
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32342d3234203d3e20313336393539.roa
File: 35382e36372e3135362e302f32342d3234203d3e20313336393539.roa (raw, json)
Hash identifier: qABo9KpeNvqmkCRVlxsD0XFTZ1UMcx5u0K4xkhlRM7w=
Subject key identifier: E7:E0:F7:25:62:87:72:81:14:20:C9:A5:53:18:B7:2F:AE:01:C0:77
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 49854382EB19BE954119685CE2DDCA6D91F483F7
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32342d3234203d3e20313336393539.roa
Signing time: Tue 14 Apr 2026 03:25:35 +0000
ROA not before: Tue 14 Apr 2026 03:20:35 +0000
ROA not after: Tue 13 Apr 2027 03:25:35 +0000
asID: 136959
IP address blocks: 58.67.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:85:43:82:eb:19:be:95:41:19:68:5c:e2:dd:ca:6d:91:f4:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:20:35 2026 GMT
Not After : Apr 13 03:25:35 2027 GMT
Subject: CN=E7E0F725628772811420C9A55318B72FAE01C077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:c6:59:0f:47:92:f9:23:02:4f:e6:b0:9b:
44:f1:d8:c4:2a:08:d2:62:42:ed:0c:f0:b4:d2:7b:
fd:73:47:42:76:76:3c:9e:31:92:b1:ed:50:9c:77:
66:f2:51:b9:7d:ee:07:27:a7:2f:66:32:bb:cb:f7:
cc:ed:b0:fc:1d:c9:87:c2:29:2d:3b:e3:ef:4a:be:
f8:ec:4d:74:68:86:ba:cf:85:c9:55:5d:bb:dc:69:
81:7a:a3:fa:6a:d7:fd:20:d6:32:64:87:d8:39:bf:
a1:93:ed:fe:e1:c4:be:3c:08:9a:ac:78:f6:05:ee:
3d:c9:01:df:bf:ff:25:82:d7:ab:69:59:f4:83:9c:
58:93:39:d7:1a:5c:6e:e9:02:84:ff:ee:12:6b:7e:
c1:e8:1a:3f:77:5b:3f:14:c3:a9:4e:a7:ce:30:c5:
a4:23:12:f4:86:b7:cc:20:ac:58:c6:bb:8b:15:f5:
ef:a7:50:0f:1e:dd:e7:79:0f:b1:f0:9d:d2:7e:4e:
4d:09:da:4d:0e:65:09:77:71:a3:ad:fe:d9:3d:84:
2f:b4:0c:87:43:e3:94:d4:0d:ac:b1:6e:d1:1f:8a:
93:4c:92:0c:56:33:94:1f:f8:13:64:3a:3f:20:dd:
8a:ef:71:4a:75:99:0b:e6:ca:67:2c:19:40:0c:6d:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:F7:25:62:87:72:81:14:20:C9:A5:53:18:B7:2F:AE:01:C0:77
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135362e302f32342d3234203d3e20313336393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.156.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cf:97:69:50:8a:22:a7:d7:5e:11:03:8a:88:18:77:59:22:
f8:56:fb:ef:91:6e:64:0a:c5:44:05:7a:3c:b1:25:c5:75:8a:
8e:1d:c4:2b:71:db:c3:4a:5b:47:2f:8c:61:58:c7:45:7d:24:
9d:a7:8c:c0:9d:46:3f:f7:db:ec:ea:05:b6:88:23:af:64:b2:
84:8b:08:b3:fc:cb:7f:7d:3b:4b:05:34:4a:ce:93:41:d2:b0:
25:af:51:ab:9a:6f:2f:75:e2:0d:c4:d5:2b:f6:f6:4a:c9:8f:
37:3f:d3:6f:b1:9d:66:50:83:d2:70:99:7e:67:e4:48:12:8c:
58:0d:31:59:5b:de:4f:3b:b8:37:f1:f3:a9:ea:f8:3d:c7:42:
c3:72:c3:ce:e1:95:cc:a0:84:50:2e:8b:ac:88:cc:46:42:47:
d5:fe:21:98:25:72:5b:13:b3:a7:7c:d8:db:74:57:7b:80:d5:
ce:49:34:80:20:be:8e:1a:f0:48:d6:38:be:f3:79:a0:86:5b:
68:48:50:03:d1:da:b4:1b:b0:ee:2c:97:47:af:b0:0b:b4:5f:
86:49:b6:74:5f:51:85:49:b4:a4:c7:69:a9:f5:6f:0f:82:5a:
6a:e0:aa:8d:0a:54:40:af:72:53:05:ee:d8:6c:44:13:f6:9f:
c2:f6:56:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:26 2026 by rpki-client