
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31372d3137203d3e20313334353432.roa
File: 35392e38302e302e302f31372d3137203d3e20313334353432.roa (raw, json)
Hash identifier: e7fBAwgo9w4niIyRBbMpqkmluS/g1ZRzv4vGOvU26Lw=
Subject key identifier: CD:7D:EF:9F:33:06:F6:8C:35:60:6A:23:06:A5:3F:07:B3:BA:79:E4
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 28D390488CC60A176A56A7A638E6893461D75F94
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31372d3137203d3e20313334353432.roa
Signing time: Fri 15 May 2026 09:30:25 +0000
ROA not before: Fri 15 May 2026 09:25:25 +0000
ROA not after: Fri 14 May 2027 09:30:25 +0000
asID: 134542
IP address blocks: 59.80.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d3:90:48:8c:c6:0a:17:6a:56:a7:a6:38:e6:89:34:61:d7:5f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:25:25 2026 GMT
Not After : May 14 09:30:25 2027 GMT
Subject: CN=CD7DEF9F3306F68C35606A2306A53F07B3BA79E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:2e:39:97:00:95:a8:65:61:00:40:85:c1:
a3:ac:24:72:05:12:91:34:53:05:12:76:7b:ec:df:
fc:d2:f7:b8:38:66:1e:14:f6:8c:e3:83:41:69:e0:
2d:50:58:1a:4f:2f:1d:23:cb:fa:4e:ed:1c:e2:ba:
89:5e:3e:57:f6:e0:bf:12:1a:eb:5b:cd:96:66:71:
36:fa:7b:69:1d:57:c3:eb:59:5d:d0:81:88:7b:bf:
62:ee:3b:6d:7b:d1:af:20:32:ca:32:31:db:ca:bd:
ef:a8:fd:b6:7b:09:f4:3e:f3:f0:2e:6a:4d:36:cd:
57:bc:0a:63:8c:d5:c8:c0:ea:9c:ac:30:5f:f4:bd:
85:e3:07:56:ac:80:3f:be:e7:23:ca:be:4c:ba:0f:
b0:2c:e7:9d:a2:60:f5:97:58:63:a2:58:d6:6e:c1:
90:f7:a2:0d:4a:38:81:c0:f5:b5:6e:40:cb:17:10:
bf:d2:c2:31:3b:a8:1e:f7:cc:82:4d:0c:90:dd:4a:
40:3b:28:f1:c9:b6:06:05:4d:ea:91:1b:e4:26:71:
89:88:88:a8:9d:83:7a:ee:e5:b6:af:4f:87:2b:99:
b2:35:18:d5:1f:aa:b2:3f:a5:70:e5:31:7a:95:80:
ea:3a:c2:fb:fb:6d:c0:e7:79:7b:b8:95:50:bd:8d:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:EF:9F:33:06:F6:8C:35:60:6A:23:06:A5:3F:07:B3:BA:79:E4
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31372d3137203d3e20313334353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.80.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4b:77:47:b6:3d:89:23:5f:1f:2a:b8:96:fb:3a:a5:fc:6b:13:
61:0c:01:cb:8d:a8:9e:ad:59:89:87:4a:60:77:ca:69:7f:de:
c6:1b:6f:e2:bc:7f:87:46:94:f3:9b:f1:0d:56:3b:df:79:4a:
68:be:cf:8a:bc:87:86:01:84:44:71:ac:8e:b7:79:2a:2c:64:
9d:e6:93:96:f3:64:ac:ba:41:1b:f5:61:c1:72:d7:6a:f7:ba:
f4:f6:d2:ee:ce:b7:75:8f:0d:4c:54:6c:a4:c0:10:8a:f6:c1:
0f:a8:dc:c7:00:3a:0e:f8:a4:f3:2d:0b:87:6a:40:1a:8f:92:
0f:73:4a:ff:1b:6b:98:53:14:8b:da:c9:5a:c9:5c:d4:f2:66:
46:24:62:4a:bf:99:96:2c:08:03:72:78:11:59:55:c0:4b:87:
4e:25:df:df:85:97:b2:09:79:a2:38:96:ab:59:b4:08:76:d2:
2a:c2:29:dc:53:1f:bd:f8:99:1b:13:07:c0:ad:58:8a:90:96:
b1:4a:af:b4:36:25:df:c5:b8:69:b0:a7:0c:04:c2:da:f9:1e:
f2:da:4c:62:04:ca:0f:8c:15:66:57:61:28:1b:0e:85:df:7d:
de:ab:33:b0:56:86:22:3c:ba:d9:80:c5:a3:1e:8b:2d:66:15:
6e:b1:fe:91
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUKNOQSIzGChdqVqemOOaJNGHXX5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA1MTUwOTI1MjVaFw0yNzA1MTQwOTMwMjVaMDMxMTAvBgNV
BAMTKENEN0RFRjlGMzMwNkY2OEMzNTYwNkEyMzA2QTUzRjA3QjNCQTc5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTC45lwCVqGVhAECFwaOsJHIF
EpE0UwUSdnvs3/zS97g4Zh4U9ozjg0Fp4C1QWBpPLx0jy/pO7RziuolePlf24L8S
GutbzZZmcTb6e2kdV8PrWV3QgYh7v2LuO2170a8gMsoyMdvKve+o/bZ7CfQ+8/Au
ak02zVe8CmOM1cjA6pysMF/0vYXjB1asgD++5yPKvky6D7As552iYPWXWGOiWNZu
wZD3og1KOIHA9bVuQMsXEL/SwjE7qB73zIJNDJDdSkA7KPHJtgYFTeqRG+QmcYmI
iKidg3ru5bavT4crmbI1GNUfqrI/pXDlMXqVgOo6wvv7bcDneXu4lVC9jdtfAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUzX3vnzMG9ow1YGojBqU/B7O6eeQwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMDJl
MzAyZTMwMmYzMTM3MmQzMTM3MjAzZDNlMjAzMTMzMzQzNTM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAc7UAAwDQYJKoZIhvcNAQELBQADggEBAEt3R7Y9iSNfHyq4lvs6pfxrE2EMAcuN
qJ6tWYmHSmB3yml/3sYbb+K8f4dGlPOb8Q1WO995Smi+z4q8h4YBhERxrI63eSos
ZJ3mk5bzZKy6QRv1YcFy12r3uvT20u7Ot3WPDUxUbKTAEIr2wQ+o3McAOg74pPMt
C4dqQBqPkg9zSv8ba5hTFIvayVrJXNTyZkYkYkq/mZYsCANyeBFZVcBLh04l39+F
l7IJeaI4lqtZtAh20irCKdxTH734mRsTB8CtWIqQlrFKr7Q2Jd/FuGmwpwwEwtr5
HvLaTGIEyg+MFWZXYSgbDoXffd6rM7BWhiI8utmAxaMeiy1mFW6x/pE=
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:20 2026 by rpki-client