
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203536303438.roa
File: 35392e3135312e302e302f31372d3332203d3e203536303438.roa (raw, json)
Hash identifier: dPojVYuy1KL2pJ8cAcOTePgVbO0XZLI9+uP5Avm8aLs=
Subject key identifier: 03:5B:A2:2C:38:53:97:7A:B8:8C:DF:3A:C3:B7:B4:56:CF:CE:51:5C
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 7AE340964B26E66A103896286F409F6AF20A4D48
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203536303438.roa
Signing time: Tue 14 Apr 2026 03:06:35 +0000
ROA not before: Tue 14 Apr 2026 03:01:35 +0000
ROA not after: Tue 13 Apr 2027 03:06:35 +0000
asID: 56048
IP address blocks: 59.151.0.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e3:40:96:4b:26:e6:6a:10:38:96:28:6f:40:9f:6a:f2:0a:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Apr 14 03:01:35 2026 GMT
Not After : Apr 13 03:06:35 2027 GMT
Subject: CN=035BA22C3853977AB88CDF3AC3B7B456CFCE515C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:ee:2d:23:72:9f:d1:80:75:b8:ac:50:39:
1b:d8:54:c3:65:e6:f6:0f:b6:c3:e8:75:26:4f:1b:
32:c9:c6:b3:f8:29:f5:37:f7:84:37:c0:67:d5:ba:
7c:a0:9a:98:46:90:2d:bc:ad:39:0a:15:da:af:37:
f7:d0:bc:68:e0:9f:13:f3:5d:09:26:20:8f:6f:5f:
24:f5:98:9d:b0:f5:d5:9f:93:65:34:dc:f1:6b:51:
69:26:43:45:98:a9:71:62:6a:49:86:bb:1a:c7:8b:
04:c5:87:bf:12:3d:85:a9:21:a1:24:2e:4e:f1:0f:
1f:84:ad:1e:dd:0c:5a:1f:3e:93:32:47:17:6e:1d:
40:30:dc:a1:fb:39:5d:ba:ff:ec:5b:18:aa:1e:04:
9c:f4:58:fb:26:16:f7:a1:ef:53:6b:eb:1b:e5:4b:
9c:c1:3b:7c:b6:4c:91:20:6c:4d:c9:fa:5b:38:50:
15:19:1b:9f:ab:e7:26:a8:cc:9b:63:a4:12:6e:e4:
ab:f0:53:ce:98:a5:4a:b0:f3:2e:38:da:3f:9e:7b:
0c:b8:34:68:6c:a6:7c:17:65:37:d9:4c:31:90:b9:
4b:51:3d:ce:59:9e:7a:0b:82:2e:6c:9b:1f:1a:33:
93:6c:f5:f6:23:b3:bf:ce:6e:cb:63:6a:81:33:27:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5B:A2:2C:38:53:97:7A:B8:8C:DF:3A:C3:B7:B4:56:CF:CE:51:5C
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.151.0.0/17
Signature Algorithm: sha256WithRSAEncryption
61:16:f6:47:3c:d6:74:16:45:a3:80:6b:e3:eb:fc:55:57:8f:
01:c9:53:3c:51:3a:89:b7:d9:81:dc:0c:3e:cb:8c:30:d3:0e:
0c:1c:72:41:ab:73:be:7d:47:c1:de:05:39:ec:bd:f0:4a:bb:
10:d7:ea:e4:cf:de:d0:99:bf:12:1c:71:8e:82:4b:cd:8d:3f:
9e:f2:c0:91:eb:cf:1b:6a:3e:23:eb:4a:66:38:2c:dd:30:fa:
a8:ec:51:19:b5:35:bf:55:9c:32:29:65:6d:bc:00:73:5a:c3:
ee:50:9e:27:aa:09:f6:85:73:6d:79:25:1c:78:bd:b6:43:43:
a5:59:3e:0c:b1:9b:e7:4b:d7:23:b0:bc:52:92:05:6c:74:ee:
e0:f2:e1:dc:6f:d4:77:60:fa:0f:f6:fb:ba:7f:1b:21:97:44:
53:16:6d:53:59:b5:d4:9a:a5:ab:8b:f4:05:c2:0b:b3:c2:7b:
bb:32:fa:a2:e2:2e:88:0d:05:a3:de:52:13:47:67:6e:fb:f1:
7c:37:45:1f:a4:40:26:dc:e8:6a:9a:4d:95:ef:92:9e:d6:9b:
f6:c5:85:30:05:71:c8:a7:18:5e:f3:70:06:32:2c:80:c9:e2:
97:f0:f7:cc:02:46:35:8c:18:94:84:f0:97:fe:a1:21:40:44:
ec:c2:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:33 2026 by rpki-client