
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3231382e302f32342d3234203d3e20313430373136.roa
File: 35392e38332e3231382e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier: l+NV9Osb1cRXi7MUZPjH3qKEhr47WBcNasu5Dc/1STo=
Subject key identifier: 3D:E6:A5:69:4E:BD:B0:E3:A2:BA:6A:1C:21:0D:CA:DC:AE:19:9B:FF
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 44496D2D8448C8BB84EB009D455148B0CC682874
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3231382e302f32342d3234203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:21:55 +0000
ROA not before: Wed 03 Jun 2026 06:16:55 +0000
ROA not after: Wed 02 Jun 2027 06:21:55 +0000
asID: 140716
IP address blocks: 59.83.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:49:6d:2d:84:48:c8:bb:84:eb:00:9d:45:51:48:b0:cc:68:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:16:55 2026 GMT
Not After : Jun 2 06:21:55 2027 GMT
Subject: CN=3DE6A5694EBDB0E3A2BA6A1C210DCADCAE199BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:78:a7:3c:c3:33:a8:8b:44:85:fa:99:fe:83:
c7:20:63:68:c1:05:c2:8a:9f:6e:a5:83:61:36:77:
43:f9:cf:8d:b5:75:00:6f:1a:7d:54:51:cb:06:a3:
64:30:86:c4:23:44:b7:ff:23:d7:92:70:a1:2c:f3:
a0:79:b1:c2:c6:96:ce:06:1d:66:43:13:f8:40:8b:
d9:27:07:39:32:52:49:49:c5:30:bd:48:7f:93:57:
27:bf:8b:82:a1:c5:51:60:c0:61:b3:7a:aa:9d:2e:
28:af:71:af:a1:06:8c:f3:3f:95:e9:39:f4:86:f4:
59:4b:f8:c2:de:cc:fb:94:dd:79:4e:88:95:69:d8:
82:fe:48:24:29:57:b0:b4:28:f9:3e:be:68:03:74:
bb:fc:e8:22:2a:4f:4b:bf:9d:66:89:59:ca:7e:4d:
5d:7c:43:e3:75:32:eb:be:e6:74:94:52:ff:02:95:
4e:14:30:33:7e:24:05:91:a5:10:9d:64:72:15:7a:
ee:fb:73:f5:fd:75:4a:49:d9:9c:53:ee:80:15:c9:
f9:b2:00:46:e7:39:e2:76:db:23:81:3d:64:a3:28:
9a:ab:39:56:60:37:6b:02:2f:49:e7:a5:30:41:8b:
58:a3:0b:95:3b:46:7b:f7:c8:05:40:43:a5:de:5a:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E6:A5:69:4E:BD:B0:E3:A2:BA:6A:1C:21:0D:CA:DC:AE:19:9B:FF
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3231382e302f32342d3234203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.83.218.0/24
Signature Algorithm: sha256WithRSAEncryption
be:63:d8:cf:22:5f:47:af:68:57:88:62:12:12:3b:6f:35:31:
34:7e:60:fc:b6:75:48:e6:52:00:c6:6d:db:15:b3:02:ca:02:
9f:ee:72:62:6c:e8:24:37:4d:81:f1:d6:4c:95:9c:c0:0d:3c:
ab:03:8e:03:b7:59:04:56:48:89:a1:aa:4f:aa:99:3e:10:20:
68:95:8d:9d:a6:39:46:f4:8d:31:5e:9e:4b:59:21:a4:15:e9:
36:ee:7a:62:1a:70:2b:cb:37:ba:cf:48:ba:0b:f6:8f:96:b5:
49:b4:98:b5:b7:04:e8:fb:45:09:3d:21:9e:df:36:d6:f5:5f:
6e:fb:aa:a7:65:a8:03:a8:a1:38:b7:3c:3b:94:85:5c:19:eb:
e7:49:e7:69:bb:8a:86:e4:08:8f:0e:d7:98:58:00:72:db:c8:
c6:9d:3d:fb:ea:19:32:66:cf:ee:72:26:43:1b:c8:b9:58:d2:
42:a6:50:94:ed:82:5b:02:d5:5d:a0:30:f2:0c:69:5b:fb:41:
cb:15:a2:ce:b0:d0:01:1f:f3:2f:b3:b2:db:cc:00:71:9e:59:
4f:57:34:5c:96:b4:a6:b2:71:0c:df:7e:bf:8b:82:1a:dc:9d:
d9:04:38:32:2b:4f:fd:93:2d:ae:7a:b0:33:dc:5b:3b:e2:2f:
ac:75:1d:77
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUREltLYRIyLuE6wCdRVFIsMxoKHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjE2NTVaFw0yNzA2MDIwNjIxNTVaMDMxMTAvBgNV
BAMTKDNERTZBNTY5NEVCREIwRTNBMkJBNkExQzIxMERDQURDQUUxOTlCRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyeKc8wzOoi0SF+pn+g8cgY2jB
BcKKn26lg2E2d0P5z421dQBvGn1UUcsGo2QwhsQjRLf/I9eScKEs86B5scLGls4G
HWZDE/hAi9knBzkyUklJxTC9SH+TVye/i4KhxVFgwGGzeqqdLiivca+hBozzP5Xp
OfSG9FlL+MLezPuU3XlOiJVp2IL+SCQpV7C0KPk+vmgDdLv86CIqT0u/nWaJWcp+
TV18Q+N1Muu+5nSUUv8ClU4UMDN+JAWRpRCdZHIVeu77c/X9dUpJ2ZxT7oAVyfmy
AEbnOeJ22yOBPWSjKJqrOVZgN2sCL0nnpTBBi1ijC5U7Rnv3yAVAQ6XeWgmfAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUPealaU69sOOiumocIQ3K3K4Zm/8wHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzM1MzkyZTM4MzMy
ZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM3MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEADtT2jANBgkqhkiG9w0BAQsFAAOCAQEAvmPYzyJfR69oV4hiEhI7bzUx
NH5g/LZ1SOZSAMZt2xWzAsoCn+5yYmzoJDdNgfHWTJWcwA08qwOOA7dZBFZIiaGq
T6qZPhAgaJWNnaY5RvSNMV6eS1khpBXpNu56YhpwK8s3us9Iugv2j5a1SbSYtbcE
6PtFCT0hnt821vVfbvuqp2WoA6ihOLc8O5SFXBnr50nnabuKhuQIjw7XmFgActvI
xp09++oZMmbP7nImQxvIuVjSQqZQlO2CWwLVXaAw8gxpW/tByxWizrDQAR/zL7Oy
28wAcZ5ZT1c0XJa0prJxDN9+v4uCGtyd2QQ4MitP/ZMtrnqwM9xbO+IvrHUddw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:58 2026 by rpki-client