
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e302e302f31382d3234203d3e203435303632.roa
File: 35392e3131312e302e302f31382d3234203d3e203435303632.roa (raw, json)
Hash identifier: M8c/tV7JS7Qjgq92MPjAa/ZYSkpdgHpBzy8auREJhjo=
Subject key identifier: F1:7B:89:3B:9A:AD:E0:D2:0C:D6:FF:A4:76:07:AC:6E:24:B1:45:8F
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 126AEDA1A95E26328D48AEAFE5151AC813E493CF
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e302e302f31382d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:49:15 +0000
ROA not before: Fri 10 Apr 2026 05:44:15 +0000
ROA not after: Fri 09 Apr 2027 05:49:15 +0000
asID: 45062
IP address blocks: 59.111.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6a:ed:a1:a9:5e:26:32:8d:48:ae:af:e5:15:1a:c8:13:e4:93:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:44:15 2026 GMT
Not After : Apr 9 05:49:15 2027 GMT
Subject: CN=F17B893B9AADE0D20CD6FFA47607AC6E24B1458F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:8b:64:fe:59:8a:9b:11:9f:7c:36:a5:86:
40:1e:2f:e5:bf:0e:b9:69:da:d7:16:7a:86:d9:6d:
a9:16:cb:12:17:a4:eb:7f:67:00:4a:11:e7:49:58:
75:24:39:59:73:eb:f4:33:36:b2:29:d5:e1:42:60:
a5:b3:9f:10:5a:00:94:b4:fb:8d:a0:3c:d0:7c:f7:
2e:76:3a:10:2d:f1:0b:8a:83:ed:87:2f:17:6a:9f:
db:87:5d:e7:ea:0d:67:29:60:5c:71:b8:b0:c1:ae:
ca:3a:f2:8c:31:82:59:19:61:12:55:08:9f:0d:ae:
6d:8e:02:a0:70:a5:f0:9f:69:06:a3:be:cf:44:54:
21:aa:7b:f2:90:34:b6:34:5e:59:ed:3f:0f:f0:7b:
90:df:2d:22:6c:fc:73:46:c0:e2:ae:58:0b:db:21:
41:48:51:21:14:aa:b5:ae:e3:5f:c0:a9:8c:86:23:
f6:d5:96:04:53:92:1d:47:7a:e4:0d:e5:94:a4:5a:
cc:e6:7c:33:39:64:54:18:f2:51:36:60:00:35:37:
e5:61:4d:10:7d:cf:0f:a5:99:a4:7d:7f:9b:cc:4f:
ff:87:2c:00:9e:2e:df:0e:34:73:d1:55:48:fc:5e:
bf:eb:54:5b:8a:d4:63:b4:a7:8a:81:1c:85:f2:80:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:89:3B:9A:AD:E0:D2:0C:D6:FF:A4:76:07:AC:6E:24:B1:45:8F
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/35392e3131312e302e302f31382d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.111.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:4f:d6:ef:1c:8f:f8:24:c9:60:6b:c1:f4:51:1b:85:18:36:
c0:d8:fa:72:15:7a:22:f8:94:bc:98:7b:97:d0:12:32:fc:8e:
0c:4c:ea:49:f8:72:5e:49:61:ee:5b:03:c7:88:ab:67:7d:8f:
84:14:b9:6b:60:15:13:ae:f5:82:a9:0e:97:24:34:94:7a:58:
a5:60:6d:b5:9c:47:7a:00:2e:66:88:3a:9c:f5:52:68:0b:ef:
2f:04:91:f3:9b:fa:f1:e2:82:fd:67:b6:29:30:bf:e6:80:da:
c7:c3:f9:bc:93:c6:72:22:fe:2b:7d:93:1d:33:c1:19:ba:17:
79:7f:c0:b8:a0:60:7e:5e:85:66:c9:bc:e4:6d:16:47:93:9d:
de:31:4e:65:d3:df:53:0f:8b:55:c8:3e:a2:47:3f:0f:53:86:
88:e3:d6:cb:76:26:94:d3:f1:7b:68:1d:e1:e2:eb:2e:db:3d:
2b:10:be:77:08:af:5c:ab:ba:8a:a1:5d:0a:61:b0:23:2c:25:
f0:a1:78:24:ea:af:8e:2b:5a:49:4a:db:5c:3f:00:48:fe:e3:
e8:16:67:07:e8:6a:d1:75:ce:88:7c:47:d7:b1:a8:cc:6b:c5:
b7:9b:07:60:9d:8a:6c:6a:ac:1f:54:83:c9:62:63:92:c0:49:
24:50:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:24 2026 by rpki-client