
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e36342e302f31392d3139203d3e20313334353432.roa
File: 35392e38302e36342e302f31392d3139203d3e20313334353432.roa (raw, json)
Hash identifier: Q5MwgQ2WPz5d7BEzxBu+QZwKc5fEYBDxr5bkr5N+U/o=
Subject key identifier: AA:70:6D:D5:81:37:19:69:6A:95:50:E4:F7:19:DE:0B:41:0F:33:4F
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 0FFA4559D1A43DACA2BA7F8F836D8903B03B66F6
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e36342e302f31392d3139203d3e20313334353432.roa
Signing time: Fri 15 May 2026 09:29:51 +0000
ROA not before: Fri 15 May 2026 09:24:51 +0000
ROA not after: Fri 14 May 2027 09:29:51 +0000
asID: 134542
IP address blocks: 59.80.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fa:45:59:d1:a4:3d:ac:a2:ba:7f:8f:83:6d:89:03:b0:3b:66:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:24:51 2026 GMT
Not After : May 14 09:29:51 2027 GMT
Subject: CN=AA706DD5813719696A9550E4F719DE0B410F334F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:e8:6f:a6:4e:cf:b0:66:3b:12:98:56:71:
9c:45:2e:f8:1b:63:cc:94:75:3b:a9:ef:a1:64:a8:
2c:cb:ef:6f:e0:f0:8c:6b:39:70:5f:2d:a0:78:a6:
6f:27:21:bc:dd:99:aa:e3:1f:41:4f:75:70:37:92:
a7:47:db:4d:ea:62:2a:af:95:bb:bd:fb:9d:47:fd:
9f:f5:8a:59:00:81:02:da:f4:5e:6e:a2:f3:f9:70:
73:02:41:19:51:ca:9e:34:c2:68:0e:84:a2:bb:65:
d0:4f:0f:06:a1:4a:e0:54:b1:b2:dc:19:36:c0:9a:
0c:67:bb:80:29:a3:08:d7:c9:0a:17:aa:d1:e9:73:
98:fd:d5:90:5d:0d:73:e7:e4:82:7c:5d:1e:74:f2:
7f:81:64:1b:8e:a3:eb:3b:21:be:f8:bf:f1:95:95:
33:33:c7:07:c0:43:bd:6c:44:8c:2c:d6:bc:ea:00:
12:93:b9:14:14:e5:c5:49:94:71:e9:88:2e:9c:de:
fb:e0:dc:61:ee:da:a9:3b:a1:21:a9:23:a1:a6:97:
21:6b:ac:5e:6e:f9:40:b4:a9:db:d2:34:8d:c7:6a:
cb:bc:00:19:c3:5c:4e:ba:c8:fa:f3:35:61:2c:2b:
41:ef:1c:ce:52:ff:9b:1d:42:55:97:f4:d3:87:85:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:6D:D5:81:37:19:69:6A:95:50:E4:F7:19:DE:0B:41:0F:33:4F
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e36342e302f31392d3139203d3e20313334353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.80.64.0/19
Signature Algorithm: sha256WithRSAEncryption
86:61:43:0e:98:44:82:f8:39:11:7e:da:ed:d1:06:c5:60:69:
85:33:11:4d:b1:cf:88:37:47:5a:36:82:4b:cf:df:fe:c7:c8:
dc:b8:5a:ee:43:39:f5:9d:ca:e2:78:d1:c9:8a:5c:7f:d8:25:
2a:38:bc:61:dd:67:39:7c:74:08:eb:d3:4a:9c:e4:99:00:4a:
f7:48:30:9e:e1:ff:78:5f:86:05:00:70:3c:41:5f:04:1b:48:
c7:de:03:4c:ac:53:ca:8d:84:9e:5b:41:e8:42:f6:17:2f:6e:
68:97:7f:1f:92:a3:25:3a:00:32:c2:2b:65:16:8c:e4:14:96:
6b:43:64:c2:67:17:c8:ce:cc:4b:c5:62:45:d5:e7:29:8c:00:
aa:72:c2:6a:cb:8c:0a:97:14:2c:db:4d:4d:04:f5:c1:ca:36:
a8:b6:a6:65:6b:27:83:f0:9b:e5:2c:1a:97:51:7f:0e:76:ee:
ef:29:80:af:d5:ae:99:66:1f:6b:eb:68:a1:b9:ed:66:fa:2f:
5f:5a:8b:3a:64:70:57:ee:33:e6:84:7c:23:51:52:d9:dc:19:
1d:c2:47:5a:da:7a:28:d9:27:a4:e5:cb:8d:6f:e0:ea:5c:bc:
26:4a:08:db:48:32:ff:1a:58:1b:62:1c:0e:ee:7b:ac:07:aa:
29:66:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:06 2026 by rpki-client