
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e392e302f32342d3234203d3e2034383337.roa
File: 35392e38312e392e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: TAjVK/J/1AVtz6oabmQzH7bjitkqRjsL+rI/mugqZB4=
Subject key identifier: 25:18:FB:44:28:58:18:DD:5D:2B:55:49:8D:92:3D:DA:01:36:71:05
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 249D9936966B1A194021E67A1AF8104E2F112118
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e392e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:42:25 +0000
ROA not before: Wed 10 Jun 2026 11:37:25 +0000
ROA not after: Wed 09 Jun 2027 11:42:25 +0000
asID: 4837
IP address blocks: 59.81.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9d:99:36:96:6b:1a:19:40:21:e6:7a:1a:f8:10:4e:2f:11:21:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:37:25 2026 GMT
Not After : Jun 9 11:42:25 2027 GMT
Subject: CN=2518FB44285818DD5D2B55498D923DDA01367105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:8e:b7:a0:07:52:fc:6f:22:13:25:a4:db:
3e:8e:06:2b:33:d3:48:1a:e8:b2:80:74:7a:05:82:
2a:68:8d:29:10:26:a7:d3:8a:72:6a:9a:8f:96:32:
78:86:3a:c8:af:37:fb:d4:24:33:dd:d1:25:6c:74:
d8:2f:79:b0:f4:67:e3:6e:27:1b:af:47:c1:af:43:
e4:9b:9c:21:f4:53:ab:b3:f6:e0:58:bd:46:04:47:
58:6e:1c:49:17:6f:3b:a0:08:49:eb:5d:4f:43:0b:
0f:ff:6f:97:b9:90:11:e0:43:15:dd:ba:71:f5:8b:
14:aa:4f:9a:74:af:08:57:ce:51:0d:2a:46:1d:c1:
63:3f:4b:b1:c0:c6:ed:6e:df:41:f2:7f:41:8e:4f:
9c:7a:5a:a9:0e:cb:c4:d3:ef:9c:2d:90:4d:f4:f2:
1c:a2:b5:f7:c4:55:73:36:64:4b:f5:ca:46:f2:f5:
ef:5e:eb:b0:50:92:ef:9e:53:16:43:45:1c:6d:3b:
e9:20:f2:c0:c5:f7:07:9a:32:39:0f:1e:03:60:0d:
4e:00:d4:a5:c4:8d:d1:c7:53:d5:74:95:0f:f8:53:
ed:5e:bf:2d:dc:35:71:2b:27:e8:c0:7b:38:5f:5f:
86:d4:da:86:e5:17:03:f0:bf:6e:07:aa:55:5e:a9:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:FB:44:28:58:18:DD:5D:2B:55:49:8D:92:3D:DA:01:36:71:05
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e392e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:16:eb:65:f5:ce:23:9c:ee:a7:ce:fc:43:ed:31:fd:52:b6:
46:89:b0:d4:9d:af:95:ac:3b:33:82:6e:15:6b:f8:a1:e0:44:
65:00:d0:f4:a1:ef:be:89:37:37:86:17:23:bf:e5:e5:c3:07:
c7:ef:40:5d:a0:a6:cd:7a:1f:87:a1:a1:c1:be:66:f7:55:4b:
91:a4:29:33:11:32:64:b1:15:a3:16:18:7a:3c:e8:84:27:a1:
7f:53:fd:51:55:5c:52:86:00:d2:1c:7a:14:58:70:dc:3e:e7:
3d:6d:3e:87:73:ee:02:0b:4a:90:ef:76:bb:b7:13:e2:c6:ac:
b6:9b:98:fb:98:c8:e9:93:f8:a1:01:66:d3:60:64:ef:0f:c2:
b5:fa:0d:bb:74:c8:ba:5a:d1:2b:03:9a:84:6c:ef:c7:e8:ce:
59:30:5d:5e:79:a8:82:eb:e7:8b:a3:f1:ef:4c:b6:76:2a:13:
57:28:0a:9d:e2:05:7b:79:72:39:28:f6:77:25:a5:9d:a0:c6:
02:d9:a8:b3:83:0b:36:99:a5:81:61:a8:94:59:36:37:f5:70:
75:3c:43:f7:1e:23:da:fd:f1:b1:fc:de:44:e8:06:24:f4:31:
42:9d:ac:36:06:1c:dc:41:72:2b:18:48:96:a8:29:23:7b:d8:
72:e7:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:30 2026 by rpki-client