
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137372e302f32342d3234203d3e203534383031.roa
File: 3130312e3235312e3137372e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier: YAuVJYBDkpFp/TUkW1H7IuqIE9dhL4UJE1wZs/JYbaQ=
Subject key identifier: 49:FF:4F:D4:D4:0F:29:36:89:42:61:D0:62:74:AC:13:3A:72:CE:79
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 57637D81FDD298E6DBB7413DC5AE9600536C48A1
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137372e302f32342d3234203d3e203534383031.roa
Signing time: Fri 29 May 2026 08:09:55 +0000
ROA not before: Fri 29 May 2026 08:04:55 +0000
ROA not after: Fri 28 May 2027 08:09:55 +0000
asID: 54801
IP address blocks: 101.251.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:63:7d:81:fd:d2:98:e6:db:b7:41:3d:c5:ae:96:00:53:6c:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:04:55 2026 GMT
Not After : May 28 08:09:55 2027 GMT
Subject: CN=49FF4FD4D40F2936894261D06274AC133A72CE79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:c2:36:f6:98:9b:9f:8b:0f:d1:0d:c5:99:
54:79:b2:78:71:6a:cf:56:bf:5f:59:5b:90:d6:29:
1f:43:d1:fc:a0:a1:a8:8a:08:8f:fb:db:88:27:6e:
f4:57:c2:0f:b7:a4:dc:92:6c:84:7f:4d:a2:6a:87:
ed:4a:9d:d7:4c:fc:24:03:23:6e:34:d2:ff:b4:e0:
82:70:ff:ce:70:06:99:3a:ad:74:d4:f4:80:b5:f8:
89:8f:28:55:c8:d4:94:cb:f2:d8:8d:af:7f:54:43:
de:56:c7:20:f4:38:5d:7c:b8:d8:61:61:44:07:bf:
9b:3c:db:97:0a:47:05:dd:b8:1d:a8:7f:ad:33:c4:
6e:c7:0f:48:0d:1e:c5:8d:0c:70:e6:77:eb:a6:62:
40:88:49:d1:a1:d0:36:db:14:7d:90:81:f4:47:a2:
6d:e7:68:a4:fb:63:72:51:3e:55:44:0b:3d:76:d5:
07:4b:2d:8e:35:7b:bb:2d:f5:24:2f:2c:14:93:36:
13:04:e3:5b:b7:c7:f5:d8:b9:7a:5e:c1:24:1d:a0:
aa:ae:ca:2a:6c:e7:b6:88:51:18:6e:dd:de:2c:5b:
c2:ea:a4:60:8d:37:92:1d:2a:e4:f5:64:22:e1:d2:
ea:b5:ae:91:30:a8:c0:8d:d5:ae:ad:52:2b:ca:65:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FF:4F:D4:D4:0F:29:36:89:42:61:D0:62:74:AC:13:3A:72:CE:79
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137372e302f32342d3234203d3e203534383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.177.0/24
Signature Algorithm: sha256WithRSAEncryption
02:76:11:da:3a:c6:36:8d:d7:3a:20:0e:5b:8d:c4:e4:60:46:
76:f9:40:58:30:f4:30:05:d1:cc:67:9d:eb:49:7c:84:6e:c5:
88:52:81:81:75:de:a9:19:57:94:49:94:7c:e5:81:66:29:97:
36:c4:96:90:27:86:5f:fa:b6:ae:7a:ed:82:06:db:97:98:03:
c7:cb:5b:0d:7c:c9:00:fa:b1:35:c6:74:41:eb:9c:0b:0f:72:
a4:86:84:b3:e5:06:4c:a8:2b:bf:67:28:05:1b:cf:a7:c0:1b:
f7:9f:80:32:af:86:4d:64:2c:a2:c5:0a:bc:a6:78:77:ce:f2:
af:62:48:00:59:f3:3f:0c:53:8b:b0:a5:f7:6e:34:32:2b:9c:
e0:85:d4:94:a2:51:63:57:c4:71:b1:3c:cd:69:d1:1a:f7:57:
d4:62:2d:d3:0e:52:a5:6a:4c:4c:0d:58:7f:9a:5a:2e:f9:75:
74:51:96:2b:21:fa:30:77:42:37:4b:a4:97:53:f6:0c:8f:eb:
02:ef:54:0a:21:66:97:7e:1d:41:d6:39:06:f2:39:81:8b:a4:
0d:7f:44:15:cc:b8:8f:93:36:55:07:1d:c9:75:ca:ae:0c:84:
51:f1:a4:94:67:5f:df:33:59:84:dd:fb:cb:14:ce:04:b0:31:
26:09:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:53 2026 by rpki-client