
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31392d3139203d3e20313334353432.roa
File: 35392e38302e302e302f31392d3139203d3e20313334353432.roa (raw, json)
Hash identifier: 0l5QG4sz/lKKvxnouTxQhY4iJItPyCdCCROJfhU1CmM=
Subject key identifier: FD:07:DC:FA:50:08:EF:5D:21:74:7A:18:DD:D8:15:B9:6A:43:DC:B7
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 0A4298F4C55F3C21906CEAEA05844E813E98A641
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31392d3139203d3e20313334353432.roa
Signing time: Fri 15 May 2026 09:29:26 +0000
ROA not before: Fri 15 May 2026 09:24:26 +0000
ROA not after: Fri 14 May 2027 09:29:26 +0000
asID: 134542
IP address blocks: 59.80.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:42:98:f4:c5:5f:3c:21:90:6c:ea:ea:05:84:4e:81:3e:98:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:24:26 2026 GMT
Not After : May 14 09:29:26 2027 GMT
Subject: CN=FD07DCFA5008EF5D21747A18DDD815B96A43DCB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:9a:ea:76:8c:45:f5:39:2c:8e:2a:eb:17:
34:fb:9c:81:dd:f7:08:27:93:9d:5e:2d:00:3d:9e:
4c:92:2a:02:29:26:7a:6d:b5:b4:ae:ef:14:c1:c4:
35:1d:d1:c4:17:eb:09:ac:c8:b5:81:c8:d0:2e:93:
3e:04:20:a1:e5:69:ab:4d:92:c8:d9:cc:71:a6:df:
ae:cb:98:1b:f5:73:f9:96:5f:f7:32:69:ee:51:f2:
1b:29:e0:a4:7e:14:f6:ef:f1:00:03:78:0a:b6:7e:
f0:56:90:b0:8e:70:79:e1:0f:4a:94:e7:c4:47:d3:
30:fa:f1:10:33:75:66:9e:ec:d5:3b:46:c5:f3:68:
b0:cb:2d:cd:a4:0b:a2:cc:aa:0d:d2:a3:35:d3:17:
66:ed:55:63:2b:f6:54:cd:43:92:cf:73:80:d7:77:
ef:4d:5d:c8:b2:e1:cf:17:97:23:ab:ff:35:2a:29:
2b:34:b3:07:65:5f:d6:45:ec:8c:df:60:e9:ec:4c:
be:d3:9a:11:64:90:75:f0:6a:40:1a:6b:07:80:23:
bf:64:15:f5:f6:b7:62:c3:61:00:eb:9a:ce:cf:f2:
09:e0:98:6e:a4:34:22:ca:95:bc:09:bf:03:b9:17:
11:62:78:eb:dd:c3:f7:5a:85:e8:28:a9:52:48:2b:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:07:DC:FA:50:08:EF:5D:21:74:7A:18:DD:D8:15:B9:6A:43:DC:B7
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e302e302f31392d3139203d3e20313334353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.80.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:6a:d9:bb:e3:ff:f9:a1:d6:78:78:68:74:4e:58:3a:fb:47:
2d:f5:35:52:b1:00:9e:d9:8a:64:9d:b4:8e:09:4a:86:6f:66:
55:fc:a7:3a:65:26:da:bc:d4:3d:c8:8a:1a:6b:fe:d6:d0:bc:
7a:71:63:30:09:ff:cf:c5:1f:07:08:c7:bd:b2:8b:e8:0b:bc:
df:82:7a:07:23:10:68:99:ca:46:26:9c:b1:de:48:76:62:1f:
dc:02:5a:7a:d4:10:22:6d:ef:9e:d1:f0:14:f5:7b:be:db:31:
6a:d4:15:8a:c4:23:34:03:2d:d2:d1:19:60:27:05:ee:ce:00:
1f:5b:d9:62:7a:44:7f:68:49:08:a6:f2:1d:e4:9b:1c:87:9a:
f0:a9:63:94:74:41:a3:61:f0:c8:5f:4e:4b:65:ff:ae:59:d7:
b7:2c:c3:9c:f6:b8:c8:fb:af:19:69:c6:51:af:48:43:f6:0a:
ed:ef:f0:64:eb:12:04:36:ce:84:ed:3b:f0:20:64:46:0b:62:
29:e7:8a:d1:60:71:c0:bd:bb:d7:4d:1b:27:76:6c:f2:1c:87:
bc:5b:a5:52:a8:22:e2:9c:48:45:6f:f3:9c:39:22:b0:13:48:
b8:57:07:22:a0:f3:08:74:e8:ce:2c:5a:98:82:91:3e:d1:a0:
3a:dd:45:b3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUCkKY9MVfPCGQbOrqBYROgT6YpkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA1MTUwOTI0MjZaFw0yNzA1MTQwOTI5MjZaMDMxMTAvBgNV
BAMTKEZEMDdEQ0ZBNTAwOEVGNUQyMTc0N0ExOERERDgxNUI5NkE0M0RDQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+prqdoxF9TksjirrFzT7nIHd
9wgnk51eLQA9nkySKgIpJnpttbSu7xTBxDUd0cQX6wmsyLWByNAukz4EIKHlaatN
ksjZzHGm367LmBv1c/mWX/cyae5R8hsp4KR+FPbv8QADeAq2fvBWkLCOcHnhD0qU
58RH0zD68RAzdWae7NU7RsXzaLDLLc2kC6LMqg3SozXTF2btVWMr9lTNQ5LPc4DX
d+9NXciy4c8XlyOr/zUqKSs0swdlX9ZF7IzfYOnsTL7TmhFkkHXwakAaaweAI79k
FfX2t2LDYQDrms7P8gngmG6kNCLKlbwJvwO5FxFieOvdw/dahegoqVJIKxnNAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU/Qfc+lAI710hdHoY3dgVuWpD3LcwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMDJl
MzAyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMTMzMzQzNTM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAU7UAAwDQYJKoZIhvcNAQELBQADggEBAKdq2bvj//mh1nh4aHROWDr7Ry31NVKx
AJ7ZimSdtI4JSoZvZlX8pzplJtq81D3Iihpr/tbQvHpxYzAJ/8/FHwcIx72yi+gL
vN+CegcjEGiZykYmnLHeSHZiH9wCWnrUECJt757R8BT1e77bMWrUFYrEIzQDLdLR
GWAnBe7OAB9b2WJ6RH9oSQim8h3kmxyHmvCpY5R0QaNh8MhfTktl/65Z17csw5z2
uMj7rxlpxlGvSEP2Cu3v8GTrEgQ2zoTtO/AgZEYLYinnitFgccC9u9dNGyd2bPIc
h7xbpVKoIuKcSEVv85w5IrATSLhXByKg8wh06M4sWpiCkT7RoDrdRbM=
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:25 2026 by rpki-client