
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32332d3233203d3e2034383337.roa
File: 35392e38312e3130342e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: dSaPVk/09AMOjumtRlH08Dy48Aq9y2IcceNsdynD2/U=
Subject key identifier: F1:A1:D3:60:B6:EC:62:14:77:BE:11:52:C2:15:84:FA:9D:1F:31:66
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 0D6A49E95677E3F30C882BC28D7C88E3CB1738C5
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32332d3233203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:46:52 +0000
ROA not before: Wed 10 Jun 2026 11:41:52 +0000
ROA not after: Wed 09 Jun 2027 11:46:52 +0000
asID: 4837
IP address blocks: 59.81.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6a:49:e9:56:77:e3:f3:0c:88:2b:c2:8d:7c:88:e3:cb:17:38:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:41:52 2026 GMT
Not After : Jun 9 11:46:52 2027 GMT
Subject: CN=F1A1D360B6EC621477BE1152C21584FA9D1F3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:19:e5:cd:2a:08:f2:7b:c9:65:d7:90:a4:
98:22:19:9d:98:6e:f2:b2:b6:a4:d2:5d:90:a3:a9:
61:3d:a1:e4:3e:e2:22:95:36:79:45:79:cd:55:62:
3b:47:dd:5f:25:c8:a6:ec:0b:ae:a3:1b:c4:c7:2c:
4e:31:14:4e:d5:42:aa:c9:53:70:85:5f:d0:4d:3f:
91:f5:0b:59:ea:bd:93:7f:fc:9b:80:11:d4:45:27:
7a:88:48:c6:c8:04:a8:f0:87:04:b5:b2:b2:f2:10:
98:a9:d2:c7:2e:8f:f7:7d:ee:70:c1:82:8d:0f:1b:
65:55:aa:81:c2:e6:30:5f:84:d7:5f:79:4a:a4:ac:
d2:04:48:68:07:85:d4:68:7e:3a:4b:1e:21:fc:79:
c8:a8:b3:9c:6a:a2:e3:3a:ec:2e:df:48:9b:7f:87:
e7:38:c6:8d:ed:e3:05:8b:33:22:ae:d5:96:2c:62:
20:c4:ce:6e:50:fe:4a:e3:73:c9:2f:73:d6:fb:45:
5c:43:e6:b2:25:63:91:b1:2d:ee:d4:be:c1:2f:51:
5a:9a:1f:66:d9:6f:70:cd:e0:62:15:bd:d5:25:92:
5b:46:30:fe:c2:b6:7b:41:51:72:bf:02:f1:20:fa:
b9:1f:a4:09:7d:71:7b:8c:76:96:12:b9:d8:33:59:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:D3:60:B6:EC:62:14:77:BE:11:52:C2:15:84:FA:9D:1F:31:66
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:3f:2d:55:ac:6b:91:62:47:44:9d:99:16:95:de:a0:d2:e8:
2d:5b:6f:ee:17:76:b9:f5:64:59:86:68:ea:61:fe:da:36:fe:
1f:a7:76:9a:fd:e0:52:d2:ee:1e:27:92:3e:71:d0:3b:35:4b:
8c:90:eb:6f:a5:de:95:f1:7a:32:c4:cf:f9:c8:60:60:0f:72:
86:bc:4d:a1:11:0f:a2:86:b5:24:61:f0:e5:de:4c:bb:72:3b:
93:4b:00:3f:1b:8e:d0:7a:89:33:f5:c7:07:3a:db:42:90:a3:
52:d1:c9:99:40:78:98:85:8b:9e:55:71:0c:04:23:d0:90:2e:
d5:18:70:5f:d3:84:e4:82:a9:e7:3d:59:30:ef:a2:ff:ac:4b:
d7:34:93:2a:d4:b5:06:04:2c:81:ca:82:5f:ad:be:ef:cf:d3:
9c:b1:f8:61:ea:b6:cf:06:d1:6d:88:00:c2:a8:c6:80:2d:03:
fb:c5:79:5b:0d:9b:90:7c:df:46:49:55:10:df:68:74:65:79:
a9:37:1d:7a:90:f5:55:ad:4a:7b:42:0b:d5:4b:03:43:3a:7e:
c4:94:07:78:1a:93:69:28:73:85:26:0e:f1:76:1f:ac:cb:a9:
92:54:c3:bc:58:09:7d:3b:08:ea:6f:69:02:27:d2:9c:48:60:
4d:29:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:31 2026 by rpki-client