
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e34362e302f32342d3234203d3e2034383337.roa
File: 35392e38312e34362e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: 5wl61VLy5hBI/ItdxdI+jo0kTnyPzQA1T4xMKJYT2XU=
Subject key identifier: 3C:41:87:B0:E7:20:66:71:B0:73:23:87:40:27:49:7E:39:72:F8:B9
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 6B0CCA3017BCE25054B2D55209D8E2FEAD7A48F0
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e34362e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:43:47 +0000
ROA not before: Wed 10 Jun 2026 11:38:47 +0000
ROA not after: Wed 09 Jun 2027 11:43:47 +0000
asID: 4837
IP address blocks: 59.81.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0c:ca:30:17:bc:e2:50:54:b2:d5:52:09:d8:e2:fe:ad:7a:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:38:47 2026 GMT
Not After : Jun 9 11:43:47 2027 GMT
Subject: CN=3C4187B0E7206671B07323874027497E3972F8B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:9b:cf:84:7d:2b:5e:f2:53:5f:18:cd:8b:
c3:26:f6:61:31:58:42:94:3c:fc:f2:f2:8e:54:02:
e2:7a:6e:dc:13:8c:f3:43:91:9a:18:c3:5e:ad:c1:
2b:d9:bb:26:bb:c0:c2:20:e0:ef:fc:43:0f:aa:6d:
3c:57:dd:10:ab:b1:4a:f9:24:db:79:86:0f:bc:ec:
bf:a9:ba:22:62:01:50:4b:57:ed:75:5d:d4:ba:a1:
6c:10:12:df:4f:8f:7d:d4:c1:18:c8:ce:f7:6b:f8:
cb:b7:0e:f5:50:4b:9c:5a:ee:c0:96:49:02:97:55:
1a:00:df:d6:9e:b8:e5:aa:e2:6e:18:f2:8d:ef:28:
ac:1e:2f:7f:fb:f6:35:50:86:94:d3:8b:b1:e4:d4:
62:2d:d6:57:6f:6e:2d:e3:99:2e:f9:fb:49:b0:2a:
a4:36:10:51:35:dc:93:45:8b:a9:3e:6d:df:05:08:
34:a6:46:e5:f3:dd:25:02:27:7d:0d:9c:05:28:c6:
b2:54:ac:23:ba:00:21:3f:01:9f:24:c9:24:a8:26:
49:a1:2f:91:25:3f:aa:4a:6d:6e:da:77:2b:3e:8e:
f2:23:fa:ca:82:15:69:76:05:95:d5:9d:7c:82:48:
ff:dc:29:13:2f:9e:19:61:23:9b:22:cd:7c:e0:4a:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:87:B0:E7:20:66:71:B0:73:23:87:40:27:49:7E:39:72:F8:B9
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e34362e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.46.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2e:af:1c:46:82:7f:06:27:1b:a6:4f:b4:1a:a5:a9:28:a2:
bc:80:f2:2f:b8:90:e5:e0:43:d2:03:45:1b:5a:73:9f:37:20:
9f:c3:67:51:95:07:36:84:f5:0b:d1:e4:92:5b:34:97:9d:36:
c1:35:78:84:13:23:0f:6b:04:35:bc:38:2a:b2:52:eb:13:dc:
77:a5:d8:82:3c:49:21:87:ec:08:29:1d:45:c2:4c:e8:fb:06:
e7:8e:34:c3:f0:19:a2:a6:e9:4b:ef:00:8f:53:23:d8:11:7d:
1f:bb:6f:77:74:b8:b2:82:de:d4:b3:0c:d0:ca:75:09:38:61:
49:be:86:fd:25:db:f3:45:9c:f5:26:9b:59:01:32:a5:71:e0:
a8:3e:2f:ba:e5:76:56:76:3d:bf:22:d1:68:b5:c4:5c:55:45:
a7:5a:7a:ef:5b:1a:df:98:94:16:d9:e5:e1:5a:6e:db:f4:31:
bc:31:5c:a6:73:bb:d1:1b:29:2d:22:2c:fc:55:ec:a2:af:70:
a4:61:0f:d0:70:58:ed:8a:36:c2:11:35:4f:53:e6:bc:ba:11:
f8:f8:09:3a:88:e5:4d:c3:b3:83:c0:20:26:92:50:15:07:ee:
e0:72:ef:c1:b4:a4:ed:f1:ff:46:37:27:3b:9b:4a:cd:1b:45:
d7:05:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:35 2026 by rpki-client