
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32332d3233203d3e2034383337.roa
File: 35392e38312e38322e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: oe7uXPt0NboWdZfwDzl8iMx8RhSdyj8dBD7KgsXB0SA=
Subject key identifier: 09:82:D0:A1:2B:16:F7:0F:B1:36:1B:C5:D0:6C:E7:8C:B9:F8:D5:74
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 463D674574E03BE24C6F911EC20B753AE5BB65F2
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32332d3233203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:41:35 +0000
ROA not before: Wed 10 Jun 2026 11:36:35 +0000
ROA not after: Wed 09 Jun 2027 11:41:35 +0000
asID: 4837
IP address blocks: 59.81.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3d:67:45:74:e0:3b:e2:4c:6f:91:1e:c2:0b:75:3a:e5:bb:65:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:36:35 2026 GMT
Not After : Jun 9 11:41:35 2027 GMT
Subject: CN=0982D0A12B16F70FB1361BC5D06CE78CB9F8D574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:9a:95:30:59:e5:c9:9d:86:98:5f:cf:18:
f6:be:a5:d0:d9:ae:01:6c:38:15:51:17:84:f2:69:
00:81:d8:0b:a0:64:2c:70:69:a9:32:c0:c3:4d:24:
04:23:74:a4:0e:f0:65:49:de:f8:f8:ea:db:f7:8e:
b7:a0:9f:c3:0f:d3:99:39:38:7d:5b:e1:b6:e5:61:
fe:31:cc:76:0f:79:99:2f:9d:fc:76:88:54:07:90:
93:96:26:42:6b:47:23:96:b6:04:0e:73:b3:e3:e0:
22:87:ab:d2:36:2a:54:a6:ed:13:06:02:1b:91:20:
ed:c9:8f:0d:c9:28:d0:7d:60:e2:6f:78:1d:2a:a8:
c6:72:f4:cd:96:c4:a8:a2:41:ae:38:90:04:02:58:
20:c7:b4:70:6f:56:46:e7:ab:db:63:2b:b0:51:bc:
5a:96:a2:bb:06:70:03:08:37:13:ae:1a:dd:64:41:
3d:63:09:90:6e:f4:fa:a4:7d:96:7e:d2:8f:23:0a:
70:61:bb:b9:e9:4e:bb:bf:4d:63:ea:66:2a:20:6f:
e5:bb:49:c0:78:c9:78:d4:ff:d9:03:a8:99:68:6f:
b2:fa:83:03:72:0f:95:d4:73:f8:5d:2f:ec:39:67:
0c:37:de:00:67:0b:ca:64:11:71:eb:ea:f9:60:d8:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:D0:A1:2B:16:F7:0F:B1:36:1B:C5:D0:6C:E7:8C:B9:F8:D5:74
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.82.0/23
Signature Algorithm: sha256WithRSAEncryption
78:87:30:ec:c6:1a:ab:52:05:95:3f:b5:62:31:31:12:94:3a:
f3:5a:c9:41:a4:4e:67:a6:94:54:0b:76:52:09:93:73:37:13:
93:2f:36:99:39:b4:f2:a4:04:63:05:34:00:f9:3a:04:af:1a:
2c:a8:aa:6d:c1:7b:e4:26:be:00:aa:7e:d4:b5:a8:08:fb:72:
ec:b1:42:89:e3:b0:e2:ff:b7:e2:fc:a8:c2:9e:63:a9:bb:51:
ce:5d:aa:83:6d:94:c1:22:cc:55:e8:76:e0:96:44:ed:93:59:
b5:01:df:72:20:15:f9:a5:fd:29:56:49:c1:2c:56:59:e8:43:
a8:cd:b2:ae:6c:75:86:24:5a:e9:ae:c7:f1:ba:1b:e9:eb:30:
45:27:a6:67:81:c4:fe:ab:7f:70:ab:de:07:89:26:d7:c2:c3:
da:05:a7:91:50:15:bb:d1:1e:6a:85:08:86:16:ae:06:a9:a5:
d7:72:15:9a:2d:08:50:cb:6e:0b:74:ab:0f:7e:71:23:90:29:
19:09:d9:0f:fa:dd:3d:0a:23:e6:86:c1:fd:c5:f0:b1:79:02:
48:f0:6b:39:af:79:90:8c:94:83:3e:67:08:d3:f0:83:8c:24:
95:0e:97:2e:78:7f:77:8e:cb:7b:c4:a6:b4:15:16:21:e3:4c:
16:8b:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:31 2026 by rpki-client