
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3139322e302f31392d3139203d3e2034383337.roa
File: 35392e38332e3139322e302f31392d3139203d3e2034383337.roa (raw, json)
Hash identifier: e1TkPgQdUwZsdy77LDTJSf7yk4gZ0lz6jCh7irNsXko=
Subject key identifier: 59:CB:8B:93:C2:3E:1D:A5:DA:9C:C6:91:1C:F3:E6:E8:D5:62:1F:43
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 22A58D8F9419682BEAB1282B7160F6A8AAEE39F1
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3139322e302f31392d3139203d3e2034383337.roa
Signing time: Thu 04 Jun 2026 07:16:48 +0000
ROA not before: Thu 04 Jun 2026 07:11:48 +0000
ROA not after: Thu 03 Jun 2027 07:16:48 +0000
asID: 4837
IP address blocks: 59.83.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a5:8d:8f:94:19:68:2b:ea:b1:28:2b:71:60:f6:a8:aa:ee:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 4 07:11:48 2026 GMT
Not After : Jun 3 07:16:48 2027 GMT
Subject: CN=59CB8B93C23E1DA5DA9CC6911CF3E6E8D5621F43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:a5:08:e5:2e:21:3c:c7:f3:cd:b7:31:a5:
ad:25:06:cf:81:d4:e1:79:71:25:38:8e:23:5b:e1:
87:db:84:cb:79:60:0a:6b:fd:5b:97:a2:06:75:0b:
6a:d5:d3:5c:a5:bf:2e:be:71:ea:14:29:c2:b2:d6:
95:9f:32:8b:53:1c:b1:64:c5:bd:25:2d:f0:a7:34:
fa:57:86:66:48:6b:3f:50:05:62:b8:ae:41:d8:07:
9a:ca:13:1b:98:19:a9:d2:39:30:89:b6:65:0c:31:
24:44:35:6c:ea:de:b7:2d:16:31:9f:65:39:ab:18:
39:9e:bb:fb:85:c1:60:1a:f1:36:02:31:db:ed:c5:
54:b9:a3:de:92:bd:a8:05:a0:ef:5c:8e:a0:29:55:
fd:fd:1e:a9:30:8b:33:50:f4:d5:8f:d4:ee:e2:0a:
60:d6:85:24:97:e7:6c:57:77:72:27:40:7a:04:6c:
17:f2:57:90:09:41:28:ab:60:c7:03:9a:c6:c2:4f:
24:11:a8:6f:e3:b3:a8:c5:bb:56:c4:a9:2d:9b:26:
f6:92:14:64:3d:97:42:1c:85:fa:56:e5:e0:8f:61:
75:99:a8:f7:95:8f:6a:84:56:c6:8b:51:42:7f:2a:
a8:10:49:b9:a9:b5:ad:09:c6:49:3a:2a:31:4c:59:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:8B:93:C2:3E:1D:A5:DA:9C:C6:91:1C:F3:E6:E8:D5:62:1F:43
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3139322e302f31392d3139203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.83.192.0/19
Signature Algorithm: sha256WithRSAEncryption
18:ad:32:4d:6d:7c:a0:41:fe:16:10:ca:34:1a:fb:88:51:1d:
99:60:0d:ea:b8:bd:f3:ee:1c:da:19:1a:91:90:f9:7d:1c:9d:
47:8d:05:5f:65:d6:88:29:cc:19:e0:a8:62:81:d9:26:1d:fb:
7d:31:98:d0:2e:69:25:f1:bf:f7:eb:91:14:20:03:08:2b:6f:
35:76:31:74:b1:19:aa:25:21:7e:b4:ce:6d:30:16:00:27:52:
73:f9:42:12:41:28:7d:a8:45:bf:47:90:a5:72:cf:72:30:3a:
46:fa:29:7f:69:9e:2d:79:bb:15:43:97:ff:16:e8:0f:42:fc:
92:c4:3e:82:54:6f:df:43:96:32:cd:0e:18:8d:61:32:41:f9:
3c:99:75:a0:1f:58:1c:2f:ee:1f:bc:66:00:e4:f3:d8:cd:1a:
52:49:e1:9d:60:eb:26:7d:12:4a:bd:fd:99:02:be:17:c7:3d:
23:b3:bc:da:1f:e3:c4:50:48:83:e3:c6:70:fb:27:6c:3f:fe:
01:00:b0:be:38:99:b0:af:be:d9:9a:fc:80:08:ad:ca:6d:6a:
3d:ec:a2:a7:19:d8:96:02:c7:79:56:e9:04:08:ef:9b:2d:ae:
28:0f:01:e5:4d:08:80:4f:e1:d6:09:46:95:ed:15:0a:7d:5c:
65:43:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:23 2026 by rpki-client