
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32342e302f32332d3233203d3e203233383532.roa
File: 35392e3130372e32342e302f32332d3233203d3e203233383532.roa (raw, json)
Hash identifier: cXg9wBA2K0FqfaW1M0MDHA8nZmv5nQOoO59ldRrCfcA=
Subject key identifier: 70:7A:E3:29:F0:3B:88:DC:3E:03:02:CB:08:35:9E:21:41:43:27:4D
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 6A348139EF2AF129E5E425AEEA701329DB0F7659
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32342e302f32332d3233203d3e203233383532.roa
Signing time: Tue 14 Apr 2026 03:19:18 +0000
ROA not before: Tue 14 Apr 2026 03:14:18 +0000
ROA not after: Tue 13 Apr 2027 03:19:18 +0000
asID: 23852
IP address blocks: 59.107.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:34:81:39:ef:2a:f1:29:e5:e4:25:ae:ea:70:13:29:db:0f:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:14:18 2026 GMT
Not After : Apr 13 03:19:18 2027 GMT
Subject: CN=707AE329F03B88DC3E0302CB08359E214143274D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:96:c7:1a:df:51:7e:75:2f:9b:8d:9b:f8:
0f:f2:73:f4:c5:dc:99:86:a4:5c:c6:23:75:79:6e:
7d:55:ab:1b:bf:05:c9:fc:3f:ba:c3:94:23:a9:45:
db:1a:05:27:71:f0:da:fa:6c:bf:0c:76:23:c4:35:
b4:68:ea:fc:49:90:4f:eb:ea:e0:44:51:ae:25:58:
03:31:0d:8d:8b:07:71:5e:5a:3e:78:22:86:88:43:
01:0e:94:f0:06:50:c7:c8:8e:ab:ba:4e:c7:58:05:
9f:04:4f:6b:dd:7b:ce:03:42:b8:ca:ad:30:05:12:
9c:97:dc:e7:d7:24:77:52:21:7f:06:53:6d:64:bb:
51:9a:36:34:c6:ec:74:ae:e3:e4:35:97:d3:b5:88:
70:12:a4:8a:6b:35:94:1e:1e:37:cf:cb:8d:7c:4c:
df:13:38:7b:49:ae:cf:72:3b:f3:a9:b7:ca:f5:70:
da:f5:ab:ba:8b:88:f5:e5:7f:6e:24:dd:42:d1:f9:
67:8f:62:0a:2e:4b:46:bd:f4:be:3d:5e:87:bd:de:
12:29:5d:65:ab:9d:1b:8b:b9:3e:af:15:a8:5b:7d:
99:aa:5c:b2:b4:e6:47:4d:65:09:a1:8e:02:28:82:
fa:06:aa:a8:ec:ba:e4:f7:16:97:c2:9e:0e:59:70:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:E3:29:F0:3B:88:DC:3E:03:02:CB:08:35:9E:21:41:43:27:4D
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32342e302f32332d3233203d3e203233383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.107.24.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:14:15:7f:a9:48:b3:01:8a:58:ff:45:42:89:ec:00:f2:a1:
80:95:c4:a5:3a:7c:ad:0e:18:34:4c:52:17:1d:55:ad:db:5f:
97:e8:fe:13:46:11:b8:47:a4:ab:16:f1:19:a4:b4:ab:f0:d4:
48:a7:9a:51:e5:ea:7f:69:9e:3b:56:53:59:f6:3f:c0:7e:30:
b0:f4:2d:3d:07:f3:79:43:9d:27:92:f6:36:c1:c0:ac:47:f2:
a6:d4:34:58:e8:a4:46:bc:96:d3:8c:d1:be:15:82:10:37:89:
40:a1:e4:a4:1d:ba:0d:bb:5b:56:67:87:63:90:71:b2:75:1e:
5f:37:86:6d:c6:78:ba:31:d4:f2:bd:2e:7f:8e:a1:24:55:3e:
61:9f:10:4b:5e:39:08:3e:66:a7:b5:6c:24:3a:15:93:84:06:
a7:00:a3:61:f2:5e:6b:62:60:c0:5d:8f:8e:c4:1c:c0:e3:46:
3d:0b:e0:aa:8e:d8:6c:29:e5:47:5a:83:49:4c:61:21:4f:f9:
3d:67:50:5b:02:18:63:7a:82:01:94:8a:3a:3a:5d:5f:ed:0f:
ce:48:48:79:11:62:15:25:a8:80:a7:c3:b3:38:02:26:f7:92:
e0:59:6a:9b:74:b4:4c:9b:2c:41:33:bc:09:20:39:0f:8a:41:
5f:76:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:35 2026 by rpki-client