
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32372e302f32342d3234203d3e203233383532.roa
File: 35392e3130372e32372e302f32342d3234203d3e203233383532.roa (raw, json)
Hash identifier: TcJLaSgtOXnqGjK5irD+YNnG59Bpo3GVCtbqyC9+dJg=
Subject key identifier: 64:21:35:E5:84:0E:EF:B2:3E:B3:6A:D8:98:13:DF:7B:9B:BA:3C:E6
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 728E4B2CE29ACCF387A40B0687196FCEA6FEC929
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32372e302f32342d3234203d3e203233383532.roa
Signing time: Tue 14 Apr 2026 03:19:18 +0000
ROA not before: Tue 14 Apr 2026 03:14:18 +0000
ROA not after: Tue 13 Apr 2027 03:19:18 +0000
asID: 23852
IP address blocks: 59.107.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8e:4b:2c:e2:9a:cc:f3:87:a4:0b:06:87:19:6f:ce:a6:fe:c9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:14:18 2026 GMT
Not After : Apr 13 03:19:18 2027 GMT
Subject: CN=642135E5840EEFB23EB36AD89813DF7B9BBA3CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:6a:b1:a0:d7:fa:e8:a1:9a:fa:25:19:26:
41:be:9e:a6:13:32:97:e0:ee:5e:9a:fd:65:2d:4d:
ed:ae:ab:84:68:2e:e4:20:f6:76:9f:38:a9:b8:3c:
6b:5f:e8:f9:cd:ab:d2:0d:29:5e:fc:be:16:07:ed:
3f:4f:14:ac:e7:fc:7b:10:9c:2c:d0:dc:2d:13:21:
b7:c3:44:84:49:8b:d9:60:92:ea:e1:6f:24:a2:fd:
9b:c1:a9:e8:b2:7e:b8:55:3b:64:a6:72:9f:a2:18:
47:02:28:f3:a4:4b:69:71:04:7f:21:c4:c5:77:f1:
a2:8a:d9:24:e3:09:fe:b1:23:df:ab:d2:c9:f8:55:
38:f6:88:9c:38:ef:10:02:fc:a9:fd:04:05:8b:f2:
6c:c2:5a:29:d1:d2:60:96:5c:c7:ed:09:a0:9c:74:
cf:55:13:df:a9:f5:11:45:20:a5:9d:5b:10:05:b1:
6e:20:a9:02:92:f0:69:d4:2e:7e:5d:69:02:16:76:
7b:34:3b:c8:6c:89:93:47:fb:9e:12:88:53:87:e0:
c4:2b:5c:e3:2e:7d:bd:ee:ee:22:40:33:4b:83:1c:
da:18:ed:be:e0:e9:50:c4:18:68:f8:71:b4:fe:01:
3c:59:ac:fa:13:c3:d7:69:cf:e2:56:c3:00:c3:d7:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:21:35:E5:84:0E:EF:B2:3E:B3:6A:D8:98:13:DF:7B:9B:BA:3C:E6
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/35392e3130372e32372e302f32342d3234203d3e203233383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.107.27.0/24
Signature Algorithm: sha256WithRSAEncryption
10:96:fe:d5:3f:d4:f8:2a:a3:83:da:2b:fd:b1:b0:47:52:1d:
f2:af:7e:64:09:5f:16:58:0a:ac:a5:bc:83:08:25:eb:dd:5c:
e3:c7:d1:5d:0f:ae:5e:aa:3b:26:c7:45:83:88:69:14:2f:bc:
cb:b8:0d:be:3a:e5:04:a8:47:25:2b:8e:ea:a8:72:ee:3e:24:
b2:6d:c2:f4:b6:85:47:00:df:4f:29:3d:da:39:e6:d4:d5:e4:
4c:2f:ce:8e:eb:f3:9e:4b:21:c5:4e:32:a2:27:df:a3:a6:3a:
53:f0:dc:38:8d:93:8a:1b:e4:68:b0:13:59:ab:b1:24:36:83:
4f:d3:1f:f0:4a:34:22:5b:a7:6b:0a:71:e7:43:5d:e0:0b:97:
5f:7d:a1:58:8d:66:8a:83:05:28:e2:04:c0:d6:94:74:e3:b6:
0b:72:d1:5c:2a:c2:c1:1e:a8:91:55:47:b1:a0:60:14:ca:01:
a4:cf:cd:e4:22:87:65:d8:c1:90:f4:8d:2a:15:34:33:7b:4a:
00:bb:69:5d:79:22:2d:3b:90:79:1a:ee:75:75:b0:37:82:a6:
28:9b:be:ce:5d:2f:a4:b9:1c:ab:f0:f0:e2:3e:f9:c7:d0:9e:
7d:1a:d7:88:fc:d9:f3:ff:a5:5e:fc:10:3d:9e:8d:df:cc:39:
ce:c8:1c:b3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUco5LLOKazPOHpAsGhxlvzqb+ySkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA0MTQwMzE0MThaFw0yNzA0MTMwMzE5MThaMDMxMTAvBgNV
BAMTKDY0MjEzNUU1ODQwRUVGQjIzRUIzNkFEODk4MTNERjdCOUJCQTNDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8mqxoNf66KGa+iUZJkG+nqYT
Mpfg7l6a/WUtTe2uq4RoLuQg9nafOKm4PGtf6PnNq9INKV78vhYH7T9PFKzn/HsQ
nCzQ3C0TIbfDRIRJi9lgkurhbySi/ZvBqeiyfrhVO2Smcp+iGEcCKPOkS2lxBH8h
xMV38aKK2STjCf6xI9+r0sn4VTj2iJw47xAC/Kn9BAWL8mzCWinR0mCWXMftCaCc
dM9VE9+p9RFFIKWdWxAFsW4gqQKS8GnULn5daQIWdns0O8hsiZNH+54SiFOH4MQr
XOMufb3u7iJAM0uDHNoY7b7g6VDEGGj4cbT+ATxZrPoTw9dpz+JWwwDD1zt9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUZCE15YQO77I+s2rYmBPfe5u6POYwHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzUzOTJlMzEzMDM3
MmUzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzUzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADtrGzANBgkqhkiG9w0BAQsFAAOCAQEAEJb+1T/U+Cqjg9or/bGwR1Id8q9+
ZAlfFlgKrKW8gwgl691c48fRXQ+uXqo7JsdFg4hpFC+8y7gNvjrlBKhHJSuO6qhy
7j4ksm3C9LaFRwDfTyk92jnm1NXkTC/OjuvznkshxU4yoiffo6Y6U/DcOI2Tihvk
aLATWauxJDaDT9Mf8Eo0Ilunawpx50Nd4AuXX32hWI1mioMFKOIEwNaUdOO2C3LR
XCrCwR6okVVHsaBgFMoBpM/N5CKHZdjBkPSNKhU0M3tKALtpXXkiLTuQeRrudXWw
N4KmKJu+zl0vpLkcq/Dw4j75x9CefRrXiPzZ8/+lXvwQPZ6N38w5zsgcsw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:33 2026 by rpki-client