
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3231302e302f32342d3234203d3e20313336393539.roa
File: 35382e36372e3231302e302f32342d3234203d3e20313336393539.roa (raw, json)
Hash identifier: /gfo9JFsblUlbGtY4kAcy5ywP4KK9kwLLydQLTDMl6Y=
Subject key identifier: 3F:2C:FB:9E:7E:12:DD:FB:73:8D:4B:42:C1:CC:96:43:CE:79:F1:E1
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 72947024FFEBE63C2F781DA3889C19F6960FFB45
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3231302e302f32342d3234203d3e20313336393539.roa
Signing time: Tue 14 Apr 2026 03:27:43 +0000
ROA not before: Tue 14 Apr 2026 03:22:43 +0000
ROA not after: Tue 13 Apr 2027 03:27:43 +0000
asID: 136959
IP address blocks: 58.67.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:94:70:24:ff:eb:e6:3c:2f:78:1d:a3:88:9c:19:f6:96:0f:fb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:22:43 2026 GMT
Not After : Apr 13 03:27:43 2027 GMT
Subject: CN=3F2CFB9E7E12DDFB738D4B42C1CC9643CE79F1E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:a9:0c:3a:66:84:7a:a3:ce:82:19:2e:da:
17:cd:15:16:3c:02:f1:20:a4:8c:50:79:40:4f:bc:
df:a6:90:1b:f5:72:f2:9e:d3:3d:a0:df:8c:a6:78:
84:13:ea:03:ae:e1:75:83:f0:bc:10:81:ee:29:fa:
fd:3b:e7:3d:d2:a9:15:2d:b9:98:e7:89:37:86:57:
2d:8a:0f:7b:aa:6a:9f:28:27:bc:2b:d0:51:3f:f6:
48:7b:57:de:bf:89:1c:a0:c4:02:62:e5:59:16:a7:
ea:56:99:5c:44:e0:35:29:24:0a:d6:b8:97:e6:a4:
93:2a:6c:a1:4b:b8:8b:63:25:4c:1a:3f:89:7b:3d:
cf:08:dd:29:b2:66:de:92:d5:f4:33:ac:0e:d1:11:
e5:dc:4f:fa:ad:46:d4:49:95:e8:9e:6b:3e:3a:3a:
6b:ca:ba:7b:f6:54:af:1c:39:3a:64:5c:ce:aa:d6:
1a:e0:14:c5:fc:a2:c9:80:cf:31:a8:10:4c:55:38:
04:ba:c0:d5:fc:2b:c6:b6:2e:f0:29:e2:c8:93:eb:
8c:20:a6:2b:c1:8f:15:e2:24:95:ed:cd:72:7e:45:
89:7d:90:af:2d:8e:7e:1e:54:5a:15:86:d6:c9:07:
0d:fb:70:30:52:9c:b8:79:11:35:8b:82:e6:c1:13:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2C:FB:9E:7E:12:DD:FB:73:8D:4B:42:C1:CC:96:43:CE:79:F1:E1
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3231302e302f32342d3234203d3e20313336393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.210.0/24
Signature Algorithm: sha256WithRSAEncryption
64:db:fb:1b:e7:6a:a2:63:33:d1:f1:55:4b:32:47:fd:84:e8:
92:04:f3:db:ec:86:89:d9:3f:74:54:1f:90:07:10:b6:93:53:
47:fd:a3:4f:a6:a0:ea:54:cc:99:48:cf:b2:33:c4:c2:a1:49:
6c:84:ee:09:0a:f1:3a:da:38:d5:bb:17:8e:73:b3:b9:13:f1:
4c:8b:30:b6:67:74:75:b4:f0:25:9a:68:32:c2:4e:80:09:71:
d9:d3:47:50:12:4b:50:85:b9:69:7b:90:61:46:95:69:ff:1a:
3c:e5:e7:48:d1:83:ef:72:cf:ea:3a:da:1d:da:ef:37:66:fa:
ae:cc:97:23:0a:54:96:50:2c:56:6b:0e:94:6f:d1:40:49:6d:
71:b8:de:0a:ef:7f:88:0b:bf:b4:5b:77:12:98:4b:60:cd:bb:
d3:f6:ac:c4:a9:bf:85:ff:93:a7:59:1b:7e:3d:f6:bd:5b:50:
91:c3:52:0b:ef:bf:c1:c7:92:cb:ea:a6:1a:32:b5:37:2d:2f:
76:da:ac:08:5e:be:2c:18:b6:b7:78:38:46:7c:a6:6c:f2:aa:
04:a7:4b:cb:4f:09:ee:9c:38:24:80:31:45:68:85:24:5f:e3:
04:47:6a:0f:35:0d:2d:02:c0:d5:76:47:98:28:92:92:64:56:
9c:bb:50:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:32 2026 by rpki-client