:c0:05:a5:6a:25:ca:2d:30:6a:86:89:c1:ef:9d:b8:e7:
48:8a:b1:16:07:57:d9:0d:56:f6:c4:08:c7:0d:20:1c:73:23:
3f:eb:63:bd:44:2c:6a:c6:12:1a:38:80:da:9d:bc:1a:09:77:
cf:74:1c:42:00:d0:07:8e:73:53:a1:9d:95:b2:c4:9d:ad:23:
d8:9f:1e:df:7e:34:9a:87:4d:ba:47:d0:a7:42:d0:f3:a9:ee:
5b:df:e4:45:ee:23:27:11:82:06:e8:47:24:ea:4e:3d:93:3b:
f9:43:bb:7b:41:57:a5:0a:fd:68:d1:03:86:96:aa:62:d8:9f:
c6:8e:20:ef:55:2a:fa:37:79:95:7d:e7:b0:c1:22:af:77:dc:
c7:66:48:f2:c4:93:73:c4:a2:3f:84:8e:28:64:99:5d:19:04:
08:f2:13:6b:66:96:dd:30:cd:05:cf:71:21:ae:d2:98:e7:d2:
f4:63:b2:f0:24:43:42:ea:84:64:8e:a9:8f:85:4a:2c:98:18:
2f:4a:44:8d:19:02:af:1f:23:67:5d:49:41:3c:ea:1a:1d:68:
76:2b:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:21 2026 by rpki-client