
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39342e302f32332d3233203d3e2034383337.roa
File: 35392e38312e39342e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: GDgkGF9NvlpL9WdJBgGNdCk0UoTXw3QLXJ4nhJH8ZzY=
Subject key identifier: 4C:BF:32:AA:23:CB:22:2F:FA:09:4B:B1:95:68:CA:EC:26:B4:B1:97
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 4A2B9AC010DC977F1A2E67AE4403E858FAABF032
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39342e302f32332d3233203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:39:46 +0000
ROA not before: Wed 10 Jun 2026 11:34:46 +0000
ROA not after: Wed 09 Jun 2027 11:39:46 +0000
asID: 4837
IP address blocks: 59.81.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:2b:9a:c0:10:dc:97:7f:1a:2e:67:ae:44:03:e8:58:fa:ab:f0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:34:46 2026 GMT
Not After : Jun 9 11:39:46 2027 GMT
Subject: CN=4CBF32AA23CB222FFA094BB19568CAEC26B4B197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:b3:e8:87:e4:7a:df:a0:64:c1:0d:da:dc:
7e:84:f4:54:72:85:16:7a:95:78:7b:8a:08:14:3b:
a6:52:2b:38:2a:d8:bc:1e:f1:56:1b:fa:53:cb:e5:
5f:28:60:c6:ee:0f:7f:45:df:4d:86:a3:5c:50:4b:
18:56:ad:d6:b4:d1:4b:66:cb:b3:d7:d8:fd:d2:78:
d7:5d:50:18:d6:e3:b1:29:16:00:33:71:cd:b7:e9:
b7:9e:8b:2e:30:1f:18:3a:5e:c2:48:89:d8:8f:39:
a6:51:27:3a:c8:a1:61:b0:26:c0:6d:ea:39:c2:e8:
ed:89:1a:fb:a7:da:23:33:b4:a4:a6:c4:1f:ad:c7:
ec:d0:0b:3b:2b:74:b1:c5:6a:53:e5:d0:59:18:7a:
76:03:39:93:78:11:54:29:5e:0b:14:54:a7:94:f1:
2a:36:6e:63:80:d8:ba:21:6d:fd:df:5e:32:6e:19:
8b:3e:a1:cd:d6:e6:b6:2b:c8:84:72:ef:e0:96:1d:
db:42:98:29:fe:bf:35:29:9e:23:1e:50:d7:1f:22:
a5:f9:86:ab:1b:f7:30:dc:f7:ee:99:e1:ca:2a:3d:
a0:bb:90:ab:18:3c:97:9e:62:19:7b:54:bb:9c:d5:
57:b0:9b:21:72:31:d8:ea:1f:1e:e8:9d:df:13:c7:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:32:AA:23:CB:22:2F:FA:09:4B:B1:95:68:CA:EC:26:B4:B1:97
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39342e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.94.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:01:6e:38:a0:a3:9d:b7:86:58:79:5b:1a:33:67:e8:ca:c3:
4c:ed:7e:b9:1b:8a:07:d2:53:05:77:e3:16:5e:ad:aa:f1:fc:
73:64:4f:a9:91:43:b0:ac:c1:d6:e9:c0:b2:5d:b5:ce:3c:75:
5e:04:6d:7b:2f:fe:d5:d5:7d:f7:ce:96:03:95:47:d0:30:cb:
fb:7d:1f:82:63:5f:d2:57:02:be:78:55:a8:f9:97:f2:e2:e0:
b6:cd:3f:0c:73:c7:3c:b8:60:41:e9:08:bf:6e:29:b6:d7:a7:
4c:cc:52:15:d3:58:a6:b2:98:bb:ac:65:28:52:0b:e9:1d:95:
77:8a:62:25:24:b7:aa:d6:3e:f0:42:7f:0f:64:17:0d:ae:c3:
ad:9a:07:ce:89:b9:65:3b:42:38:db:49:98:cb:82:a9:3a:e1:
3e:5a:9a:45:43:16:26:f6:9f:d1:72:69:0c:55:61:4e:71:09:
00:86:64:25:fa:7f:7c:f7:b0:91:5b:7c:e3:55:b6:8a:a8:7a:
ab:ca:88:f8:60:3f:29:65:df:53:46:a6:d4:1a:36:2a:41:78:
75:1c:49:5e:80:3b:2c:bd:1b:2d:28:e3:c0:47:64:b8:b1:de:
cf:3a:77:8f:fa:cf:0c:28:66:13:37:2b:d7:27:51:58:65:16:
c1:37:b7:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUSiuawBDcl38aLmeuRAPoWPqr8DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA2MTAxMTM0NDZaFw0yNzA2MDkxMTM5NDZaMDMxMTAvBgNV
BAMTKDRDQkYzMkFBMjNDQjIyMkZGQTA5NEJCMTk1NjhDQUVDMjZCNEIxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpO7Poh+R636BkwQ3a3H6E9FRy
hRZ6lXh7iggUO6ZSKzgq2Lwe8VYb+lPL5V8oYMbuD39F302Go1xQSxhWrda00Utm
y7PX2P3SeNddUBjW47EpFgAzcc236beeiy4wHxg6XsJIidiPOaZRJzrIoWGwJsBt
6jnC6O2JGvun2iMztKSmxB+tx+zQCzsrdLHFalPl0FkYenYDOZN4EVQpXgsUVKeU
8So2bmOA2Lohbf3fXjJuGYs+oc3W5rYryIRy7+CWHdtCmCn+vzUpniMeUNcfIqX5
hqsb9zDc9+6Z4coqPaC7kKsYPJeeYhl7VLuc1VewmyFyMdjqHx7ond8Tx0y3AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUTL8yqiPLIi/6CUuxlWjK7Ca0sZcwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMTJl
MzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
O1FeMA0GCSqGSIb3DQEBCwUAA4IBAQCbAW44oKOdt4ZYeVsaM2foysNM7X65G4oH
0lMFd+MWXq2q8fxzZE+pkUOwrMHW6cCyXbXOPHVeBG17L/7V1X33zpYDlUfQMMv7
fR+CY1/SVwK+eFWo+Zfy4uC2zT8Mc8c8uGBB6Qi/bim216dMzFIV01imspi7rGUo
UgvpHZV3imIlJLeq1j7wQn8PZBcNrsOtmgfOibllO0I420mYy4KpOuE+WppFQxYm
9p/RcmkMVWFOcQkAhmQl+n9897CRW3zjVbaKqHqryoj4YD8pZd9TRqbUGjYqQXh1
HElegDssvRstKOPAR2S4sd7POneP+s8MKGYTNyvXJ1FYZRbBN7ei
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:24 2026 by rpki-client