
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32342d3234203d3e2034383337.roa
File: 35392e38312e3130342e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: sSaZKtLSET9H0iqkNn2txc5dSZqjjuyBfkmm+TCjpVU=
Subject key identifier: 4E:55:47:90:DC:61:30:D4:A2:74:DA:38:16:6E:02:DB:49:D3:D3:7C
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 2FFC09E17BAD131B7F399CA7D56451D5930B2315
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:46:52 +0000
ROA not before: Wed 10 Jun 2026 11:41:52 +0000
ROA not after: Wed 09 Jun 2027 11:46:52 +0000
asID: 4837
IP address blocks: 59.81.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:fc:09:e1:7b:ad:13:1b:7f:39:9c:a7:d5:64:51:d5:93:0b:23:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:41:52 2026 GMT
Not After : Jun 9 11:46:52 2027 GMT
Subject: CN=4E554790DC6130D4A274DA38166E02DB49D3D37C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:6a:48:fc:19:47:80:4d:aa:77:4c:2a:88:
cf:b6:0e:b8:e9:bd:60:c2:66:31:e2:cf:f6:1f:6b:
f8:de:d1:e3:5f:72:16:1e:22:ba:2d:2f:ae:07:3c:
aa:29:97:78:c8:55:29:89:81:f7:f0:7c:38:45:a8:
f0:09:05:33:65:24:1e:0f:bb:a1:21:99:9d:2f:da:
40:a4:bf:d9:5c:ae:1b:09:10:cc:13:ce:ae:58:19:
07:60:10:2e:77:e1:09:15:0e:01:33:d5:cc:dd:98:
18:be:4d:8c:4b:87:88:1a:49:ea:cf:78:61:68:84:
15:e6:cf:ad:68:9e:91:e0:ae:9d:9c:d9:f4:9f:50:
b5:fb:07:39:6d:23:7d:8a:08:39:ea:c9:4f:40:89:
9f:23:f8:68:5f:30:9d:ad:b6:c7:d6:bb:16:a3:df:
f6:57:ef:db:1c:34:be:ff:3a:11:0b:71:4c:c8:b5:
6f:99:75:b6:60:f6:7f:9c:b6:e2:95:f4:2f:51:d5:
e4:0d:ef:11:d4:d0:f7:6d:1e:6e:1b:6f:74:d5:e4:
ca:af:7a:63:0f:87:69:e6:68:2d:91:76:94:5e:27:
16:06:ec:d3:49:ff:3a:0a:74:5f:bd:99:11:62:66:
97:41:a6:dc:89:e5:04:c0:a3:2a:df:af:fd:4d:40:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:55:47:90:DC:61:30:D4:A2:74:DA:38:16:6E:02:DB:49:D3:D3:7C
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130342e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d8:38:31:9f:57:14:9f:d3:4a:90:21:f1:22:37:de:88:55:
22:44:c2:21:72:52:f0:88:79:d8:74:65:e6:de:f3:6d:99:0f:
4c:ba:18:11:e4:59:b2:e3:67:ee:84:9b:38:83:57:8a:74:81:
c6:b5:97:9d:fc:80:39:d8:d2:5c:6a:2f:c7:02:3e:08:a4:4f:
70:52:99:25:79:10:7f:91:43:b0:e1:61:71:b7:a0:f2:33:78:
f9:40:df:6d:77:b2:da:0f:97:9d:f2:a9:4e:70:4c:98:8f:5d:
d6:d0:b0:e3:b1:26:2a:56:b8:64:bd:40:e1:0a:93:4c:e3:3b:
f9:10:21:c3:b4:7c:c9:00:7b:a4:7b:2d:cb:38:29:2c:8a:1b:
7b:2c:ec:67:16:d4:27:9d:e5:93:d5:21:bc:3a:1d:58:a2:50:
38:fb:8d:61:f2:e2:35:0e:a6:1c:5a:45:42:c3:f7:ac:57:3b:
2f:d4:4e:69:0b:dc:c7:e1:c6:8b:34:94:32:df:6f:ea:bb:30:
36:2d:f9:92:c8:1f:0d:ba:c7:e4:2f:bf:75:3d:b2:a9:db:0c:
ee:c7:4f:3c:67:a8:20:40:e8:c5:25:b6:73:f2:b7:74:f5:0b:
32:b1:bd:db:86:e4:74:db:82:48:66:2b:44:0e:86:08:d7:9a:
63:32:a9:d6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUL/wJ4XutExt/OZyn1WRR1ZMLIxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA2MTAxMTQxNTJaFw0yNzA2MDkxMTQ2NTJaMDMxMTAvBgNV
BAMTKDRFNTU0NzkwREM2MTMwRDRBMjc0REEzODE2NkUwMkRCNDlEM0QzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVGpI/BlHgE2qd0wqiM+2Drjp
vWDCZjHiz/Yfa/je0eNfchYeIrotL64HPKopl3jIVSmJgffwfDhFqPAJBTNlJB4P
u6EhmZ0v2kCkv9lcrhsJEMwTzq5YGQdgEC534QkVDgEz1czdmBi+TYxLh4gaSerP
eGFohBXmz61onpHgrp2c2fSfULX7BzltI32KCDnqyU9AiZ8j+GhfMJ2ttsfWuxaj
3/ZX79scNL7/OhELcUzItW+ZdbZg9n+ctuKV9C9R1eQN7xHU0PdtHm4bb3TV5Mqv
emMPh2nmaC2RdpReJxYG7NNJ/zoKdF+9mRFiZpdBptyJ5QTAoyrfr/1NQPQ5AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUTlVHkNxhMNSidNo4Fm4C20nT03wwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMTJl
MzEzMDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAA7UWgwDQYJKoZIhvcNAQELBQADggEBAKbYODGfVxSf00qQIfEiN96IVSJEwiFy
UvCIedh0Zebe822ZD0y6GBHkWbLjZ+6EmziDV4p0gca1l538gDnY0lxqL8cCPgik
T3BSmSV5EH+RQ7DhYXG3oPIzePlA3213stoPl53yqU5wTJiPXdbQsOOxJipWuGS9
QOEKk0zjO/kQIcO0fMkAe6R7Lcs4KSyKG3ss7GcW1Ced5ZPVIbw6HViiUDj7jWHy
4jUOphxaRULD96xXOy/UTmkL3Mfhxos0lDLfb+q7MDYt+ZLIHw26x+Qvv3U9sqnb
DO7HTzxnqCBA6MUltnPyt3T1CzKxvduG5HTbgkhmK0QOhgjXmmMyqdY=
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client