
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095917566238392322/0/35392e3135332e3133362e302f32322d3232203d3e2030.roa
File: 35392e3135332e3133362e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: Akc4Wv2MwD9SISrtJFKeSxsyastNqtHvJxyrpkR1FEQ=
Subject key identifier: 49:DC:11:26:3C:33:D5:31:4F:EE:87:BA:59:E9:50:00:87:6B:C7:3A
Certificate issuer: /CN=55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894
Certificate serial: 2B10A5AD21868C0A02B64FFFD1449709BA77022E
Authority key identifier: 55:98:3C:77:C9:5B:9F:0B:7F:1F:AE:23:1E:BB:1C:BC:CD:C3:68:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/35392e3135332e3133362e302f32322d3232203d3e2030.roa
Signing time: Thu 16 Apr 2026 01:36:25 +0000
ROA not before: Thu 16 Apr 2026 01:31:25 +0000
ROA not after: Thu 15 Apr 2027 01:36:25 +0000
asID: 0
IP address blocks: 59.153.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.crl
rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:10:a5:ad:21:86:8c:0a:02:b6:4f:ff:d1:44:97:09:ba:77:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894
Validity
Not Before: Apr 16 01:31:25 2026 GMT
Not After : Apr 15 01:36:25 2027 GMT
Subject: CN=49DC11263C33D5314FEE87BA59E95000876BC73A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:5a:fc:bd:b2:99:b4:e9:08:17:bd:91:41:
26:80:92:2b:37:30:f4:09:42:d4:0b:ef:38:8e:65:
01:e9:a3:39:b6:7b:6c:c7:28:f5:42:e0:5f:b0:b3:
3d:f1:9f:b2:cf:91:31:18:29:17:6d:95:ed:cb:a1:
a8:b9:4b:0d:f7:9d:61:01:ba:d0:9b:a6:9f:d3:61:
4d:5e:61:ff:8e:fd:7a:14:b9:77:3e:b6:0d:58:52:
d0:51:8d:ff:93:60:00:7a:03:e1:59:ec:23:03:06:
6a:67:ea:80:ba:79:05:e6:aa:79:ae:ff:ce:45:e3:
09:9f:7e:ae:bb:eb:29:59:d4:32:ec:7f:55:13:73:
ee:b4:92:99:74:f3:e4:33:b1:86:a6:ca:3f:f2:fe:
d4:8a:a0:d7:06:0b:95:b5:1f:c1:21:d4:72:d7:b8:
23:e2:fd:64:b2:f0:1b:45:72:cb:ac:c0:09:6b:f6:
4e:97:b2:e9:3f:64:a3:ec:e9:6d:d8:03:c6:7d:37:
42:b8:30:6b:99:24:1b:59:b4:05:22:e7:35:b0:2e:
79:e8:25:8c:c7:bf:8c:d9:6f:9c:0f:47:ee:7d:c4:
95:31:1d:d5:3e:ad:78:63:29:83:16:c0:03:ac:a4:
f8:29:30:df:07:2a:95:8a:54:7a:cf:b9:21:7a:cb:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:11:26:3C:33:D5:31:4F:EE:87:BA:59:E9:50:00:87:6B:C7:3A
X509v3 Authority Key Identifier:
keyid:55:98:3C:77:C9:5B:9F:0B:7F:1F:AE:23:1E:BB:1C:BC:CD:C3:68:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/35392e3135332e3133362e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ae:01:dc:4c:31:b1:d2:2d:33:0a:91:9b:e9:70:37:82:49:
78:f5:ba:db:bd:de:e5:45:af:a1:6b:49:54:ab:ae:f7:b6:c4:
b5:41:4d:43:7c:c4:ac:5b:38:7f:83:78:06:03:fb:f0:1b:69:
b8:89:0d:d4:54:9f:3e:c5:77:94:ef:0f:4b:9c:e9:16:a6:45:
88:de:18:97:89:25:46:68:39:bb:78:35:84:05:48:2e:b6:74:
01:7b:1d:49:46:fb:57:dc:d3:94:e7:c5:a5:57:18:4c:5f:22:
e4:8a:27:8d:fa:14:2e:e9:91:e1:7a:f2:e2:52:da:ff:8f:e7:
fc:b6:d7:28:4a:c6:32:2c:d7:c7:a7:ce:5e:2a:5d:60:d7:37:
9d:72:09:8e:0c:36:9f:8d:ee:f2:77:c8:83:55:55:38:bd:dc:
64:e9:a8:db:52:a5:e4:2c:b7:c8:e9:da:9e:48:b8:b0:4f:ef:
8f:55:3d:09:ef:e0:78:19:61:6e:89:3d:9c:0f:fb:ab:0a:78:
3f:65:fa:58:bf:6b:cb:89:2d:09:83:12:72:c0:b6:f7:59:94:
d8:90:f6:d9:bc:a4:42:c0:28:b3:74:89:a2:ec:35:02:cd:82:
5d:cb:be:8f:46:60:2d:4c:03:2b:fe:6d:51:c6:29:de:d2:23:
ca:4e:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:06 2026 by rpki-client