
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130352e302f32342d3234203d3e2034383337.roa
File: 35392e38312e3130352e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: mx0KuJp9WQgZYlTZ5PwgEA73SJB9lS9A29WA8xE9jmg=
Subject key identifier: 9A:49:48:D4:FA:A0:02:F7:65:01:72:EE:10:23:EF:02:FE:1F:CC:28
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 3BEDD22235FAC01E03E7C5DBBB610A5C96EEE244
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130352e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:46:52 +0000
ROA not before: Wed 10 Jun 2026 11:41:52 +0000
ROA not after: Wed 09 Jun 2027 11:46:52 +0000
asID: 4837
IP address blocks: 59.81.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ed:d2:22:35:fa:c0:1e:03:e7:c5:db:bb:61:0a:5c:96:ee:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:41:52 2026 GMT
Not After : Jun 9 11:46:52 2027 GMT
Subject: CN=9A4948D4FAA002F7650172EE1023EF02FE1FCC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:71:68:8d:0d:69:32:19:da:6e:15:1e:a2:
18:2b:ff:30:da:22:10:ac:26:7d:ba:30:47:3e:0c:
8a:73:81:e9:a5:df:08:94:80:ed:fd:c4:e9:3d:42:
c1:0b:a3:30:0f:65:08:1a:b2:9b:b8:d7:a7:4a:42:
12:59:f6:9a:6b:27:92:9d:eb:53:34:2e:29:ca:b6:
cf:6a:50:f5:3e:ce:3e:52:8c:e8:1a:17:3b:e4:4b:
9e:49:a3:7e:86:75:45:fa:50:65:44:b6:8d:55:24:
1d:cb:b1:67:18:e5:f9:d6:ba:ad:68:82:1b:f9:d3:
99:ee:68:d3:81:d5:f9:47:e6:ae:c4:29:c0:58:bb:
5a:84:df:64:78:b7:91:29:90:0c:64:ab:f4:e7:e8:
1f:7e:ac:72:36:f0:13:16:13:4c:08:f6:73:2e:c1:
ac:60:9a:e2:38:a9:37:52:dd:d1:da:d3:55:70:e2:
d3:a9:3b:db:88:00:48:a3:ab:9d:0e:b7:12:25:52:
64:5a:ab:cb:f2:c4:b6:56:ac:ef:c4:fb:40:f3:03:
0f:24:dc:cc:43:c6:d1:8d:6c:a7:f2:6b:f9:f8:ec:
a4:cc:16:08:c1:2b:ca:ef:36:f8:20:a8:5b:45:7b:
bc:60:b7:c8:5b:93:f6:16:fb:5b:01:86:17:e2:4c:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:48:D4:FA:A0:02:F7:65:01:72:EE:10:23:EF:02:FE:1F:CC:28
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130352e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.105.0/24
Signature Algorithm: sha256WithRSAEncryption
95:26:38:b4:25:88:cd:b7:a2:2e:11:9c:ab:fa:79:7c:92:f6:
65:ea:9c:57:dd:2e:c6:13:6d:b9:57:d8:a1:88:cb:58:cb:2b:
f9:21:95:94:b5:0a:8e:fa:92:6b:96:6b:81:6b:78:31:99:a0:
1c:61:52:66:cc:75:c7:61:2c:17:27:6b:b3:a1:17:04:53:56:
13:18:a7:80:ab:b0:6b:11:ee:ba:18:8d:88:e8:59:84:6e:0c:
11:d9:54:be:66:aa:56:38:e3:53:22:87:fc:cb:46:ea:ed:79:
17:8a:ac:aa:70:1b:80:68:59:e3:08:43:0b:6d:06:c9:eb:a1:
fa:21:43:7d:ad:25:01:23:97:11:48:b8:bf:cc:c4:a4:63:31:
b7:9f:32:3d:8e:b3:0b:df:d9:d7:cb:98:38:45:2c:7c:14:92:
81:8f:21:14:d4:e4:22:e3:65:f0:4f:45:fe:17:38:6c:cf:10:
c7:a6:c4:51:81:a4:7d:ec:3a:3d:65:61:a2:d4:58:5b:fa:1d:
14:59:14:8c:e4:39:14:19:1f:2a:bb:9a:23:c5:62:76:24:41:
39:cd:80:e0:a2:b1:86:49:4e:31:ab:d1:50:10:59:d3:88:a8:
c5:e2:28:eb:76:c5:0a:b3:fd:5e:ff:01:15:ef:b7:6e:15:af:
71:21:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client