
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3231322e302f32342d3234203d3e20313336393539.roa
File: 35382e36372e3231322e302f32342d3234203d3e20313336393539.roa (raw, json)
Hash identifier: /x5YNF5lY+IQBAjW7wBWzGF6mXJbyWkDkVx+ebK5G9c=
Subject key identifier: 9C:1C:C1:26:C8:94:07:8C:07:BC:81:81:9B:33:47:9D:9B:35:FB:6B
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 31B96E1DC8F34F4FA08423C22DDC651675861EC9
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3231322e302f32342d3234203d3e20313336393539.roa
Signing time: Tue 14 Apr 2026 03:27:42 +0000
ROA not before: Tue 14 Apr 2026 03:22:42 +0000
ROA not after: Tue 13 Apr 2027 03:27:42 +0000
asID: 136959
IP address blocks: 58.67.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b9:6e:1d:c8:f3:4f:4f:a0:84:23:c2:2d:dc:65:16:75:86:1e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:22:42 2026 GMT
Not After : Apr 13 03:27:42 2027 GMT
Subject: CN=9C1CC126C894078C07BC81819B33479D9B35FB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:c2:45:2c:83:92:75:e9:82:95:0f:e8:5c:
3f:57:8f:6e:00:e9:35:e8:35:3a:bf:4b:74:23:5b:
0f:ec:01:a1:a4:c1:7f:56:fa:f7:56:ff:19:59:ff:
d2:66:7f:2d:0c:e5:3b:6c:16:27:67:2a:da:4f:89:
8f:85:b7:7f:2a:9b:56:98:40:ae:4e:6f:96:b0:c7:
78:0d:01:63:d7:cb:4f:c9:5d:03:6e:04:2e:71:7d:
56:3c:4e:09:0e:f5:e0:55:10:92:ea:0d:44:98:ac:
e1:87:2d:7d:b5:02:da:50:f7:5f:27:53:b5:e6:35:
27:e6:c1:59:ed:22:66:f5:d5:47:c1:b8:06:1a:35:
74:78:7a:52:3f:a4:14:c0:97:20:81:8e:06:d8:fb:
ed:cb:5a:69:f5:a1:ec:db:a0:a1:c5:52:3a:d1:35:
a1:39:94:98:3f:a1:b8:59:ae:e8:ce:17:cc:f8:86:
6f:68:1f:01:b2:fc:e3:92:df:7b:53:c7:8d:bd:79:
07:69:f4:54:65:fa:3b:c4:52:b2:36:a0:6d:74:ed:
ea:0b:f8:3e:a2:dd:1a:24:44:01:af:46:11:42:70:
d9:c4:e4:af:2f:4e:aa:7e:e4:5e:6b:34:95:d5:e0:
57:84:b8:f5:eb:57:99:f1:70:bb:29:83:2b:df:78:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:C1:26:C8:94:07:8C:07:BC:81:81:9B:33:47:9D:9B:35:FB:6B
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35382e36372e3231322e302f32342d3234203d3e20313336393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.67.212.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4d:5b:15:56:f4:4a:e5:c2:06:86:7d:c7:48:0d:e4:9d:28:
2f:48:4a:13:f5:f1:3a:dc:de:fc:b7:2c:9e:1d:2f:2e:85:10:
f2:cc:d3:1c:46:fe:66:88:79:3f:02:98:2e:d7:7e:22:91:ae:
b9:8e:59:6c:6b:54:7d:cc:76:da:7f:7f:45:ab:46:6d:22:f0:
08:91:e1:74:75:3d:d4:8f:1a:44:ad:ee:e8:74:5e:6b:ae:17:
8c:a4:07:ed:a0:be:f2:90:5c:8a:6d:b2:d1:15:10:78:c2:50:
8e:31:e4:13:85:25:41:63:fa:71:3a:34:1c:18:bd:41:ff:15:
97:06:9a:27:c2:a5:88:b5:3c:38:74:00:ce:14:c5:0b:bc:0b:
24:5a:f5:7e:fa:0e:ae:42:1f:79:9f:e8:34:9c:da:0f:c4:e6:
68:2c:6f:cb:94:cb:4e:4e:18:87:f3:4b:b2:ef:75:2a:33:a9:
50:23:20:2e:31:b7:42:ae:6d:c6:66:b4:f4:65:9d:25:f6:b0:
55:eb:50:3d:bf:f7:6c:c0:c7:2e:d3:9e:e8:89:4d:98:44:2b:
82:a9:3c:56:84:7b:3c:75:74:6c:14:1e:03:ad:7a:d9:2f:70:
f8:6e:7c:ba:ea:c3:9f:9a:92:94:ee:7e:79:62:19:b8:c4:f8:
68:58:f6:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:30 2026 by rpki-client