
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31392d3139203d3e20313431343235.roa
File: 35382e36372e3139322e302f31392d3139203d3e20313431343235.roa (raw, json)
Hash identifier: z3mtuXIhV3UNHB2Womo5TJdShbS2qAGfHvMxnpAWAYA=
Subject key identifier: 37:57:92:EF:57:B4:33:F0:AF:61:EE:96:FF:44:7D:5D:2A:A0:60:2B
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 2BC69E9C70534C4CF96B7C5D7854948552C28807
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31392d3139203d3e20313431343235.roa
Signing time: Tue 14 Apr 2026 03:27:43 +0000
ROA not before: Tue 14 Apr 2026 03:22:43 +0000
ROA not after: Tue 13 Apr 2027 03:27:43 +0000
asID: 141425
IP address blocks: 58.67.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c6:9e:9c:70:53:4c:4c:f9:6b:7c:5d:78:54:94:85:52:c2:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:22:43 2026 GMT
Not After : Apr 13 03:27:43 2027 GMT
Subject: CN=375792EF57B433F0AF61EE96FF447D5D2AA0602B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:53:b3:30:f8:bc:2b:ee:39:6e:39:41:8a:
16:1f:18:1d:9a:cb:5d:48:04:15:d3:ae:da:4f:59:
cc:3a:b8:10:d8:95:19:c8:1b:d2:93:55:bf:4d:3e:
3d:ad:a2:bf:f2:18:14:ff:90:60:b0:f5:83:e7:ca:
22:4b:f3:15:4b:40:43:18:43:37:a1:96:59:97:fb:
2e:63:c0:e1:24:c8:a3:24:43:dc:40:50:50:a3:3e:
3d:3c:2e:3f:67:d1:31:b8:18:9f:2f:c1:80:ca:d9:
41:2a:d4:cb:7e:41:6e:c7:60:e0:c8:32:20:8c:21:
42:4f:4f:f5:d7:b0:8b:8d:b3:3f:ed:3f:da:a9:e1:
dc:ad:99:03:f9:ba:b9:9b:74:fb:43:47:ce:1c:13:
9b:a8:65:b9:cd:0e:61:26:2a:72:9a:b9:00:ad:65:
18:ae:a0:64:52:94:9b:51:f5:dd:eb:7f:f3:56:7a:
d2:d9:b6:10:46:77:4e:3f:de:94:df:b3:8e:3e:57:
b9:70:af:8d:f9:72:ff:32:04:fe:6e:04:7f:13:26:
71:d6:d7:66:6b:b5:5f:e7:0b:cc:55:63:5e:6f:36:
fd:87:7e:ce:96:95:c2:9a:01:a9:01:35:3f:64:88:
75:fd:15:dc:7a:08:de:11:8b:39:94:d2:2e:e7:4b:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:57:92:EF:57:B4:33:F0:AF:61:EE:96:FF:44:7D:5D:2A:A0:60:2B
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3139322e302f31392d3139203d3e20313431343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.192.0/19
Signature Algorithm: sha256WithRSAEncryption
bf:08:91:9a:00:31:ba:73:78:5f:23:96:c2:88:fb:3e:d5:0c:
aa:23:06:20:9a:e3:46:4b:95:4c:f8:0c:db:aa:af:e6:ad:58:
c9:11:94:84:95:92:bb:34:db:33:bc:f5:81:50:e9:5c:84:02:
ec:aa:49:be:75:ff:f5:d2:29:be:28:b9:07:29:a6:40:66:f8:
b9:db:66:89:40:c1:11:ef:6e:c1:48:52:19:f8:59:28:01:61:
55:b3:03:9a:c2:ef:7c:cd:53:95:ed:57:49:12:2b:73:12:65:
8b:a7:7e:6a:c1:11:f1:63:91:7c:4e:71:15:1b:c7:de:ab:c8:
6d:59:1f:9a:d0:0e:07:41:3d:ea:45:af:da:32:26:ad:95:77:
00:37:40:da:40:1e:74:9c:9d:a8:df:3e:b3:3b:e7:04:74:4e:
90:ba:bf:3e:be:fb:c8:c8:3e:c8:7e:04:ba:2c:c1:51:45:82:
e9:e8:f4:e9:d0:bf:b7:13:d6:25:4b:41:a2:fa:d3:3b:09:13:
81:c0:ab:35:91:4b:84:ef:7d:17:fa:83:a5:56:27:6a:49:8c:
99:e3:bd:9c:fc:b3:88:fa:93:11:a4:c5:6a:68:b5:4f:82:2a:
87:a6:ea:21:17:4e:fb:65:f7:90:21:fe:58:05:3a:22:78:ae:
b2:f7:e3:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:32 2026 by rpki-client