
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135372e302f32342d3234203d3e20313336393539.roa
File: 35382e36372e3135372e302f32342d3234203d3e20313336393539.roa (raw, json)
Hash identifier: 2UbbIT7W70XJJXe6thV7SbCNssstJz+2qMxkntOtLx4=
Subject key identifier: 94:B4:0E:0B:74:B9:24:51:3F:7B:52:4A:08:9E:D7:19:69:75:0B:CC
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 5C5E93435534782F993990F5A098C24B760DEB53
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135372e302f32342d3234203d3e20313336393539.roa
Signing time: Tue 14 Apr 2026 03:25:35 +0000
ROA not before: Tue 14 Apr 2026 03:20:35 +0000
ROA not after: Tue 13 Apr 2027 03:25:35 +0000
asID: 136959
IP address blocks: 58.67.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5e:93:43:55:34:78:2f:99:39:90:f5:a0:98:c2:4b:76:0d:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:20:35 2026 GMT
Not After : Apr 13 03:25:35 2027 GMT
Subject: CN=94B40E0B74B924513F7B524A089ED71969750BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:e0:b8:57:34:36:8e:b5:b1:aa:51:2b:e7:
ea:02:26:c5:98:66:29:b7:1a:c8:e7:ce:36:91:5a:
55:de:68:fb:2e:4e:1e:a2:0c:21:52:5a:35:fb:2f:
ad:97:e0:7b:ec:b9:96:47:32:f1:8b:90:d8:55:c7:
07:79:7b:55:01:32:be:7a:91:a7:e6:8d:3c:62:98:
67:27:98:4c:83:cc:21:ff:d1:c9:41:3b:4d:90:0a:
a1:11:f2:17:7c:6d:34:c2:e7:35:00:cd:f3:e2:bc:
55:5e:fa:d0:8e:76:c2:08:d2:e5:58:91:2f:fd:f7:
24:64:96:e5:c6:65:4a:4a:cb:3f:d6:b8:d6:40:de:
f7:e0:83:8e:4e:e7:6b:dc:f1:30:53:cf:1b:ec:3d:
ac:c2:de:3b:73:14:fb:17:a7:10:e0:f5:e2:3a:85:
47:c6:cd:dd:37:ce:0e:25:f4:e4:f7:26:99:99:d0:
49:1c:61:59:d4:ca:9c:f8:ed:ce:7c:06:6a:f4:ae:
68:1a:41:80:01:0f:c2:ee:c2:9d:d3:1d:f3:f7:2e:
32:29:42:1d:f2:ee:fe:c2:fe:7a:0d:e4:81:2d:8d:
20:3a:7f:a8:4f:2b:aa:b0:4d:1e:67:28:6b:30:49:
ea:6d:17:b1:1d:23:58:c9:b5:07:69:ab:45:9a:ac:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:0E:0B:74:B9:24:51:3F:7B:52:4A:08:9E:D7:19:69:75:0B:CC
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3135372e302f32342d3234203d3e20313336393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.157.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2d:fe:6a:bd:68:42:4b:f4:0d:fa:6f:9e:1d:d5:2f:56:3a:
e7:ef:0d:4e:1f:26:6b:b6:52:3e:ac:d4:5b:1b:bf:b3:fb:c8:
b8:68:30:2c:4c:ff:1f:b2:7a:47:b4:d8:83:84:1d:24:db:83:
24:77:a0:b9:73:15:21:0c:5e:bc:6a:40:7b:95:c1:52:85:ea:
8c:d3:ba:5d:53:09:0f:32:45:82:f7:d3:39:81:98:c7:5d:1a:
2b:12:94:74:5e:3a:1d:30:69:f9:d1:70:1b:fc:39:23:5b:ea:
5c:9d:3c:ab:68:b2:95:ef:03:84:c9:15:cd:6a:e4:2c:af:32:
81:e4:46:bd:dd:07:64:83:d4:24:13:e0:24:8c:25:26:92:6c:
92:cc:bb:f6:d3:dc:d5:92:d8:01:62:cb:f8:1c:b1:64:7b:da:
93:f6:59:0b:e8:1a:39:27:ad:3e:d6:6c:85:61:fb:ad:f9:de:
6c:02:2f:56:eb:93:50:2b:67:b1:ba:8f:23:c1:54:3b:bd:1c:
a2:b6:c7:d2:44:19:04:bb:5d:cd:2b:7d:d8:71:a0:46:d1:14:
06:be:2c:0a:bc:1b:0b:5b:78:54:7e:c7:56:41:0b:2a:be:a6:
7c:79:c4:9e:62:25:e2:6c:77:42:82:55:62:bf:62:5a:a7:22:
f7:e5:15:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:31 2026 by rpki-client