
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31382d3138203d3e20313336323030.roa
File: 35382e36372e3139322e302f31382d3138203d3e20313336323030.roa (raw, json)
Hash identifier: vxd5UZWceoytI9MQKGKzf7MrhuQt26EKL/63f9XB2sM=
Subject key identifier: F5:C5:94:96:29:4A:88:06:C0:28:82:F2:B7:11:2D:00:2B:EB:60:C9
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 309A90B75BF3DA67E555164BD320E656375C9201
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31382d3138203d3e20313336323030.roa
Signing time: Tue 14 Apr 2026 03:27:42 +0000
ROA not before: Tue 14 Apr 2026 03:22:42 +0000
ROA not after: Tue 13 Apr 2027 03:27:42 +0000
asID: 136200
IP address blocks: 58.67.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9a:90:b7:5b:f3:da:67:e5:55:16:4b:d3:20:e6:56:37:5c:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:22:42 2026 GMT
Not After : Apr 13 03:27:42 2027 GMT
Subject: CN=F5C59496294A8806C02882F2B7112D002BEB60C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:fa:43:cb:f8:53:c5:80:29:a2:b6:b3:11:
5a:df:5b:94:56:0b:e4:73:9c:94:88:8e:02:70:6c:
fa:96:b9:5d:5c:13:e5:57:e0:87:f1:65:b1:5d:dd:
11:ee:dd:83:73:bf:f1:01:5b:19:e2:8b:59:8d:0a:
c7:79:b4:22:7b:46:24:05:26:f7:4a:a2:2f:71:60:
7b:ca:d8:eb:58:aa:a0:0a:51:76:0f:27:3d:a6:a8:
a9:b4:b4:5c:81:6d:4d:dc:e3:1b:22:a6:ba:9c:01:
59:29:31:a6:82:05:bc:a3:03:72:82:02:6a:d9:45:
ad:0e:af:7c:a2:db:18:e3:0e:7e:a9:27:a8:97:9b:
8a:2c:d8:b5:04:f3:cf:30:4d:58:3f:d3:ee:14:41:
04:24:f4:de:fd:3d:e5:05:03:a7:7a:aa:4c:96:1b:
5d:ef:d0:92:ea:39:04:bf:03:de:da:c2:97:04:14:
3f:9a:b3:94:26:0a:2b:df:6d:57:8d:2d:84:4a:b5:
9d:da:2f:cd:19:c1:b5:30:18:4d:51:fa:50:85:00:
3d:68:bd:04:94:21:a8:cd:c3:f4:cc:02:cf:7a:fc:
d0:70:f0:e2:47:42:01:d5:d5:d6:8d:37:77:3c:a6:
74:bc:e1:f9:2e:9c:c9:b0:4d:44:56:86:1c:0c:22:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:94:96:29:4A:88:06:C0:28:82:F2:B7:11:2D:00:2B:EB:60:C9
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31382d3138203d3e20313336323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.192.0/18
Signature Algorithm: sha256WithRSAEncryption
67:f6:6d:32:9c:80:70:2a:32:65:79:e6:a8:ee:e8:fb:3b:dd:
bb:34:3a:00:7d:b8:cf:12:b4:4a:c9:bb:e0:89:c2:9e:ba:3d:
c7:67:69:a5:1f:5e:8e:c2:3a:3e:3b:1a:ce:87:d8:42:a5:fd:
ad:a5:ee:17:45:47:6b:c2:fb:15:2e:55:e4:09:e6:54:17:71:
45:28:ba:51:eb:f3:b3:a3:ef:76:73:52:b2:e6:87:38:48:3b:
9f:ea:99:a7:d6:43:b1:3e:9f:d5:58:84:3f:a3:12:cd:d3:17:
3e:c5:f2:e1:12:49:56:a1:7e:74:30:f2:82:e4:a7:02:ab:e1:
e6:e5:02:97:5d:1a:4f:b8:77:34:97:6c:47:ee:c4:9e:5c:2b:
3c:80:ec:3d:9c:58:9e:68:de:5d:36:5a:1a:bd:0e:df:a3:d6:
7b:58:bd:e6:07:1d:8f:36:50:68:0d:85:33:95:8c:6a:43:2d:
78:48:ae:d1:bd:29:60:0d:5c:6a:3c:92:8f:c6:4c:1f:f5:d1:
25:0e:52:0e:43:16:23:47:c7:f5:83:a6:9a:24:ce:5f:00:f1:
70:d1:30:28:ff:3c:cd:ca:3c:6c:8d:58:92:ac:b8:bc:c3:3e:
59:19:b5:5c:4c:e1:eb:d3:f6:1d:20:a4:1e:54:1f:58:b2:c6:
fe:f0:4d:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:32 2026 by rpki-client