
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e36342e302f32332d3233203d3e203137363231.roa
File: 35392e38312e36342e302f32332d3233203d3e203137363231.roa (raw, json)
Hash identifier: FPh/N3Xd2VycLf7Y2Q/54F/57SDn8d5PQ4azzFhq/Hw=
Subject key identifier: 2D:AB:A1:8F:AC:BF:8E:D5:E6:9D:CC:76:39:DD:7D:51:6D:C8:CB:94
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 07B4EAF3FEB87B76444FC63BD730A29AF1DDC0FF
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e36342e302f32332d3233203d3e203137363231.roa
Signing time: Fri 22 May 2026 08:09:37 +0000
ROA not before: Fri 22 May 2026 08:04:37 +0000
ROA not after: Fri 21 May 2027 08:09:37 +0000
asID: 17621
IP address blocks: 59.81.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b4:ea:f3:fe:b8:7b:76:44:4f:c6:3b:d7:30:a2:9a:f1:dd:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 22 08:04:37 2026 GMT
Not After : May 21 08:09:37 2027 GMT
Subject: CN=2DABA18FACBF8ED5E69DCC7639DD7D516DC8CB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:01:92:5c:1f:44:03:b6:99:29:b6:60:bf:
6c:78:08:9f:65:de:b5:bd:22:aa:5d:c3:f7:cd:a7:
79:da:86:b9:63:e8:35:5f:ee:13:ce:4d:29:da:4d:
04:fb:b7:db:98:89:f6:bf:fa:55:50:35:5b:e3:67:
b7:cd:22:70:bd:81:95:ed:fb:d3:54:02:3a:95:7f:
20:d5:76:ea:4c:43:6a:b7:46:81:9d:65:91:56:f6:
d0:52:4c:11:55:bc:a3:12:8e:f3:8a:b5:79:4f:f9:
0a:77:04:4c:e1:ea:4c:7f:48:41:db:46:a6:70:c7:
73:9b:3c:81:ac:3b:34:fd:0f:32:15:13:04:c8:cd:
55:36:98:4e:b5:29:e3:7f:54:fe:44:8c:65:63:12:
84:e2:2b:aa:40:5d:7b:8a:43:81:e2:0b:15:29:6b:
77:ce:1e:8e:e3:b5:56:c2:bc:d8:6d:1b:b3:bb:ea:
9a:33:70:fb:95:f3:58:17:41:69:c7:65:cb:1e:a6:
27:09:a3:ac:98:c4:e6:6f:51:2f:f9:fb:ff:7e:fa:
c2:ce:56:43:e9:b1:f3:3e:4c:a5:08:84:d1:0a:55:
d2:a7:90:d9:9f:55:18:3f:9c:cf:f0:8c:a2:45:f0:
87:3d:3e:41:c5:82:79:b1:ba:e0:b7:57:48:00:e0:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:A1:8F:AC:BF:8E:D5:E6:9D:CC:76:39:DD:7D:51:6D:C8:CB:94
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e36342e302f32332d3233203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.64.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:d4:35:64:da:9b:5b:49:ce:95:df:ed:23:ee:2f:ba:a5:13:
b5:91:04:82:e9:5c:08:ba:8e:5e:1f:85:1f:42:05:73:d0:27:
7f:f5:a9:bf:f3:34:f1:5c:88:75:54:a1:d2:c9:ff:aa:6e:ec:
72:d5:32:59:08:a5:84:b7:8f:fb:3d:2c:78:81:59:b4:dc:81:
b3:d4:d3:60:db:53:ef:07:20:fc:9b:fc:3b:af:ec:4c:03:cb:
47:a2:9d:66:6e:04:46:6b:be:b2:47:47:97:17:e2:f5:bc:11:
39:c9:19:4e:e6:d0:94:4a:6f:87:71:06:35:07:27:bd:4f:26:
23:f9:84:f1:f7:9f:b5:69:30:69:52:ad:2c:87:71:33:0d:61:
67:97:51:d9:d4:ef:91:2d:0e:66:5d:13:48:2a:58:a4:40:8e:
95:2f:ca:43:83:24:4e:ad:c8:55:89:94:01:d9:1e:d8:d3:76:
31:d9:f3:b1:71:aa:dc:69:9b:c2:26:cb:cd:7b:5c:62:1f:9d:
c0:94:26:4f:5c:47:01:fc:40:b2:d0:f8:63:ca:c2:06:48:8b:
06:4d:38:0e:49:c3:f8:78:cb:1b:97:ef:8d:16:b8:d1:62:04:
91:c4:1f:dd:68:54:dd:b9:6a:c9:18:b3:95:e6:fc:86:11:ec:
ef:b7:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:32 2026 by rpki-client