
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3233302e302f32342d3234203d3e20313430373136.roa
File: 35392e38332e3233302e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier: mouyHjqTVOf0eW1JxY+DlPmj/tpI8liBXd8zn/dBYfg=
Subject key identifier: 28:46:A5:A5:0C:D1:AD:45:3D:A3:AE:9C:76:78:C1:74:03:B2:02:7A
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 051597A8B76AE663D2F8B365761D6B75CAC59298
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3233302e302f32342d3234203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:22:51 +0000
ROA not before: Wed 03 Jun 2026 06:17:51 +0000
ROA not after: Wed 02 Jun 2027 06:22:51 +0000
asID: 140716
IP address blocks: 59.83.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:15:97:a8:b7:6a:e6:63:d2:f8:b3:65:76:1d:6b:75:ca:c5:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:17:51 2026 GMT
Not After : Jun 2 06:22:51 2027 GMT
Subject: CN=2846A5A50CD1AD453DA3AE9C7678C17403B2027A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:8b:7a:ed:ca:4a:ab:88:42:cf:36:2e:c7:
91:e9:68:df:e8:04:f6:da:c5:06:df:bd:61:87:d1:
14:23:63:3b:1f:f2:2c:b6:7d:3c:bd:69:46:4d:ae:
93:07:7b:ba:1b:5a:f9:86:0e:08:8a:3f:46:ca:e7:
7f:48:27:6a:63:03:1e:d3:6d:7c:8f:26:f6:2c:eb:
7a:3b:c3:f3:8f:3a:64:c1:77:c5:7d:21:f6:7e:e0:
ce:12:b0:4d:06:80:32:d5:57:54:6c:b2:e9:ef:ae:
e6:77:b3:f7:c4:30:04:b9:09:30:09:7c:6f:9e:1a:
65:d2:71:f6:ac:1c:aa:db:b7:a0:8d:7b:d9:15:61:
01:9b:47:16:81:78:c6:2d:71:35:5f:d3:a9:ad:fb:
ac:f8:92:4f:76:a5:a1:61:74:b2:3a:8c:24:d9:6e:
7b:1b:ff:52:0a:f6:60:38:4a:5a:09:6f:1d:3e:d7:
c2:00:91:b6:db:3f:42:06:4c:86:99:9e:6a:77:1f:
09:23:0f:bc:70:6e:c3:b8:ab:ae:8a:13:c9:46:9c:
bb:0e:fb:41:33:f8:30:dc:28:54:5e:33:83:48:bf:
11:ee:ef:f2:69:e3:71:bf:03:96:55:07:07:98:82:
ff:be:09:ae:a0:90:ba:99:c9:ca:62:68:fe:5d:5b:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:46:A5:A5:0C:D1:AD:45:3D:A3:AE:9C:76:78:C1:74:03:B2:02:7A
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/35392e38332e3233302e302f32342d3234203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:86:3a:ab:06:df:16:e8:3b:7c:9c:fb:f6:95:cb:f0:82:cf:
97:8a:cf:8b:82:21:68:f7:58:ae:77:18:bf:1e:9c:a2:ef:a9:
92:82:be:f7:a5:48:31:59:7f:58:d0:5c:e6:5e:c3:e6:03:22:
ea:e1:68:e7:02:0e:b4:29:5b:f1:34:00:49:e5:5d:53:b0:97:
5b:30:04:be:2a:a8:6c:e8:8e:2b:84:f3:c2:24:83:34:75:c7:
e3:50:7b:5e:21:52:d9:13:86:9d:42:39:63:05:3f:42:df:b7:
07:95:5b:51:b9:6a:5a:9e:ac:21:72:b7:3c:c4:3a:33:fe:b3:
22:64:09:ef:3e:7a:1a:7c:09:06:35:1a:65:30:39:b8:d1:84:
04:7b:9d:09:ca:4c:33:46:0a:6d:1a:05:88:f7:55:52:a2:84:
35:71:24:70:b1:0b:0c:38:11:1a:28:f8:02:cc:67:a2:11:86:
93:75:6c:8d:57:a7:87:d1:7a:c7:0f:6c:78:50:42:5d:60:fa:
14:2c:06:3f:66:97:bd:06:e1:e9:28:7d:32:04:c2:df:57:23:
b5:2d:8e:6f:ee:7d:6e:e6:27:b3:22:e7:a1:7d:d2:19:b2:e9:
56:b3:a8:fe:c8:92:f0:d2:08:70:65:81:52:eb:3c:3a:20:33:
06:ea:c7:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:59 2026 by rpki-client