
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38332e302f32342d3234203d3e2034383337.roa
File: 35392e38312e38332e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: Mng/0DEiGiQt8UaOItwoNZlGW7Af5qDIKEbRPxk6s8Q=
Subject key identifier: 9A:11:96:F9:B1:80:99:5B:4D:41:92:BB:18:83:49:F2:E5:18:B6:12
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 4561A1C06E57A9B69DE8FDF64A6A4FDCCD65EFCF
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38332e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:41:35 +0000
ROA not before: Wed 10 Jun 2026 11:36:35 +0000
ROA not after: Wed 09 Jun 2027 11:41:35 +0000
asID: 4837
IP address blocks: 59.81.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:61:a1:c0:6e:57:a9:b6:9d:e8:fd:f6:4a:6a:4f:dc:cd:65:ef:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:36:35 2026 GMT
Not After : Jun 9 11:41:35 2027 GMT
Subject: CN=9A1196F9B180995B4D4192BB188349F2E518B612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:e5:e4:90:7d:37:31:e5:40:91:84:01:b5:
d7:51:d7:5a:2d:9f:c2:2c:72:c6:11:d5:81:02:57:
3f:ba:dc:34:e6:c1:6e:14:3c:ba:0d:c2:29:89:6e:
ef:0b:53:cf:c5:e0:b8:f9:ee:03:1c:28:55:55:39:
95:bd:4f:10:e3:70:36:6e:99:93:b2:2b:80:4c:3f:
0a:3f:50:e6:ea:21:5f:a4:e1:07:78:15:4c:fc:d7:
0e:49:99:fb:9b:a8:e1:02:52:e9:7a:a1:53:ed:d3:
32:92:15:15:dd:b6:be:c6:60:bb:0b:3e:ef:d4:8f:
91:52:67:51:60:fd:eb:ef:65:20:62:7c:d5:d9:43:
f8:36:d1:50:76:a3:b8:3a:8c:d8:ec:be:ee:66:57:
01:4a:97:15:21:d1:da:0e:af:2d:6a:b9:c2:0c:2c:
ea:28:0b:58:ff:ae:00:19:cf:b2:b6:46:b8:d2:67:
1a:a5:26:2e:ca:98:2e:71:57:1d:b7:c7:ab:e4:fe:
75:9a:f8:63:72:5e:22:17:92:cc:3e:24:4d:22:b3:
ec:36:c7:38:b4:22:54:d3:4b:e5:bf:37:fb:b4:27:
9f:c6:27:a6:ab:d6:db:93:c1:86:1c:14:6e:9e:df:
af:6a:cf:fe:9f:b8:a6:b7:e4:86:bb:2c:d3:c4:98:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:96:F9:B1:80:99:5B:4D:41:92:BB:18:83:49:F2:E5:18:B6:12
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e38332e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.83.0/24
Signature Algorithm: sha256WithRSAEncryption
32:03:62:33:0a:04:26:93:fc:fe:6d:55:85:00:ce:d2:c1:6a:
0c:58:bb:f4:56:2d:74:1c:4b:5c:32:de:c9:46:5c:70:52:34:
9b:e5:df:3b:9d:d4:68:93:a6:c8:78:38:76:3d:87:eb:13:b0:
8b:76:cf:86:87:12:4d:aa:77:15:61:4d:fa:b4:9d:07:4b:a2:
cb:76:d1:40:4d:00:cf:0a:bc:cd:0a:7f:ee:21:b5:a6:bb:69:
e4:51:e8:cd:eb:81:e0:66:52:c7:cf:8c:04:90:5c:70:bf:b7:
07:6d:f5:7e:ae:88:e3:72:c8:17:be:25:00:e7:92:ab:06:12:
f1:e6:c3:5f:e1:d2:e5:7a:8c:0c:cc:e6:b9:71:9d:dd:ef:5a:
f2:e1:ff:6f:64:9b:dd:df:89:23:59:70:af:fd:c6:1e:26:c9:
ca:6b:46:e0:1f:39:0b:68:1e:d4:fd:b7:53:d4:02:8d:1d:0d:
ba:48:38:6c:7d:98:4f:e5:b6:ef:b4:50:f8:dc:07:21:3e:39:
95:c6:0f:e0:f5:d0:28:2d:a0:b4:78:94:5d:11:89:82:62:57:
ce:13:84:f2:5f:30:cc:5c:7c:5e:c9:63:66:09:b9:50:20:62:
fc:df:69:7f:a1:f0:f8:3c:30:2f:f0:36:13:c2:d0:b0:23:8a:
e8:57:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:35 2026 by rpki-client