
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32332d3233203d3e2034383337.roa
File: 35392e38312e382e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: rF6Fvo2UPpiU5zm4+OzxIb++Wyn4ZGMeHjPB8qPV/hA=
Subject key identifier: 01:E8:3A:F6:00:66:A2:B8:06:76:2E:C4:46:E8:9F:5E:9C:F3:5B:4B
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 5C4AAD3CD67A816E7D80E65B6E819B8A754FA290
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32332d3233203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:42:25 +0000
ROA not before: Wed 10 Jun 2026 11:37:25 +0000
ROA not after: Wed 09 Jun 2027 11:42:25 +0000
asID: 4837
IP address blocks: 59.81.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4a:ad:3c:d6:7a:81:6e:7d:80:e6:5b:6e:81:9b:8a:75:4f:a2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:37:25 2026 GMT
Not After : Jun 9 11:42:25 2027 GMT
Subject: CN=01E83AF60066A2B806762EC446E89F5E9CF35B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:e1:0e:b1:98:59:b1:51:0b:2b:f4:e2:5a:
c1:01:76:27:5c:15:d4:2a:42:37:d1:2f:fa:99:94:
24:f0:44:a4:3c:5b:07:0c:6e:e3:87:de:75:9e:ac:
1d:2c:55:ef:27:2e:6f:bb:31:6b:fb:f0:86:7c:50:
ac:2b:36:9a:e1:c4:d1:c4:8e:81:3e:71:01:7c:74:
19:50:b4:bd:bf:92:f8:79:0b:91:0a:a5:67:da:77:
77:15:12:5b:3a:ad:85:98:52:b0:3e:40:37:48:63:
22:a2:33:6e:09:39:16:bb:86:e8:48:76:2c:96:2b:
14:d2:9a:70:12:8f:9e:96:e4:72:f9:db:be:82:15:
f4:f2:c5:e0:70:91:7d:81:09:f6:18:45:d4:98:41:
48:a5:cf:d3:b1:69:a2:af:e2:70:6d:7a:08:51:a7:
0d:bc:41:05:47:87:45:be:14:d1:a3:68:db:46:b6:
f7:e8:d1:62:18:e7:fb:a6:00:00:f2:c6:a8:fb:1c:
f4:83:8d:2f:c5:75:56:d6:db:0c:41:ff:a6:e6:80:
e6:77:d1:c6:88:ef:2f:9b:47:58:ca:85:02:3c:6a:
a6:47:1f:26:32:14:88:aa:4a:f4:cc:b9:7d:96:7c:
fd:d9:71:43:a1:c1:95:1e:55:05:3a:5f:f8:ec:d6:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:3A:F6:00:66:A2:B8:06:76:2E:C4:46:E8:9F:5E:9C:F3:5B:4B
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:5f:2c:ce:62:5c:81:e0:d4:89:9b:e8:b3:57:98:08:75:0f:
38:21:3e:15:e7:75:d7:29:67:da:93:a6:36:82:34:5d:d0:c5:
7d:31:4e:4d:0c:99:1e:79:20:c7:71:26:54:f3:e7:1c:89:92:
c5:70:d0:2e:8b:74:f1:cd:25:4c:a8:80:75:20:42:1a:de:c4:
6d:a6:c1:6a:9d:81:11:9c:02:f9:1b:4e:27:27:e5:c1:7c:f8:
52:fb:cc:dc:14:03:bc:88:16:c0:4d:bd:78:15:2c:82:62:86:
7d:c6:13:69:bf:f7:48:f0:3f:0e:e7:a5:91:88:ce:de:9c:3f:
29:5d:93:e3:71:5b:79:47:f7:f4:0e:a2:f2:8f:30:2a:a8:23:
7f:36:ac:c6:26:43:f9:13:0c:0a:54:d0:df:5c:0b:ce:9c:7d:
03:07:c7:d2:1c:a9:78:75:0f:23:4e:5d:2e:4e:ae:33:3e:66:
46:8e:e1:ba:b6:01:40:ec:64:05:24:51:26:20:85:70:f6:a6:
ba:89:48:ed:97:1a:3f:64:70:2b:51:62:d2:07:08:31:58:2f:
fe:e1:dd:75:07:d0:f7:f7:12:3b:be:c2:a7:dd:db:df:cb:bc:
4f:55:e7:20:66:20:e3:9b:07:8c:58:16:ce:bb:f8:f5:0a:b4:
4a:38:b6:17
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUXEqtPNZ6gW59gOZbboGbinVPopAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA2MTAxMTM3MjVaFw0yNzA2MDkxMTQyMjVaMDMxMTAvBgNV
BAMTKDAxRTgzQUY2MDA2NkEyQjgwNjc2MkVDNDQ2RTg5RjVFOUNGMzVCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLv+EOsZhZsVELK/TiWsEBdidc
FdQqQjfRL/qZlCTwRKQ8WwcMbuOH3nWerB0sVe8nLm+7MWv78IZ8UKwrNprhxNHE
joE+cQF8dBlQtL2/kvh5C5EKpWfad3cVEls6rYWYUrA+QDdIYyKiM24JORa7huhI
diyWKxTSmnASj56W5HL5276CFfTyxeBwkX2BCfYYRdSYQUilz9OxaaKv4nBteghR
pw28QQVHh0W+FNGjaNtGtvfo0WIY5/umAADyxqj7HPSDjS/FdVbW2wxB/6bmgOZ3
0caI7y+bR1jKhQI8aqZHHyYyFIiqSvTMuX2WfP3ZcUOhwZUeVQU6X/js1tw3AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUAeg69gBmorgGdi7ERuifXpzzW0swHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMTJl
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATtR
CDANBgkqhkiG9w0BAQsFAAOCAQEArl8szmJcgeDUiZvos1eYCHUPOCE+Fed11yln
2pOmNoI0XdDFfTFOTQyZHnkgx3EmVPPnHImSxXDQLot08c0lTKiAdSBCGt7EbabB
ap2BEZwC+RtOJyflwXz4UvvM3BQDvIgWwE29eBUsgmKGfcYTab/3SPA/DuelkYjO
3pw/KV2T43FbeUf39A6i8o8wKqgjfzasxiZD+RMMClTQ31wLzpx9AwfH0hypeHUP
I05dLk6uMz5mRo7hurYBQOxkBSRRJiCFcPamuolI7ZcaP2RwK1Fi0gcIMVgv/uHd
dQfQ9/cSO77Cp93b38u8T1XnIGYg45sHjFgWzrv49Qq0Sji2Fw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:25 2026 by rpki-client