
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137362e302f32342d3234203d3e203534383031.roa
File: 3130312e3235312e3137362e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier: Js2ERwg8DdkRHwFnf28LtcwjTYCVQJlY7oO4vF5oCgA=
Subject key identifier: 2E:B5:E2:B4:B4:35:97:DB:C8:12:96:98:F2:7A:56:39:85:D0:7D:70
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 31C0C9BF8E7CD8BC219760FEA0407730D9018BD6
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137362e302f32342d3234203d3e203534383031.roa
Signing time: Fri 29 May 2026 08:09:54 +0000
ROA not before: Fri 29 May 2026 08:04:54 +0000
ROA not after: Fri 28 May 2027 08:09:54 +0000
asID: 54801
IP address blocks: 101.251.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c0:c9:bf:8e:7c:d8:bc:21:97:60:fe:a0:40:77:30:d9:01:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:04:54 2026 GMT
Not After : May 28 08:09:54 2027 GMT
Subject: CN=2EB5E2B4B43597DBC8129698F27A563985D07D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:4f:06:16:2e:7b:b1:66:78:ba:54:ad:9b:
58:f8:76:a3:f2:c3:4a:9e:e6:1d:d8:23:e3:96:97:
fb:0c:c7:61:33:45:8a:f1:11:a8:f9:21:1f:53:d4:
9a:4b:f8:ec:16:52:8f:b8:0c:c0:28:6d:d4:b6:d5:
43:c5:d0:6d:0f:81:b0:2f:e6:0e:06:ec:5c:5b:b9:
ec:b2:e8:b1:22:cc:ca:21:fc:02:6a:d5:ce:8b:73:
7f:cc:42:7f:d7:30:e9:63:84:7c:27:5a:1f:08:8d:
b8:46:34:99:2c:d6:cf:df:9c:ff:64:2d:21:23:09:
6b:fc:be:bf:4f:6e:98:36:ed:35:82:45:a6:ba:f1:
c4:97:f0:e4:c7:6e:2c:07:24:86:49:c0:f4:c2:3d:
f2:c2:6c:2a:b0:6c:cf:2d:30:05:06:ec:1d:d8:be:
30:78:4c:07:3c:22:8b:36:02:54:25:dc:65:c8:25:
9b:c4:d2:c0:3c:97:d2:34:1f:25:55:22:25:f8:2e:
32:78:27:d4:67:9d:b5:91:c5:96:76:1a:b5:fd:e3:
c9:e7:59:3d:64:a1:ff:9e:8e:de:ce:fe:2f:d0:17:
9d:41:c4:d3:a0:ec:8d:f0:88:29:be:f9:fc:b4:0f:
cd:36:b7:76:c2:c3:cf:6a:e9:9b:c5:c0:ea:6c:2f:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B5:E2:B4:B4:35:97:DB:C8:12:96:98:F2:7A:56:39:85:D0:7D:70
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137362e302f32342d3234203d3e203534383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.176.0/24
Signature Algorithm: sha256WithRSAEncryption
98:52:1c:fb:7a:39:6e:92:44:55:22:79:a5:04:3a:ea:3a:6b:
3e:b2:48:83:5e:90:99:57:24:eb:7d:cf:f7:69:61:81:70:4f:
d4:3d:1e:3b:f9:5b:a7:27:42:db:e3:ec:04:14:a5:41:c9:9f:
d2:9a:a1:ae:1f:d5:9b:ee:17:36:e7:1a:d3:63:06:ee:c7:6c:
99:7e:af:33:ff:19:ae:fa:46:db:e6:ad:94:c7:e7:d5:a1:d4:
f3:cd:9e:57:ed:aa:63:67:f1:15:e4:15:7a:8c:be:65:be:d4:
cd:b3:f3:2d:f2:a6:76:92:56:63:35:7e:34:21:93:d1:a9:3d:
2a:48:d2:11:2b:33:b1:01:6b:60:2e:0e:1e:e7:92:e7:85:9f:
64:7c:6d:6b:b1:ca:03:e7:f4:59:be:87:0a:6a:3b:6a:4f:ee:
0a:7b:8d:81:a5:fa:04:21:89:a1:63:e7:00:3d:73:3e:3e:61:
4e:9f:ac:a8:f5:29:9a:78:5f:e1:56:ee:7f:41:98:ab:2d:5c:
91:b3:ac:9c:87:da:1d:87:b5:16:ca:64:fb:e5:35:89:5f:6a:
46:d0:9b:f7:0e:75:e2:aa:8a:1c:c0:46:32:9d:04:04:3f:d3:
6d:77:e4:1e:66:3d:d5:1e:b7:fb:4c:ff:cb:9b:05:24:9a:ed:
6f:0d:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:50 2026 by rpki-client