
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130392e302f32342d3234203d3e203435303632.roa
File: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (raw, json)
Hash identifier: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=
Subject key identifier: EF:F5:69:02:34:E3:59:D7:EA:9C:29:90:11:A8:1B:7B:E4:6C:C6:B4
Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6
Certificate serial: 6DDEE1B748B9F4F5F4605621196376C7BC866503
Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130392e302f32342d3234203d3e203435303632.roa
Signing time: Fri 15 May 2026 02:40:55 +0000
ROA not before: Fri 15 May 2026 02:35:55 +0000
ROA not after: Fri 14 May 2027 02:40:55 +0000
asID: 45062
IP address blocks: 59.111.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:de:e1:b7:48:b9:f4:f5:f4:60:56:21:19:63:76:c7:bc:86:65:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6
Validity
Not Before: May 15 02:35:55 2026 GMT
Not After : May 14 02:40:55 2027 GMT
Subject: CN=EFF5690234E359D7EA9C299011A81B7BE46CC6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:78:16:0d:c3:99:18:75:9d:3c:60:40:5b:
31:7f:e8:a3:b4:c9:5f:e7:5a:27:7d:04:6f:eb:e2:
35:8c:56:a7:ab:5d:b0:20:d3:dc:cc:67:b7:56:b6:
a3:3a:c6:f0:2b:11:b3:f4:50:2f:42:b7:2b:91:8f:
be:d7:7e:3e:ab:81:a0:13:a4:24:fa:d3:0d:e0:50:
9a:87:ff:fb:8c:dd:99:82:15:81:ed:ef:26:cb:67:
4a:92:b5:85:c2:6f:34:27:14:47:d3:bb:69:e0:ec:
c3:c9:74:d0:fd:68:98:04:3d:66:c8:0e:74:b4:4b:
b9:c4:27:32:9c:fb:67:2b:2b:5b:1e:8d:29:93:c5:
f3:4d:ec:96:a3:8f:15:c5:f8:38:1f:5c:a9:4d:d1:
0a:6e:df:1a:d0:46:b8:0d:be:82:92:20:78:47:2e:
38:3b:52:2b:74:15:10:c0:14:42:9a:21:ba:72:b8:
35:0b:36:fb:f8:0c:e9:e3:42:d1:99:f7:d1:45:60:
a3:7e:95:fe:5b:ff:f1:fd:8c:c4:60:79:ec:09:04:
52:46:82:5e:8e:42:89:ad:ee:b9:13:4a:a7:32:29:
9c:e4:51:48:58:0f:1f:1e:23:af:d6:d0:4a:e6:a4:
b6:2d:a2:6f:40:f6:b8:8b:24:e3:68:93:77:a7:0a:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:69:02:34:E3:59:D7:EA:9C:29:90:11:A8:1B:7B:E4:6C:C6:B4
X509v3 Authority Key Identifier:
keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/35392e3131312e3130392e302f32342d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.111.109.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:44:98:de:88:aa:42:b1:f4:d4:dd:02:08:a9:6a:2d:f5:85:
01:15:e0:db:99:98:6d:06:94:8c:54:c3:0c:27:c2:ee:34:49:
73:4f:a8:cc:30:fd:33:7e:40:d6:d2:ca:0a:ca:d0:53:be:43:
11:1a:c4:94:be:99:85:46:25:94:ba:73:d3:a4:aa:a6:89:72:
4e:f2:be:3e:9b:b8:8f:fe:66:84:1f:90:03:b9:07:65:d2:eb:
a0:cb:be:aa:a6:5d:b6:c6:73:1b:e7:4a:df:3c:66:eb:f9:9e:
b0:db:e9:1c:9f:7b:7e:b2:39:a0:d0:6c:64:bf:6e:56:89:c2:
ad:37:76:58:b7:fb:46:72:fd:e1:a5:86:44:d0:aa:15:d1:f0:
f0:d0:b1:7d:1b:61:bd:44:b6:75:53:75:6b:1a:80:06:b7:65:
1b:89:2f:7b:dc:14:5c:79:4a:28:27:75:43:71:46:97:1c:fe:
f2:df:a7:85:d9:c2:06:af:b7:28:ea:67:5e:21:8c:c7:a3:35:
df:99:b9:aa:3d:59:c8:cf:46:55:1b:5e:d9:33:cc:47:29:80:
0b:50:78:1b:87:95:06:03:12:8a:a0:5a:db:f3:e7:d4:2b:00:
9f:20:69:83:b3:8e:89:ae:51:fe:0b:c2:9c:f7:94:f2:bc:34:
5f:67:ad:6b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbd7ht0i59PX0YFYhGWN2x7yGZQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB
ODExQUVFNjAeFw0yNjA1MTUwMjM1NTVaFw0yNzA1MTQwMjQwNTVaMDMxMTAvBgNV
BAMTKEVGRjU2OTAyMzRFMzU5RDdFQTlDMjk5MDExQTgxQjdCRTQ2Q0M2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfXgWDcOZGHWdPGBAWzF/6KO0
yV/nWid9BG/r4jWMVqerXbAg09zMZ7dWtqM6xvArEbP0UC9CtyuRj77Xfj6rgaAT
pCT60w3gUJqH//uM3ZmCFYHt7ybLZ0qStYXCbzQnFEfTu2ng7MPJdND9aJgEPWbI
DnS0S7nEJzKc+2crK1sejSmTxfNN7JajjxXF+DgfXKlN0Qpu3xrQRrgNvoKSIHhH
Ljg7Uit0FRDAFEKaIbpyuDULNvv4DOnjQtGZ99FFYKN+lf5b//H9jMRgeewJBFJG
gl6OQomt7rkTSqcyKZzkUUhYDx8eI6/W0ErmpLYtom9A9riLJONok3enCnLtAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU7/VpAjTjWdfqnCmQEagbe+RsxrQwHwYDVR0j
BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0
OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5NTcxMDIxMS8wLzM1MzkyZTMxMzEz
MTJlMzEzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEADtvbTANBgkqhkiG9w0BAQsFAAOCAQEAjkSY3oiqQrH01N0CCKlqLfWF
ARXg25mYbQaUjFTDDCfC7jRJc0+ozDD9M35A1tLKCsrQU75DERrElL6ZhUYllLpz
06SqpolyTvK+Ppu4j/5mhB+QA7kHZdLroMu+qqZdtsZzG+dK3zxm6/mesNvpHJ97
frI5oNBsZL9uVonCrTd2WLf7RnL94aWGRNCqFdHw8NCxfRthvUS2dVN1axqABrdl
G4kve9wUXHlKKCd1Q3FGlxz+8t+nhdnCBq+3KOpnXiGMx6M135m5qj1ZyM9GVRte
2TPMRymAC1B4G4eVBgMSiqBa2/Pn1CsAnyBpg7OOia5R/gvCnPeU8rw0X2etaw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:11 2026 by rpki-client