$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137362e302f32322d3232203d3e20313333373735.roa File: 3130312e3235312e3137362e302f32322d3232203d3e20313333373735.roa (raw, json) Hash identifier: pjK42aIvionSKw1d30yA89f0WwoRXXNGBFCKh9GLpMo= Subject key identifier: 39:FD:7B:6A:19:5D:BD:A7:1F:6F:CC:60:7C:A8:D8:8F:C4:79:50:0B Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Certificate serial: 44E3DFC251FB6143630A8E534409FA73B0288D81 Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137362e302f32322d3232203d3e20313333373735.roa Signing time: Fri 29 May 2026 08:09:54 +0000 ROA not before: Fri 29 May 2026 08:04:54 +0000 ROA not after: Fri 28 May 2027 08:09:54 +0000 asID: 133775 IP address blocks: 101.251.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e3:df:c2:51:fb:61:43:63:0a:8e:53:44:09:fa:73:b0:28:8d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Validity Not Before: May 29 08:04:54 2026 GMT Not After : May 28 08:09:54 2027 GMT Subject: CN=39FD7B6A195DBDA71F6FCC607CA8D88FC479500B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:9d:92:35:08:e2:71:15:ee:1b:42:ae:44: 0b:57:5c:35:4a:e5:dc:a2:0a:b3:6f:0a:4a:98:8e: b0:af:67:d7:77:5b:36:2a:0b:e4:31:db:ab:39:3e: 38:83:a8:49:35:89:bf:a9:25:25:d9:fd:73:fe:62: 22:86:21:6f:b7:0c:2b:e3:65:85:96:54:7f:04:45: 9b:fd:82:0f:2b:72:e7:14:1c:12:53:db:f8:33:0e: 66:16:59:7a:e1:91:9b:df:f0:49:d9:f5:d6:ef:a1: f1:f0:ec:50:a1:cf:95:ca:18:bc:fa:bb:fe:80:a4: 06:a3:be:13:ef:ee:c8:59:bd:35:6f:0c:f2:64:32: 4e:03:b9:53:af:83:4b:d3:ba:5b:39:89:5f:db:83: 97:c4:ff:cd:53:f9:03:ee:a6:19:f3:7c:d8:40:92: 9a:31:dd:7f:65:07:e1:2f:e4:4a:ba:4d:63:78:42: 38:36:15:10:f0:86:7c:67:f7:9e:98:94:91:94:61: 6f:c7:31:a2:94:c5:9f:cf:65:31:43:55:c1:11:dc: 00:cc:98:de:22:74:44:e4:8f:76:9d:90:fb:53:a3: 00:10:0d:82:50:5a:16:89:ce:54:f4:c5:bf:88:52: c2:f6:0b:d0:58:18:0c:40:4d:c2:25:89:b3:47:63: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FD:7B:6A:19:5D:BD:A7:1F:6F:CC:60:7C:A8:D8:8F:C4:79:50:0B X509v3 Authority Key Identifier: keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137362e302f32322d3232203d3e20313333373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.251.176.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:3c:b1:cd:34:ab:8a:53:3a:a9:c8:75:98:13:92:35:69:14: 1c:38:63:ff:cc:df:d8:09:30:6d:11:d6:b8:4a:e3:12:5b:bb: db:d8:0c:c2:0a:da:29:cb:8d:86:ef:4b:1d:7e:5a:18:5c:a6: 49:e5:7c:2b:bc:b3:eb:cf:76:b5:55:ad:19:d1:20:33:53:ab: b5:08:1a:8c:29:06:68:56:55:34:fd:53:19:36:47:0e:56:4b: 3e:9a:e8:57:3c:ac:ae:09:43:70:6e:a2:ea:9d:18:d4:83:f2: 12:23:87:02:93:36:80:b5:da:db:e3:be:51:8a:91:2f:90:75: 3d:92:42:ee:b8:37:df:a8:3f:78:75:8e:53:84:ec:9d:42:db: 7b:ca:e0:01:06:c5:5e:99:bc:71:5a:cb:e9:70:58:7e:05:45: c5:76:b2:e2:f5:bc:49:da:38:68:d5:c8:f5:c1:e9:86:21:f5: b3:70:c0:05:87:46:43:2d:2d:ba:fe:13:71:55:06:79:8c:2b: a6:32:7f:0a:f0:fc:e6:f6:2c:03:ba:9f:7a:be:eb:55:99:79: 46:3a:d0:eb:7a:13:42:b6:0e:c1:72:0d:84:99:49:fb:e5:98: 11:9a:62:1a:e1:60:95:18:30:04:7b:ae:10:de:3e:6b:21:9f: d8:b7:d3:2f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUROPfwlH7YUNjCo5TRAn6c7AojYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC MzE4QUJGOTAeFw0yNjA1MjkwODA0NTRaFw0yNzA1MjgwODA5NTRaMDMxMTAvBgNV BAMTKDM5RkQ3QjZBMTk1REJEQTcxRjZGQ0M2MDdDQThEODhGQzQ3OTUwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLh52SNQjicRXuG0KuRAtXXDVK 5dyiCrNvCkqYjrCvZ9d3WzYqC+Qx26s5PjiDqEk1ib+pJSXZ/XP+YiKGIW+3DCvj ZYWWVH8ERZv9gg8rcucUHBJT2/gzDmYWWXrhkZvf8EnZ9dbvofHw7FChz5XKGLz6 u/6ApAajvhPv7shZvTVvDPJkMk4DuVOvg0vTuls5iV/bg5fE/81T+QPuphnzfNhA kpox3X9lB+Ev5Eq6TWN4Qjg2FRDwhnxn956YlJGUYW/HMaKUxZ/PZTFDVcER3ADM mN4idETkj3adkPtTowAQDYJQWhaJzlT0xb+IUsL2C9BYGAxATcIlibNHY+D7AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUOf17ahldvacfb8xgfKjYj8R5UAswHwYDVR0j BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0 NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3LzAvMzEzMDMxMmUz MjM1MzEyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3Mzcz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmX7sDANBgkqhkiG9w0BAQsFAAOCAQEAbTyxzTSrilM6qch1 mBOSNWkUHDhj/8zf2AkwbRHWuErjElu729gMwgraKcuNhu9LHX5aGFymSeV8K7yz 6892tVWtGdEgM1OrtQgajCkGaFZVNP1TGTZHDlZLPproVzysrglDcG6i6p0Y1IPy EiOHApM2gLXa2+O+UYqRL5B1PZJC7rg336g/eHWOU4TsnULbe8rgAQbFXpm8cVrL 6XBYfgVFxXay4vW8Sdo4aNXI9cHphiH1s3DABYdGQy0tuv4TcVUGeYwrpjJ/CvD8 5vYsA7qfer7rVZl5RjrQ63oTQrYOwXINhJlJ++WYEZpiGuFglRgwBHuuEN4+ayGf 2LfTLw== -----END CERTIFICATE-----Generated at Fri May 29 22:58:02 2026 by rpki-client