
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/35392e3135332e36342e302f32322d3232203d3e2030.roa
File: 35392e3135332e36342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=
Subject key identifier: C6:72:49:8B:DF:27:9D:C0:B0:71:1A:2E:28:69:07:64:0B:65:13:4B
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 0641EBF1B027B4F4352DB4D75CAA5FE01F7F151C
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/35392e3135332e36342e302f32322d3232203d3e2030.roa
Signing time: Thu 04 Jun 2026 08:56:52 +0000
ROA not before: Thu 04 Jun 2026 08:51:52 +0000
ROA not after: Thu 03 Jun 2027 08:56:52 +0000
asID: 0
IP address blocks: 59.153.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:41:eb:f1:b0:27:b4:f4:35:2d:b4:d7:5c:aa:5f:e0:1f:7f:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: Jun 4 08:51:52 2026 GMT
Not After : Jun 3 08:56:52 2027 GMT
Subject: CN=C672498BDF279DC0B0711A2E286907640B65134B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:20:79:a0:f5:60:3b:d5:ed:66:f9:4e:95:
8b:4c:2b:61:8d:78:89:03:eb:9b:2b:44:33:67:f2:
45:cb:0f:c7:5a:9f:1f:84:5a:e4:e1:0d:e2:56:f6:
d5:31:43:3a:5d:5c:d1:20:0a:56:ff:25:48:69:bb:
e2:11:b2:21:70:60:e6:12:f0:88:ac:5f:7e:2e:9e:
9d:b8:84:fd:16:3d:bf:29:02:43:f0:b1:40:76:f6:
40:98:9e:12:60:dc:7b:0f:1b:ee:82:84:80:f2:f6:
86:f8:84:89:35:29:4c:4f:f7:63:e1:e9:39:41:97:
04:89:46:67:0d:b4:89:97:c3:e4:0f:9b:29:9e:80:
9d:c4:34:6f:3f:15:f2:da:8a:c2:ab:b8:c1:23:37:
d0:43:51:0c:e2:1b:b8:68:e6:46:11:15:9e:30:d4:
36:29:a6:e4:35:53:5c:e9:82:13:cd:83:2f:47:b5:
8c:13:e7:83:23:96:57:c3:c2:a5:92:7b:dc:ff:d5:
8f:89:50:9f:29:80:d0:6f:57:7c:31:12:21:43:1d:
c2:d4:c0:65:58:28:c1:c9:90:b8:ab:ce:1b:25:b0:
7e:38:e5:a2:a5:c4:b3:d4:5b:e4:98:bb:2d:5a:fe:
14:54:b9:34:35:19:6d:4f:4f:b3:c7:e3:02:1f:77:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:49:8B:DF:27:9D:C0:B0:71:1A:2E:28:69:07:64:0B:65:13:4B
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/35392e3135332e36342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.64.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f9:cd:cf:84:97:9e:1b:2d:b8:9f:90:a8:8b:50:51:1a:d8:
a1:10:d5:84:d4:77:be:1c:52:7d:89:f4:79:da:59:77:c5:5c:
e4:39:6a:30:45:ec:13:e2:05:3c:db:a8:37:93:99:2c:dd:78:
20:9b:b4:56:6e:bc:a1:58:61:63:bb:9d:b9:bf:0f:c6:e7:fb:
a3:93:9f:b7:c3:de:84:49:da:4a:b4:d5:43:e8:1f:74:26:78:
22:10:e5:37:a4:24:d3:2f:18:18:d7:bd:11:77:62:8e:7c:2d:
31:18:47:af:90:27:87:b0:52:92:07:86:48:ea:ea:05:52:e8:
d6:47:e4:df:3c:a7:7b:a7:3b:6c:0f:14:11:58:34:3c:03:6e:
b2:7a:58:25:02:58:d4:8b:bf:22:18:e1:82:b5:48:11:ae:60:
64:f5:fe:92:17:40:cb:82:82:34:88:36:ca:e0:d3:f7:e8:73:
9f:e8:50:bf:99:11:67:09:41:12:ba:d0:3c:1d:c5:de:e3:bf:
07:5c:e0:0d:c3:10:52:3e:0f:63:3f:06:ac:0f:32:fc:aa:de:
1d:43:3d:73:98:00:96:98:79:f0:5d:2a:8e:3c:d1:fb:21:bd:
a1:6e:89:b1:d7:b0:4c:f3:32:be:a1:6d:fe:4b:1b:2d:97:ca:
a7:08:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:07:05 2026 by rpki-client