
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32342d3234203d3e2034383337.roa
File: 35392e38312e38322e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: eQ3Jtv03F98JJCLtllb1nWmzn0RGSX4zo9/YK2EkkNw=
Subject key identifier: 0B:A1:C6:A4:32:CD:29:F0:66:15:1E:52:5E:86:63:1D:7E:45:D3:CF
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 602141F13F38779CE50C5FFE35A9969BB761E6BB
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:41:36 +0000
ROA not before: Wed 10 Jun 2026 11:36:36 +0000
ROA not after: Wed 09 Jun 2027 11:41:36 +0000
asID: 4837
IP address blocks: 59.81.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:21:41:f1:3f:38:77:9c:e5:0c:5f:fe:35:a9:96:9b:b7:61:e6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:36:36 2026 GMT
Not After : Jun 9 11:41:36 2027 GMT
Subject: CN=0BA1C6A432CD29F066151E525E86631D7E45D3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:a7:06:ad:95:b9:0e:de:ab:4d:93:3a:34:
a6:9b:d3:da:e0:d0:e8:4c:47:e9:10:00:cd:90:6f:
40:71:7a:a2:b1:6f:6f:3c:85:e8:55:c4:10:96:7b:
8c:cb:88:a3:27:b8:09:16:0d:fa:86:87:2d:da:39:
7d:65:2e:49:0a:66:cb:5d:ca:b8:cf:97:18:87:e7:
0a:56:cd:19:e4:2a:83:d2:c1:95:61:cc:37:15:0f:
03:a5:cf:3c:e8:a8:a5:b6:bb:04:c4:cb:a1:87:8b:
b2:15:af:31:3e:0e:39:25:b1:4f:bb:60:a0:97:14:
9b:5c:06:cc:fc:1c:09:44:4f:9a:a4:37:10:00:a3:
f0:9f:28:2a:16:56:a0:cc:2d:b2:96:23:82:ab:8b:
a4:8b:3b:d9:7e:d4:af:bf:0c:83:d0:24:4f:02:ca:
4a:87:5f:f2:25:0a:8d:aa:22:d8:b7:78:05:73:f5:
65:4a:e9:eb:f5:ed:81:00:c9:8a:6d:10:52:2c:3c:
60:f2:77:ad:e2:bf:20:ba:0b:37:b0:c1:47:fd:c2:
54:2c:74:02:9f:d1:e5:2e:ee:59:aa:c5:7a:17:b4:
54:9f:a2:90:21:ee:fb:83:3c:f7:42:a5:e9:21:22:
aa:8e:01:0c:c3:6c:4f:97:2e:a9:20:23:d8:cc:c2:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:C6:A4:32:CD:29:F0:66:15:1E:52:5E:86:63:1D:7E:45:D3:CF
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38322e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.82.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d1:bf:8d:84:0c:21:7a:0c:f9:81:b4:bc:bb:ba:2a:11:72:
20:ba:fc:ad:af:9a:a3:d2:fd:b4:e8:3b:38:b9:a1:74:0f:8c:
3d:bd:53:38:8f:41:2f:7b:d1:1a:5f:e2:77:9f:31:59:8d:1d:
9f:05:ca:af:b7:51:aa:8c:85:8a:f9:dd:89:21:05:73:21:3c:
31:00:8c:22:20:75:57:f5:bf:58:60:67:f7:c8:44:93:29:24:
62:2a:40:71:86:f2:a6:01:45:1b:41:12:91:05:14:2e:22:da:
a9:22:5b:67:09:a5:f0:e2:b5:02:c2:30:27:93:17:e1:29:b2:
f5:9f:76:2b:76:cf:09:37:1b:0a:bf:c7:d0:24:6b:a8:30:71:
a5:3b:ff:79:60:a9:4e:b2:35:fe:18:4d:9d:bd:83:e0:ec:05:
58:88:93:d9:61:22:37:28:a0:ac:50:21:bb:e5:61:72:c8:86:
8a:05:83:ef:f4:1e:6d:be:b7:f5:3b:c1:9b:ee:92:16:7c:91:
57:d1:49:bc:6f:d0:84:13:89:9f:8f:09:77:c1:4f:7b:0d:6a:
ee:4c:77:17:01:49:5b:d4:dd:76:ad:9c:5e:4b:70:1b:9e:ef:
23:8e:b8:3e:f5:c0:89:7a:0e:fe:20:de:5b:98:5b:ac:00:c2:
80:5c:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:53 2026 by rpki-client