
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39352e302f32342d3234203d3e2034383337.roa
File: 35392e38312e39352e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: VbAOgDxABThopQ0feFAAplonavT92JfyDrcCVZsk4jE=
Subject key identifier: 26:F2:7D:DA:3C:62:FF:7B:80:98:F2:63:38:39:C8:52:EC:1B:D9:D4
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 59861E8D4DFB1CCC121C361F74F1B4FD89A66316
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39352e302f32342d3234203d3e2034383337.roa
Signing time: Wed 10 Jun 2026 11:39:46 +0000
ROA not before: Wed 10 Jun 2026 11:34:46 +0000
ROA not after: Wed 09 Jun 2027 11:39:46 +0000
asID: 4837
IP address blocks: 59.81.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:86:1e:8d:4d:fb:1c:cc:12:1c:36:1f:74:f1:b4:fd:89:a6:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:34:46 2026 GMT
Not After : Jun 9 11:39:46 2027 GMT
Subject: CN=26F27DDA3C62FF7B8098F2633839C852EC1BD9D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:b8:d7:83:a9:c1:d1:c1:fa:e9:23:80:58:
da:2f:d2:87:20:64:c1:32:36:eb:e6:21:0d:ef:fc:
d0:3b:e0:71:51:09:40:41:e2:1e:a5:29:c8:fe:34:
1d:61:db:fa:9c:7c:4b:19:2a:17:5f:74:d3:db:fe:
b9:02:df:bc:6e:46:67:f8:39:43:02:39:8b:1f:c3:
b1:ee:93:4b:e0:19:67:fd:00:72:b5:fe:0a:3a:15:
72:17:c2:8f:d9:22:de:0f:91:ef:b4:ba:ef:eb:3e:
24:e6:ac:38:5b:08:fb:07:90:3f:25:fb:04:6c:51:
08:9c:89:d0:cf:35:25:bc:27:b7:74:1f:82:46:8e:
dc:9d:72:3b:47:1c:d0:79:25:be:8f:87:36:91:e3:
3a:9e:73:be:e8:3b:17:fa:76:ae:4e:83:de:97:e6:
4e:cd:5b:c6:81:b0:63:a5:29:a0:1e:96:2c:7a:8f:
94:98:5b:53:a5:ed:dc:c1:b5:3c:5a:1c:85:ef:87:
eb:d6:0d:e7:b7:97:0d:5a:af:49:4e:87:1c:81:a7:
5f:a6:dc:92:47:3e:09:e0:61:c7:e8:43:12:8b:d2:
cf:9b:ab:2c:19:46:db:26:4c:4f:63:1d:2c:4d:21:
5f:e0:70:71:3b:76:1c:9b:e2:cc:4c:5d:58:44:ed:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F2:7D:DA:3C:62:FF:7B:80:98:F2:63:38:39:C8:52:EC:1B:D9:D4
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e39352e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8f:6e:4e:f8:88:3f:e0:2f:6b:81:2e:7e:8c:78:b8:5b:76:
f2:f3:19:52:59:27:f0:76:be:fb:5f:0c:06:46:c8:1b:84:4b:
c6:52:89:0c:c9:df:c6:4b:65:81:ab:42:f7:84:ed:de:47:71:
56:83:8e:9b:b5:d4:50:dc:ea:4e:45:c1:d7:b1:dc:aa:c5:37:
30:37:79:c4:8d:5f:50:25:0f:50:d1:47:39:bc:08:a7:c4:b5:
b1:72:71:2a:9c:08:c3:a6:6b:f6:84:a1:a8:59:5b:42:51:d0:
3b:bd:e5:75:ab:9d:b8:c0:79:c9:50:40:32:93:b4:22:cd:98:
2c:00:af:fb:80:f1:ad:5c:b8:07:bc:d7:01:36:e0:ed:8c:2c:
43:03:4b:ef:a2:e9:56:77:2b:2b:bf:1a:61:2c:30:69:d3:6a:
51:8a:ef:e4:92:67:56:01:b2:5d:88:62:12:1b:d8:76:1c:53:
9e:24:8a:e2:35:18:93:31:d7:19:d1:db:ce:62:9f:aa:a1:6e:
61:8f:1a:3f:00:89:75:6c:b1:f1:44:68:31:e9:b6:9f:b2:6b:
a2:49:9e:96:3c:dc:dd:05:b5:6c:c7:a8:b3:60:0b:f9:80:85:
92:48:27:af:34:56:81:9e:bc:e4:2b:71:07:9e:04:00:ae:c6:
36:04:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:35 2026 by rpki-client