
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130332e302f32342d3234203d3e2034383337.roa
File: 35392e38312e3130332e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: Po71tB3WlumE5kBJeSpGw8OO8BQjxcVgPXtgmDcyhSo=
Subject key identifier: D2:5C:22:F5:74:4F:3D:0D:45:82:97:70:47:1D:2A:62:D9:9B:D1:B8
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 489DC65173E86AD8C61CB0D249CAD5BC82F4204E
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130332e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:47:50 +0000
ROA not before: Wed 10 Jun 2026 11:42:50 +0000
ROA not after: Wed 09 Jun 2027 11:47:50 +0000
asID: 4837
IP address blocks: 59.81.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9d:c6:51:73:e8:6a:d8:c6:1c:b0:d2:49:ca:d5:bc:82:f4:20:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:42:50 2026 GMT
Not After : Jun 9 11:47:50 2027 GMT
Subject: CN=D25C22F5744F3D0D45829770471D2A62D99BD1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:27:36:2c:1b:e5:45:c1:f4:04:76:0f:0d:
a7:96:6d:39:bd:7f:27:86:0e:dc:3d:18:14:fc:42:
1e:1f:ea:8c:c4:b1:7c:9b:7b:eb:e9:2d:02:c1:a5:
ff:92:9e:b2:4d:5b:a1:3c:b1:da:78:53:9d:d3:21:
f0:12:33:19:43:54:50:80:0f:f7:5d:23:ba:df:97:
77:a9:8b:e5:9c:16:e4:9d:4c:ec:85:66:58:f9:bd:
57:3e:2f:93:c4:a2:77:69:88:fb:7d:22:ba:0b:fa:
4d:ea:e7:fd:b3:71:14:32:a7:64:3d:be:97:d3:f3:
2a:d9:09:ee:f2:bb:eb:c0:c6:29:fe:84:3f:68:dd:
2a:1a:b3:20:b0:c3:69:7f:b5:15:47:d5:a6:20:5f:
89:4c:c3:11:99:c8:9d:ef:51:66:40:28:82:82:49:
ed:02:e7:d0:c2:62:96:a3:7f:00:b1:0d:84:ac:58:
34:0f:d1:56:60:ab:c2:b4:92:71:53:6c:44:f0:1a:
53:e8:a2:d5:85:d1:97:68:6a:4d:83:6e:8d:44:a5:
ac:3d:41:a5:1d:9c:80:0f:59:b6:5a:e3:91:de:08:
e9:4f:ab:ee:54:b5:1f:0b:b3:7b:5b:5a:33:5a:a8:
0d:22:92:e0:c7:a1:fd:6e:49:ab:a0:a1:58:3b:7e:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:22:F5:74:4F:3D:0D:45:82:97:70:47:1D:2A:62:D9:9B:D1:B8
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130332e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:14:c2:24:5b:85:dc:09:e9:26:df:ee:a2:f8:e7:a7:0a:83:
79:46:48:45:9e:4f:7b:51:5a:68:b4:c9:87:87:b8:ab:35:12:
80:ba:c0:9c:74:0d:b8:fd:34:96:a3:21:f4:f8:86:6a:6a:f6:
4b:b8:43:b1:79:e3:c1:e0:95:fe:82:ff:d7:01:10:78:3d:60:
ea:d4:bb:c7:91:af:9d:aa:df:32:03:ca:11:5c:42:5f:61:9c:
12:70:3d:ae:00:7f:b0:f7:22:ec:1b:ae:0c:90:9c:41:87:f8:
10:f6:71:67:c2:d9:4b:56:f1:52:7c:ee:73:ed:41:ec:f1:00:
f5:ea:35:9b:12:e5:75:dd:f9:f6:43:55:b7:37:6b:ec:d5:4c:
42:01:b6:0a:5b:58:dd:87:e4:cc:4d:1a:9f:62:2b:c8:c8:eb:
08:1a:80:6d:78:dc:f3:95:49:74:2b:8f:ca:ac:4c:4d:6c:14:
a0:98:9a:64:ab:84:a1:6f:f6:f5:b3:f1:c2:54:32:05:54:1f:
ee:74:70:55:f8:91:32:f4:e3:3e:80:1a:90:fa:d0:7e:0c:5a:
2a:b1:c1:ec:36:38:50:9c:07:7f:c9:b9:c7:c8:e9:a2:a8:bc:
b4:17:27:3b:be:79:77:59:ee:90:30:2a:9c:78:3e:97:c7:84:
a8:3b:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client