
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e39362e302f31392d3139203d3e20313334353432.roa
File: 35392e38302e39362e302f31392d3139203d3e20313334353432.roa (raw, json)
Hash identifier: cSGzncUVsdG/5zmeAIF4zcgcXyBkCvE4r1GArZGtG6s=
Subject key identifier: 77:08:5A:F0:C5:B0:FE:F9:23:23:BE:F4:A5:94:EB:16:30:B9:84:CE
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 410CA1990A56F9D9D26891DE1E97BC935D6AE152
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e39362e302f31392d3139203d3e20313334353432.roa
Signing time: Fri 15 May 2026 09:30:05 +0000
ROA not before: Fri 15 May 2026 09:25:05 +0000
ROA not after: Fri 14 May 2027 09:30:05 +0000
asID: 134542
IP address blocks: 59.80.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0c:a1:99:0a:56:f9:d9:d2:68:91:de:1e:97:bc:93:5d:6a:e1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 15 09:25:05 2026 GMT
Not After : May 14 09:30:05 2027 GMT
Subject: CN=77085AF0C5B0FEF92323BEF4A594EB1630B984CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:52:5b:de:68:3f:66:03:dc:36:1d:af:b2:
d7:46:96:52:60:86:fa:30:7e:6c:1b:14:c1:4d:09:
1c:2a:14:74:d1:17:51:3d:de:98:c9:03:bf:81:60:
f4:52:b6:20:85:8c:fc:54:c3:7c:e9:ab:b7:84:41:
74:23:16:f0:df:0f:fb:dd:1a:af:65:f2:c9:ca:34:
ae:30:6d:bd:98:42:f4:80:b7:df:d8:bf:98:06:bb:
04:4c:31:21:3b:60:12:9f:b3:84:51:b5:9f:c8:eb:
72:cd:b6:11:b8:53:a6:04:5b:33:1b:3e:5a:7f:24:
83:3c:ce:7a:69:72:0b:f6:cd:5b:9f:11:44:17:11:
df:9a:fd:aa:44:a6:89:3c:27:d0:66:2d:fc:0b:3d:
86:56:95:2a:6a:c4:b8:d7:96:20:9c:67:73:a4:2d:
e7:0a:0a:9c:06:6e:1c:6c:87:f7:fd:65:00:f8:6b:
a9:0c:05:23:75:9c:8e:a4:b7:df:4d:41:1a:f3:bb:
46:52:ef:6b:e5:7e:8c:d1:d9:a4:11:f0:d6:49:0e:
d5:71:85:e6:30:8e:cc:21:d2:35:25:e0:a4:b6:3d:
b0:84:5f:60:43:64:28:61:a9:05:13:d4:69:27:42:
8b:b3:46:3d:45:bb:c8:49:65:93:24:6d:24:4e:55:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:5A:F0:C5:B0:FE:F9:23:23:BE:F4:A5:94:EB:16:30:B9:84:CE
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38302e39362e302f31392d3139203d3e20313334353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.80.96.0/19
Signature Algorithm: sha256WithRSAEncryption
17:fb:bf:ff:41:16:58:b2:5d:f3:8a:18:4a:1c:6c:3a:38:ea:
69:52:e3:99:47:b7:a3:df:16:8b:55:87:77:82:36:6d:7f:2c:
91:5e:60:ae:37:15:36:3b:31:70:61:12:19:30:73:8e:11:86:
f5:1d:3b:86:3b:20:a1:fa:40:c0:73:b8:e1:ab:12:7b:8b:28:
7a:ff:84:67:42:f0:97:9e:90:a9:c9:59:a2:8d:cf:e6:29:d8:
b1:3e:d3:15:20:fd:a8:b1:dd:9c:94:e5:d8:89:10:f7:e7:7e:
e1:65:a0:44:26:f4:fe:df:27:07:ca:96:69:99:4b:4c:c5:94:
94:0a:e8:fb:06:b3:f9:a8:4b:14:44:d2:87:44:79:b3:2f:98:
97:f6:32:72:1d:7f:ea:90:1b:62:58:38:2f:4b:14:f9:79:8c:
d5:40:2b:dd:ed:3b:3d:08:c7:4a:af:e3:28:7a:89:d8:15:ce:
2c:a7:d8:76:bc:0d:88:a9:25:4d:54:2c:f0:5b:66:b3:57:eb:
44:46:5b:d7:8d:a4:3a:a3:c9:81:10:74:d0:e5:3d:70:44:9a:
aa:96:e1:3c:a6:73:29:6e:dd:31:92:bf:fa:f2:0a:82:18:de:
03:cc:53:7d:6a:3e:f0:7a:a6:4a:14:e9:e7:fe:ad:21:17:b0:
dd:11:4f:5f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQQyhmQpW+dnSaJHeHpe8k11q4VIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA1MTUwOTI1MDVaFw0yNzA1MTQwOTMwMDVaMDMxMTAvBgNV
BAMTKDc3MDg1QUYwQzVCMEZFRjkyMzIzQkVGNEE1OTRFQjE2MzBCOTg0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/1Jb3mg/ZgPcNh2vstdGllJg
hvowfmwbFMFNCRwqFHTRF1E93pjJA7+BYPRStiCFjPxUw3zpq7eEQXQjFvDfD/vd
Gq9l8snKNK4wbb2YQvSAt9/Yv5gGuwRMMSE7YBKfs4RRtZ/I63LNthG4U6YEWzMb
Plp/JIM8znppcgv2zVufEUQXEd+a/apEpok8J9BmLfwLPYZWlSpqxLjXliCcZ3Ok
LecKCpwGbhxsh/f9ZQD4a6kMBSN1nI6kt99NQRrzu0ZS72vlfozR2aQR8NZJDtVx
heYwjswh0jUl4KS2PbCEX2BDZChhqQUT1GknQouzRj1Fu8hJZZMkbSROVRj1AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUdwha8MWw/vkjI770pZTrFjC5hM4wHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMDJl
MzkzNjJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzMzNDM1MzQzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBTtQYDANBgkqhkiG9w0BAQsFAAOCAQEAF/u//0EWWLJd84oYShxsOjjqaVLj
mUe3o98Wi1WHd4I2bX8skV5grjcVNjsxcGESGTBzjhGG9R07hjsgofpAwHO44asS
e4soev+EZ0Lwl56QqclZoo3P5inYsT7TFSD9qLHdnJTl2IkQ9+d+4WWgRCb0/t8n
B8qWaZlLTMWUlAro+waz+ahLFETSh0R5sy+Yl/Yych1/6pAbYlg4L0sU+XmM1UAr
3e07PQjHSq/jKHqJ2BXOLKfYdrwNiKklTVQs8Ftms1frREZb142kOqPJgRB00OU9
cESaqpbhPKZzKW7dMZK/+vIKghjeA8xTfWo+8HqmShTp5/6tIRew3RFPXw==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:50 2026 by rpki-client