
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383335.roa
File: 35392e3135312e302e302f31372d3332203d3e2034383335.roa (raw, json)
Hash identifier: kOe1A3QSK8X1B/wMQLxtIn729idxZ9Hwu6GUEWgnX/I=
Subject key identifier: CC:A3:5A:4E:E5:B5:CF:C2:4E:E2:D1:2B:35:DE:A5:80:44:91:F2:C9
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 791E604B0F6B7B750DD32B09CBBB64A2D38F9B7E
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383335.roa
Signing time: Tue 14 Apr 2026 03:06:35 +0000
ROA not before: Tue 14 Apr 2026 03:01:35 +0000
ROA not after: Tue 13 Apr 2027 03:06:35 +0000
asID: 4835
IP address blocks: 59.151.0.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1e:60:4b:0f:6b:7b:75:0d:d3:2b:09:cb:bb:64:a2:d3:8f:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Apr 14 03:01:35 2026 GMT
Not After : Apr 13 03:06:35 2027 GMT
Subject: CN=CCA35A4EE5B5CFC24EE2D12B35DEA5804491F2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:df:0c:9e:7f:23:c9:c8:67:c8:86:a3:42:
f2:58:9a:fe:8d:b0:f3:28:a7:78:2c:2a:63:3e:d8:
67:98:2e:a7:62:27:ca:dc:cb:52:88:8e:40:36:98:
5e:db:b5:b2:bf:69:45:60:b8:10:e8:ab:f5:0b:fd:
a9:b0:78:91:23:42:13:8d:f6:99:66:54:2d:ac:95:
40:be:51:d8:48:f5:c0:4b:f4:a5:ee:46:1d:99:bd:
10:0d:19:27:ec:40:4a:71:e9:37:ef:e6:0c:14:64:
c1:5f:7d:2e:e5:36:cc:42:ef:58:2d:38:90:a8:55:
ce:ae:8d:68:9d:98:14:88:26:1c:78:fe:15:86:9e:
42:98:d5:a5:de:ae:ac:41:49:03:78:05:1b:38:2b:
aa:4d:76:57:2d:a6:d6:ce:c0:39:e6:24:ca:c6:6b:
14:6d:4f:c3:16:17:ef:c9:9e:1a:32:cc:46:e2:ca:
5e:7c:ca:a1:19:49:1a:df:54:4e:f9:b7:c6:72:ee:
45:12:75:99:c8:90:ec:f6:21:23:86:ea:c7:2d:d5:
87:24:fd:40:96:48:85:1b:bb:46:96:ff:36:16:95:
5a:1c:f3:46:70:d7:93:0d:c6:75:09:25:59:fa:3a:
4d:ca:02:c9:22:b5:8f:55:c2:2c:50:7c:00:44:06:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A3:5A:4E:E5:B5:CF:C2:4E:E2:D1:2B:35:DE:A5:80:44:91:F2:C9
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2034383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.151.0.0/17
Signature Algorithm: sha256WithRSAEncryption
75:fd:27:c8:97:78:31:8f:1e:5c:a8:8c:63:96:76:00:fc:59:
95:1e:7e:05:de:57:77:2a:93:c3:84:40:3c:0a:9d:2a:0b:b9:
1d:02:7d:74:4d:2e:ef:3f:0e:9e:3a:21:21:d5:b6:0e:2a:2c:
df:33:27:ec:be:ca:fd:32:b0:43:a2:b9:46:e9:c3:6d:4c:92:
b3:a0:b3:46:0c:d3:15:42:a2:29:a2:2c:32:0f:4a:a3:57:62:
4a:24:81:97:66:99:2d:b1:5f:23:c8:d7:59:3f:db:c2:1d:51:
32:d3:0e:fa:12:6d:d6:ca:53:6f:cb:36:f8:c8:b7:97:e7:25:
fe:81:97:c6:ff:42:78:30:2f:d0:d4:76:dc:ff:0f:25:8d:00:
c1:ad:59:a9:65:6a:c7:95:d4:fc:47:fc:49:7a:ad:21:21:d5:
e2:45:95:5a:0f:49:c4:a3:a9:42:48:a6:1c:6f:34:ed:e1:5f:
31:c9:c2:19:f3:3e:eb:3f:19:00:a4:87:2e:48:74:7e:ac:7b:
53:e4:61:4f:1f:09:d0:81:52:70:49:42:3c:8f:fa:cf:c5:e1:
29:0b:49:29:01:b5:ed:0c:83:59:fd:bd:32:0c:ec:02:df:24:
1e:86:5e:08:43:d8:2e:83:a3:f0:a2:38:0e:b0:16:56:a2:ba:
86:04:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:33 2026 by rpki-client