
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e302e302f31382d3138203d3e20313334373733.roa
File: 35392e3130372e302e302f31382d3138203d3e20313334373733.roa (raw, json)
Hash identifier: jsQEcRAWvtGjBiEGpS3rYyKpR6EVETN+VY9aUSkYKao=
Subject key identifier: EC:2D:45:83:7E:B0:81:25:D7:5F:CE:3F:EE:F6:3E:D5:C0:46:E8:37
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 46640B43140348E994B9EC42C3903C601C64E9DE
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e302e302f31382d3138203d3e20313334373733.roa
Signing time: Tue 14 Apr 2026 03:19:18 +0000
ROA not before: Tue 14 Apr 2026 03:14:18 +0000
ROA not after: Tue 13 Apr 2027 03:19:18 +0000
asID: 134773
IP address blocks: 59.107.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:64:0b:43:14:03:48:e9:94:b9:ec:42:c3:90:3c:60:1c:64:e9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:14:18 2026 GMT
Not After : Apr 13 03:19:18 2027 GMT
Subject: CN=EC2D45837EB08125D75FCE3FEEF63ED5C046E837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:a6:19:c9:23:18:f8:80:3f:82:fd:2c:89:
64:e8:b7:d0:27:6b:f0:27:10:af:79:8c:98:1a:e0:
c5:41:b4:92:fc:21:70:a9:1f:ad:a8:65:d7:15:04:
60:b0:db:50:9e:d7:b0:1b:b6:d7:06:91:16:38:e3:
12:c2:54:91:4b:e7:b0:27:f5:4b:86:0a:68:34:9e:
ba:66:6f:38:bd:e9:c9:79:ee:e8:ec:14:9f:dc:1b:
c7:88:ae:46:ec:14:e2:1c:11:82:f8:4e:01:70:b0:
b4:8c:1d:64:82:7f:d5:d1:65:d3:51:19:13:50:85:
16:76:68:8b:1c:ab:2e:ec:7f:1e:06:f5:9f:e8:53:
57:9d:80:2c:c3:f0:50:30:95:f9:e5:64:b4:1e:ce:
ea:60:1b:16:6d:96:89:af:b0:56:69:58:69:6a:19:
a6:76:cf:b0:a6:90:ac:48:57:37:b6:8f:dd:54:9d:
6a:c8:ab:a2:cb:7d:1e:49:11:be:8a:71:70:51:a7:
f0:2d:a4:be:95:bc:f2:5e:02:1d:99:43:d3:36:d5:
16:e3:25:b4:70:88:4a:5c:8e:1b:b1:d6:89:26:36:
96:dd:22:d7:72:a5:83:1d:56:31:77:32:f2:e9:c4:
e1:4f:6f:3e:aa:69:c7:38:58:92:da:55:73:36:70:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:45:83:7E:B0:81:25:D7:5F:CE:3F:EE:F6:3E:D5:C0:46:E8:37
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e302e302f31382d3138203d3e20313334373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.107.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:15:e4:63:dd:92:55:38:f8:5d:85:ce:b9:b0:fc:e5:54:32:
eb:2f:19:27:63:df:09:a5:c9:c8:a1:d4:a7:27:22:db:0e:fc:
7f:b3:4d:3a:a1:e5:89:08:3e:1d:2e:2b:96:ca:e1:fb:ac:58:
f2:ac:9b:bf:a3:41:2b:8d:df:d8:11:03:28:0c:61:a9:e5:df:
43:7d:7a:48:2c:a8:b4:39:80:0a:a8:9b:f2:57:c8:8e:a3:25:
fd:f4:6f:00:e9:36:6c:a5:f8:30:b0:ba:e2:57:51:a7:43:41:
85:b7:9a:61:20:57:c9:6f:13:4f:71:c3:e7:a6:13:39:56:d9:
06:d4:d9:59:6f:91:9e:e9:57:62:f5:fa:de:4c:16:f5:b3:82:
8c:e5:30:68:41:c9:c2:aa:3d:f1:a9:23:c9:09:5b:71:f4:03:
26:31:cb:e7:8f:01:0e:75:1e:30:0f:f5:92:55:7c:f0:43:bb:
8c:65:f3:24:70:de:8c:9c:9d:9f:f7:15:e6:26:bc:eb:38:5a:
3b:0a:69:ef:bf:66:ff:2c:b0:d9:b2:11:c5:27:4c:17:62:76:
07:65:38:1a:e1:2c:61:ab:bb:de:cd:bd:db:25:76:62:3e:71:
5e:b4:80:b7:80:16:f3:b8:56:44:53:db:93:14:28:9b:2b:62:
cd:1b:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:50 2026 by rpki-client