
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203233373234.roa
File: 35392e3135312e302e302f31372d3332203d3e203233373234.roa (raw, json)
Hash identifier: r/LGsUCpaWo4Hp6PlC2HKivvZ+/MtB+IQE4nuZzvRLU=
Subject key identifier: 61:EB:8F:E1:3F:D8:5F:3D:3A:F9:EE:28:49:7A:E4:E4:88:62:8E:6C
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 294E855EDB8243A4CA6898C9C0173A66D85B012C
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203233373234.roa
Signing time: Tue 14 Apr 2026 03:06:35 +0000
ROA not before: Tue 14 Apr 2026 03:01:35 +0000
ROA not after: Tue 13 Apr 2027 03:06:35 +0000
asID: 23724
IP address blocks: 59.151.0.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4e:85:5e:db:82:43:a4:ca:68:98:c9:c0:17:3a:66:d8:5b:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Apr 14 03:01:35 2026 GMT
Not After : Apr 13 03:06:35 2027 GMT
Subject: CN=61EB8FE13FD85F3D3AF9EE28497AE4E488628E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:e8:d6:ec:30:9d:5a:5f:9c:29:50:51:13:
26:81:c3:c6:1a:5d:5b:62:e3:52:65:8c:22:08:e2:
0e:8b:60:b6:ab:19:f1:77:0c:61:d4:62:38:76:0a:
17:8f:23:66:0b:3e:47:6e:88:7f:af:61:03:8a:64:
75:77:31:49:5b:be:22:53:73:dd:54:50:57:58:01:
ff:c6:07:01:6c:71:4a:37:2c:62:62:55:35:bd:11:
dd:98:ca:1b:d6:92:c7:39:31:db:0f:bc:7e:9a:b4:
0f:73:5a:4f:86:fc:89:12:5b:4b:4e:fb:d8:ad:96:
57:33:02:2d:a9:dd:5c:d8:25:0d:dc:54:7d:ab:8a:
8a:24:27:bb:d3:be:6e:31:55:ce:ed:fd:d0:ac:da:
68:41:1a:c7:de:a4:f8:01:bc:8f:92:77:4f:a4:42:
b9:96:0e:4b:93:55:69:1e:69:82:35:cf:ef:d9:61:
e7:63:e9:1e:d2:89:d1:0f:e1:fa:c0:9e:c9:32:28:
df:e0:92:6d:7c:58:95:bd:47:d8:56:0d:5c:63:76:
3b:30:29:c8:fc:76:f5:40:f7:87:8f:82:59:fe:3a:
33:98:da:53:1e:dd:69:24:65:e6:ff:72:c1:eb:78:
79:a3:aa:0a:a9:25:4c:02:1b:6b:34:80:76:d9:bc:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:8F:E1:3F:D8:5F:3D:3A:F9:EE:28:49:7A:E4:E4:88:62:8E:6C
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.151.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8b:d4:e6:95:d7:91:db:4a:44:4d:e8:c3:ce:0c:9e:87:05:f4:
8f:ee:a7:8e:93:1c:ee:9f:75:de:f5:6e:a2:ff:79:53:71:8a:
d9:39:80:76:22:d7:7e:74:09:da:68:07:f9:ad:ec:9c:fd:0c:
ae:e7:9a:2b:10:d2:b1:0c:52:05:3e:16:62:6a:e3:a1:b8:23:
4c:6b:62:97:40:69:12:66:4a:67:42:df:77:d0:82:54:97:5e:
be:f2:28:35:40:d1:11:04:c6:92:f0:04:44:00:b2:46:75:4b:
49:01:03:62:c3:d7:e7:b6:87:42:01:0f:15:c9:88:f1:95:49:
c9:04:cd:e1:8e:fd:f5:a7:cb:05:c4:08:97:7c:bd:9e:aa:96:
01:bb:3c:58:8e:b6:d0:3f:3e:2c:6d:f3:0e:88:be:8d:f8:0d:
8b:6e:14:e0:22:2e:e1:33:50:7a:f8:c0:92:c6:79:41:a6:71:
6b:a4:e8:10:44:f6:67:2f:75:1c:57:b7:a7:92:32:d4:f7:1f:
28:47:ba:97:d9:b5:78:60:14:67:bb:9c:5f:d4:55:be:02:b3:
e1:ad:0b:6d:46:7a:57:ac:ef:33:71:49:18:c3:00:ef:12:1b:
b3:0e:c7:ed:70:75:31:73:dd:45:3d:61:ac:2d:6d:88:64:1f:
2d:3d:d6:a0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUKU6FXtuCQ6TKaJjJwBc6ZthbASwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVD
NTQ0Qzc0QjAeFw0yNjA0MTQwMzAxMzVaFw0yNzA0MTMwMzA2MzVaMDMxMTAvBgNV
BAMTKDYxRUI4RkUxM0ZEODVGM0QzQUY5RUUyODQ5N0FFNEU0ODg2MjhFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiejW7DCdWl+cKVBREyaBw8Ya
XVti41JljCII4g6LYLarGfF3DGHUYjh2ChePI2YLPkduiH+vYQOKZHV3MUlbviJT
c91UUFdYAf/GBwFscUo3LGJiVTW9Ed2YyhvWksc5MdsPvH6atA9zWk+G/IkSW0tO
+9itllczAi2p3VzYJQ3cVH2riookJ7vTvm4xVc7t/dCs2mhBGsfepPgBvI+Sd0+k
QrmWDkuTVWkeaYI1z+/ZYedj6R7SidEP4frAnskyKN/gkm18WJW9R9hWDVxjdjsw
Kcj8dvVA94ePgln+OjOY2lMe3WkkZeb/csHreHmjqgqpJUwCG2s0gHbZvGpXAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUYeuP4T/YXz06+e4oSXrk5IhijmwwHwYDVR0j
BBgwFoAUHFGc0cQVkl5/zpL9og/xjsVEx0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI2NTQ1OTM0ODUzNzM0Ni8xLzFDNTE5Q0QxQzQxNTkyNUU3RkNFOTJGREEyMEZG
MThFQzU0NEM3NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUM1MTlDRDFDNDE1OTI1RTdGQ0U5MkZEQTIwRkYxOEVDNTQ0Qzc0Qi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MjY1NDU5MzQ4NTM3MzQ2LzEvMzUzOTJlMzEzNTMx
MmUzMDJlMzAyZjMxMzcyZDMzMzIyMDNkM2UyMDMyMzMzNzMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAc7lwAwDQYJKoZIhvcNAQELBQADggEBAIvU5pXXkdtKRE3ow84MnocF9I/up46T
HO6fdd71bqL/eVNxitk5gHYi1350CdpoB/mt7Jz9DK7nmisQ0rEMUgU+FmJq46G4
I0xrYpdAaRJmSmdC33fQglSXXr7yKDVA0REExpLwBEQAskZ1S0kBA2LD1+e2h0IB
DxXJiPGVSckEzeGO/fWnywXECJd8vZ6qlgG7PFiOttA/Pixt8w6Ivo34DYtuFOAi
LuEzUHr4wJLGeUGmcWuk6BBE9mcvdRxXt6eSMtT3HyhHupfZtXhgFGe7nF/UVb4C
s+GtC21Geles7zNxSRjDAO8SG7MOx+1wdTFz3UU9YawtbYhkHy091qA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:32 2026 by rpki-client