
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/35392e3130392e302e302f31362d3234203d3e20313337373138.roa
File: 35392e3130392e302e302f31362d3234203d3e20313337373138.roa (raw, json)
Hash identifier: CmxifcX0pYdiFTLCDIkGwBZNQ7rbBDgUGmBEj3ahENo=
Subject key identifier: 17:F7:AC:7A:A2:93:6D:12:A8:A9:7E:17:45:FF:6B:D2:B1:E9:98:C6
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 6B4736EE2765E9459344A9D0DA60ADEFB0EA4943
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/35392e3130392e302e302f31362d3234203d3e20313337373138.roa
Signing time: Fri 05 Jun 2026 07:38:32 +0000
ROA not before: Fri 05 Jun 2026 07:33:32 +0000
ROA not after: Fri 04 Jun 2027 07:38:32 +0000
asID: 137718
IP address blocks: 59.109.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:47:36:ee:27:65:e9:45:93:44:a9:d0:da:60:ad:ef:b0:ea:49:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jun 5 07:33:32 2026 GMT
Not After : Jun 4 07:38:32 2027 GMT
Subject: CN=17F7AC7AA2936D12A8A97E1745FF6BD2B1E998C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:8e:38:88:53:02:c9:a0:9c:6d:e2:fb:32:
44:12:4c:03:e0:d2:4b:6c:53:a4:16:9f:b6:08:5d:
c7:e0:a2:bd:f3:a2:5d:78:03:09:4d:8f:72:22:84:
9b:82:4c:48:18:46:97:b3:ea:2d:1e:80:7c:87:54:
cc:42:11:46:5f:73:81:7f:7f:14:8d:4a:1f:5e:d0:
8c:23:b4:d8:df:41:89:18:83:0f:dc:f7:05:27:ed:
9c:4f:f9:fe:87:9b:84:fe:b4:f4:2b:8c:bd:5c:ed:
19:1f:51:55:24:0b:26:f5:33:99:ec:84:37:9d:7a:
30:f0:39:5a:ef:64:0b:01:a5:71:e0:56:ab:1e:53:
e4:d8:bd:79:64:5c:d8:6a:4e:3a:5d:54:1d:ee:e6:
a1:1d:0e:1b:d1:1c:ff:c8:82:d1:34:96:54:b4:5e:
e5:ff:e8:b1:b3:58:7d:f8:5f:1b:e0:5f:77:9f:ad:
2f:a8:72:66:6a:11:6f:10:fe:8c:55:d3:dd:5c:8e:
6d:6c:93:04:81:de:85:a0:1e:5d:9b:5b:f2:7b:98:
44:16:d3:df:89:34:b3:1a:0e:bf:b7:3b:f4:ee:c8:
2f:12:98:02:ac:97:53:89:98:b0:81:19:bb:4a:af:
13:4e:8e:eb:cd:c8:de:92:99:df:15:89:6a:10:2a:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:AC:7A:A2:93:6D:12:A8:A9:7E:17:45:FF:6B:D2:B1:E9:98:C6
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/35392e3130392e302e302f31362d3234203d3e20313337373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:38:7a:0d:8d:3a:00:b0:36:f1:d0:9b:b0:3f:9e:53:87:fe:
8a:e9:e5:ab:f0:48:64:d4:be:bb:8f:58:80:41:98:4d:a1:b1:
f1:43:c9:bd:bb:f4:14:b6:5e:43:70:c3:a7:4d:e3:8f:52:e2:
89:7c:4e:d4:94:a8:f4:0e:76:9f:e2:2b:cb:f0:3a:96:72:59:
1c:c1:e3:ff:97:f3:9f:df:b4:60:a7:67:56:66:1e:57:41:fb:
d0:3b:a6:fd:8e:46:e0:9c:5a:c0:7f:e0:3f:07:43:df:07:6b:
2b:c9:c5:96:94:0d:29:27:ac:d8:20:05:4a:4b:36:f9:13:6c:
ae:7f:63:08:91:0a:20:d8:fd:dc:57:e7:0e:e6:9a:eb:aa:88:
b9:aa:77:87:a7:be:c7:af:9f:5d:53:e5:7f:e3:d7:da:35:ee:
3c:f3:19:1d:6e:7c:6a:08:59:b1:4b:a3:d1:21:34:1e:7c:39:
54:44:b2:97:b1:3f:96:74:7e:25:1e:d8:50:12:a1:16:4c:b2:
91:5c:b1:5a:53:5f:4e:44:cd:47:a7:77:d2:6d:a3:4c:e1:ad:
fd:3f:cb:95:bb:dd:86:57:64:7e:91:94:85:99:c1:29:e3:dd:
8b:ad:69:d3:5e:e8:43:42:fa:fb:15:48:9e:fb:5f:46:6d:dc:
dc:e9:c6:5c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUa0c27idl6UWTRKnQ2mCt77DqSUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjA2MDUwNzMzMzJaFw0yNzA2MDQwNzM4MzJaMDMxMTAvBgNV
BAMTKDE3RjdBQzdBQTI5MzZEMTJBOEE5N0UxNzQ1RkY2QkQyQjFFOTk4QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAY44iFMCyaCcbeL7MkQSTAPg
0ktsU6QWn7YIXcfgor3zol14AwlNj3IihJuCTEgYRpez6i0egHyHVMxCEUZfc4F/
fxSNSh9e0IwjtNjfQYkYgw/c9wUn7ZxP+f6Hm4T+tPQrjL1c7RkfUVUkCyb1M5ns
hDedejDwOVrvZAsBpXHgVqseU+TYvXlkXNhqTjpdVB3u5qEdDhvRHP/IgtE0llS0
XuX/6LGzWH34XxvgX3efrS+ocmZqEW8Q/oxV091cjm1skwSB3oWgHl2bW/J7mEQW
09+JNLMaDr+3O/TuyC8SmAKsl1OJmLCBGbtKrxNOjuvNyN6Smd8ViWoQKqDLAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUF/eseqKTbRKoqX4XRf9r0rHpmMYwHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzUzOTJlMzEzMDM5
MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzEzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDADttMA0GCSqGSIb3DQEBCwUAA4IBAQAsOHoNjToAsDbx0JuwP55Th/6K6eWr
8Ehk1L67j1iAQZhNobHxQ8m9u/QUtl5DcMOnTeOPUuKJfE7UlKj0Dnaf4ivL8DqW
clkcweP/l/Of37Rgp2dWZh5XQfvQO6b9jkbgnFrAf+A/B0PfB2srycWWlA0pJ6zY
IAVKSzb5E2yuf2MIkQog2P3cV+cO5prrqoi5qneHp77Hr59dU+V/49faNe488xkd
bnxqCFmxS6PRITQefDlURLKXsT+WdH4lHthQEqEWTLKRXLFaU19ORM1Hp3fSbaNM
4a39P8uVu92GV2R+kZSFmcEp492LrWnTXuhDQvr7FUie+19Gbdzc6cZc
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:37 2026 by rpki-client