
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130322e302f32342d3234203d3e2034383337.roa
File: 35392e38312e3130322e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: Yv8A7R3im0Y+lkcVEtuUhQHccvi2sNSddFbkmdhaOXA=
Subject key identifier: D2:91:F8:05:22:27:EE:BC:75:D6:9D:8F:6D:07:E2:10:FF:54:3C:33
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 20DA48D886C0BB1C0B9DC2443FD5536CFC7025B1
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130322e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:47:50 +0000
ROA not before: Wed 10 Jun 2026 11:42:50 +0000
ROA not after: Wed 09 Jun 2027 11:47:50 +0000
asID: 4837
IP address blocks: 59.81.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:da:48:d8:86:c0:bb:1c:0b:9d:c2:44:3f:d5:53:6c:fc:70:25:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:42:50 2026 GMT
Not After : Jun 9 11:47:50 2027 GMT
Subject: CN=D291F8052227EEBC75D69D8F6D07E210FF543C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:83:45:ab:fe:b5:bb:73:90:49:bc:ee:e6:
2f:da:38:93:a0:63:30:c0:12:66:df:0b:32:17:67:
db:10:3a:66:e0:83:ad:1c:fd:4c:7d:66:7d:09:8d:
19:8c:87:12:3d:9b:6a:99:11:12:26:07:c0:3b:a7:
1f:10:b4:57:87:11:df:8e:e7:0e:d5:e7:ac:9a:24:
51:69:7f:a4:24:62:69:55:2d:ed:1c:f0:8e:03:9a:
f4:d2:40:5a:ec:48:54:0a:a8:f8:6d:d5:be:49:04:
10:24:43:e0:26:e3:14:65:a6:d8:2b:c2:4a:64:31:
ea:58:0e:5a:67:4a:3c:59:14:03:04:81:d0:e9:74:
aa:7a:17:46:89:b8:4d:ea:3e:db:49:92:5f:09:9e:
87:a0:87:ea:05:4b:10:6f:73:01:fc:7f:f5:5a:7b:
36:53:a4:f4:fe:84:8e:80:30:58:d8:6c:d8:22:de:
61:fb:fd:6a:fe:bc:5a:9f:7b:b1:33:48:5a:94:59:
95:5c:85:c9:ec:88:93:7b:4c:ea:07:a4:bd:aa:4f:
b9:5a:46:e1:1e:0e:db:13:1f:e6:af:f2:bb:76:3d:
7c:7c:e5:4e:e5:7f:68:c4:06:61:ad:b0:4d:cb:73:
4c:b7:40:1f:72:b2:3b:15:e2:6d:a2:bf:c3:19:47:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:91:F8:05:22:27:EE:BC:75:D6:9D:8F:6D:07:E2:10:FF:54:3C:33
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130322e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:09:9d:0e:78:05:49:40:7e:76:8b:21:12:36:f2:2d:7c:9e:
71:3d:20:c1:12:bf:33:48:c2:eb:0a:ba:a8:d9:66:84:87:97:
96:cc:35:21:ef:5c:59:88:45:66:58:0c:6d:ca:be:98:f9:df:
0a:d9:13:69:34:79:b2:ad:29:e7:08:34:40:61:03:d8:77:95:
63:cb:00:a4:27:ec:77:d2:ea:66:a4:3d:17:d3:6b:94:ba:e7:
24:38:54:87:4d:66:b2:c1:de:27:5c:71:f9:97:4c:96:5c:6f:
71:bf:c2:5f:27:66:a4:33:05:44:fd:77:dd:7b:c1:ab:2c:46:
d4:8e:20:2e:27:96:fd:7f:7c:9f:ff:3e:d2:dd:77:71:1b:9b:
6d:54:90:af:a0:a7:25:82:fd:de:0f:46:06:11:b1:98:92:5e:
ff:51:25:59:8a:aa:44:3c:bf:e6:88:fd:58:9a:20:15:ef:10:
0c:02:6f:38:e5:bd:33:00:63:68:9d:79:b7:0a:4b:fd:9a:10:
38:cd:f1:bf:ae:37:45:39:32:57:06:2f:a6:d3:0f:45:58:3b:
97:7b:23:7f:32:97:2c:fd:fe:af:3e:3b:ac:74:26:44:c0:14:
33:c0:dc:0f:68:da:09:17:aa:09:5c:d6:f1:ae:e9:b3:51:7f:
ea:8a:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:02 2026 by rpki-client