
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2039383038.roa
File: 35392e3135312e302e302f31372d3332203d3e2039383038.roa (raw, json)
Hash identifier: 0MHbtab6+qWe1eCFFMv/WM/850HACHTCvj3pranmtZc=
Subject key identifier: AF:7D:92:DA:F8:4F:DD:01:D0:2D:76:8C:60:F2:8E:2D:05:7B:81:D2
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 7EE812444DF8943596EF798D2F5C809F0ED051EA
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2039383038.roa
Signing time: Tue 14 Apr 2026 03:06:35 +0000
ROA not before: Tue 14 Apr 2026 03:01:35 +0000
ROA not after: Tue 13 Apr 2027 03:06:35 +0000
asID: 9808
IP address blocks: 59.151.0.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e8:12:44:4d:f8:94:35:96:ef:79:8d:2f:5c:80:9f:0e:d0:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Apr 14 03:01:35 2026 GMT
Not After : Apr 13 03:06:35 2027 GMT
Subject: CN=AF7D92DAF84FDD01D02D768C60F28E2D057B81D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:41:90:6d:9e:46:31:16:ff:11:5f:08:ee:
ee:4e:32:0d:cf:37:da:78:a8:1c:8f:05:f9:e0:f8:
29:fc:e8:57:7d:d0:c3:3a:e0:df:bd:ee:4e:17:22:
ee:f7:4a:79:c3:f5:99:fc:00:2d:c3:85:f9:fc:d3:
fa:80:e0:e9:a5:06:2e:c6:43:19:a1:7f:a0:da:36:
2a:61:96:36:f0:7c:15:8b:b4:6e:f8:4e:fd:15:e7:
3c:01:d4:54:3a:53:61:92:1d:ff:db:36:8e:19:0d:
f7:f5:12:a8:f4:99:79:75:d4:29:39:72:ce:b1:1e:
d4:f5:89:ad:01:fd:6a:81:fc:7d:e9:1e:1b:f0:c2:
96:b1:79:f9:cb:fb:b9:d7:99:57:50:ca:8f:eb:81:
7b:07:dd:0c:8d:bb:93:e2:f2:f2:20:a9:a9:f2:46:
22:8f:d3:53:5d:4d:a8:8f:e0:1e:43:ac:ba:42:69:
43:6c:d2:14:9b:25:29:ad:cb:24:cb:41:41:d0:29:
29:97:d1:20:ee:be:cf:d4:e9:47:2a:2d:b2:ef:91:
2a:bd:e9:85:f9:8d:cc:58:02:c8:e7:4b:c9:4f:ce:
2e:28:7a:9e:e2:43:a2:50:4d:ce:62:11:c9:b4:25:
59:87:50:07:ea:26:a3:14:92:19:b1:1d:81:e0:1a:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:92:DA:F8:4F:DD:01:D0:2D:76:8C:60:F2:8E:2D:05:7B:81:D2
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/35392e3135312e302e302f31372d3332203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.151.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3d:05:85:3a:43:10:4e:b0:a2:97:12:7d:ff:dd:6a:c9:37:b8:
8a:66:aa:97:f4:39:cc:ec:db:74:ec:46:cc:40:df:c6:f4:c1:
a8:2c:48:94:aa:59:cb:0c:d2:2d:b2:02:9c:d1:20:4b:85:45:
77:ac:10:77:e4:7a:8a:62:a7:9e:1e:42:5e:b4:d1:4e:e0:b5:
1c:f1:f7:c6:d6:52:8b:1f:10:62:c0:99:1b:6a:94:3f:82:d4:
0b:c4:9f:d0:61:ee:58:88:bd:cf:7e:11:4e:43:a5:46:77:c1:
3c:76:ea:61:d7:36:be:40:b1:f4:2d:ba:6f:37:91:73:81:37:
39:d8:25:7b:12:67:63:36:23:ba:e5:25:12:81:cd:fb:e0:ff:
31:96:10:cd:f4:1b:27:f3:56:68:68:a7:73:78:0b:88:15:04:
95:b7:de:8e:b0:c4:9c:68:17:1f:9e:96:4b:fd:62:e4:a2:25:
c7:74:6b:79:0d:90:e4:70:6c:bc:12:8f:3d:45:01:22:e3:d9:
20:81:a2:b4:a3:4f:04:f5:9b:02:83:42:b8:ca:0f:e4:5f:87:
d6:cd:b9:2b:48:f8:70:15:96:c5:67:4e:c1:76:c3:39:f0:97:
8a:f7:52:e3:65:a9:6b:68:de:0c:60:c3:28:c2:2c:76:d5:0b:
b7:56:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:40 2026 by rpki-client