
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32342d3234203d3e2034383337.roa
File: 35392e38312e382e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: GHY+0AFesSpRhUUZxWE9mtQgdQOaKR/NEp5gCzDTWgQ=
Subject key identifier: F4:F1:D3:53:F2:3F:D4:A4:FD:7A:B4:ED:EC:A0:39:1F:3F:CA:9D:A5
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 3A586D27823CEB63C578D1BC6FE2E1DD16714F58
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:42:25 +0000
ROA not before: Wed 10 Jun 2026 11:37:25 +0000
ROA not after: Wed 09 Jun 2027 11:42:25 +0000
asID: 4837
IP address blocks: 59.81.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:58:6d:27:82:3c:eb:63:c5:78:d1:bc:6f:e2:e1:dd:16:71:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:37:25 2026 GMT
Not After : Jun 9 11:42:25 2027 GMT
Subject: CN=F4F1D353F23FD4A4FD7AB4EDECA0391F3FCA9DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:dc:1d:1e:e0:77:97:43:9c:e2:ab:36:84:
9a:da:4d:b3:19:a8:2a:90:ad:e3:69:37:12:dc:c2:
1c:01:d0:29:67:59:ee:fc:5c:5f:55:f4:de:eb:68:
9e:81:48:85:2a:4e:63:a3:ea:08:41:e2:d9:ba:b2:
59:fc:2e:20:1c:44:c8:56:9a:d5:86:cf:9f:fc:a0:
3c:e6:de:34:4c:08:d3:c7:c8:3c:e0:34:ba:8e:51:
13:cb:b3:74:e0:b8:32:0e:6c:e9:37:3c:46:cf:94:
a3:ff:52:94:2f:b9:bc:86:32:95:19:e4:2f:f8:6c:
67:23:1b:ed:03:f4:7e:95:39:37:62:e7:f7:93:98:
6b:d7:ee:16:14:fe:1e:95:6d:06:70:78:e8:c9:0d:
d2:ad:ac:ef:78:b9:5a:26:c1:a1:cf:9b:d6:cf:b8:
a8:53:2e:d6:e8:81:98:34:92:96:ac:cf:2d:e0:ee:
0e:28:bb:ed:46:dd:53:9c:b3:ad:1e:5a:b9:a8:3e:
58:e4:55:ca:77:26:64:07:66:67:c5:ad:78:b0:97:
db:46:ae:f2:2d:a9:1f:48:2e:6d:12:ef:45:0f:55:
e9:d5:5c:0d:cb:dc:67:3d:9d:83:a9:01:e2:5a:5e:
09:af:99:ea:eb:94:95:b3:2e:31:d8:eb:1b:17:2d:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:D3:53:F2:3F:D4:A4:FD:7A:B4:ED:EC:A0:39:1F:3F:CA:9D:A5
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e382e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:43:1f:02:55:98:a0:db:25:b4:14:3b:b3:9c:e2:a6:d8:e1:
39:b3:ec:e0:59:fb:54:c2:5d:e8:33:4b:5a:6c:83:f6:50:7f:
52:d4:1b:d7:f5:5a:49:99:d5:d4:d5:db:99:3c:88:b4:4e:e6:
41:ac:00:a2:de:b6:0c:81:5b:76:5c:0b:bb:0b:29:bf:74:1a:
61:dd:03:42:bb:6e:74:21:1c:be:39:08:1b:f9:eb:ad:b8:f0:
a7:52:50:b5:c6:38:0f:80:98:f0:7e:a0:07:93:26:86:1a:31:
56:6d:bc:14:7f:9e:09:8c:80:a0:69:dc:e6:0f:c4:d3:3e:6d:
1a:85:f9:c9:1c:ea:a7:f4:54:a4:b8:a3:ed:e1:5a:3e:06:78:
38:84:4c:e2:43:75:26:a1:ff:c8:c6:ca:9c:b5:e1:61:e6:04:
0e:b1:49:da:2f:53:55:a2:62:70:ed:c0:8a:56:dd:55:16:1b:
88:35:ee:18:73:05:7c:ff:ce:f2:0f:0e:36:86:a3:61:f1:2d:
1c:44:96:e2:9f:99:71:48:8c:fa:eb:19:da:39:43:29:08:66:
75:76:81:5b:06:63:e1:24:64:45:34:83:1d:1f:5b:59:4f:c4:
a5:8e:54:7a:07:ea:ca:25:27:91:58:86:ab:c1:b0:a8:7d:2c:
52:c9:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client