
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137392e302f32342d3234203d3e203534383031.roa
File: 3130312e3235312e3137392e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier: y10kPPUHK9+na4PGxKdtzf9dOf02p7AzAC+IkqIPZfA=
Subject key identifier: CB:E3:F6:0F:3B:1B:FC:CD:A0:5A:5A:F0:7E:38:A2:37:72:5D:56:9E
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 6F4C3CC9A70A94B8DF41C7AA0347F476C16BB49B
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137392e302f32342d3234203d3e203534383031.roa
Signing time: Fri 29 May 2026 08:09:54 +0000
ROA not before: Fri 29 May 2026 08:04:54 +0000
ROA not after: Fri 28 May 2027 08:09:54 +0000
asID: 54801
IP address blocks: 101.251.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4c:3c:c9:a7:0a:94:b8:df:41:c7:aa:03:47:f4:76:c1:6b:b4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:04:54 2026 GMT
Not After : May 28 08:09:54 2027 GMT
Subject: CN=CBE3F60F3B1BFCCDA05A5AF07E38A237725D569E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:07:55:67:76:b6:1c:ba:1b:2f:2f:4e:da:
64:8a:d7:4d:c2:31:ff:8c:9b:de:a3:fc:ee:40:43:
8a:bb:83:dc:75:af:3f:bd:5b:20:86:a8:1b:3a:14:
7c:3f:6d:e2:f5:82:b4:98:6b:17:9e:82:84:8f:78:
be:b7:07:5f:9d:49:a6:3a:f9:db:a0:58:23:47:35:
f6:02:2d:c0:33:b4:93:c3:55:73:ed:34:b7:da:e1:
31:62:7b:70:65:db:52:88:a7:bd:cd:c5:9f:28:47:
49:63:f1:54:72:9a:aa:7c:fd:74:6c:dc:bf:b1:61:
9a:72:4d:e7:2e:43:0e:39:94:d3:c2:a6:e4:7a:2d:
34:bf:f4:6c:1a:60:58:72:c8:32:37:49:19:18:66:
1a:ab:5a:4f:b1:e1:88:f9:c4:a8:d1:67:f6:98:c3:
ea:ec:8d:38:90:ae:15:b6:89:4c:17:ca:17:33:84:
75:61:eb:f8:4b:50:23:2a:7a:c0:8c:dc:f7:99:59:
34:96:27:f5:29:da:9b:0f:a3:1a:57:ce:cc:11:83:
63:43:1f:a8:2d:2a:06:7e:5d:07:cd:1c:ca:3f:df:
4e:8d:69:62:24:34:fb:ba:c9:fc:23:f5:c3:7d:e7:
a5:59:b8:59:4c:24:2d:b3:d0:ce:76:23:ad:ca:23:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:F6:0F:3B:1B:FC:CD:A0:5A:5A:F0:7E:38:A2:37:72:5D:56:9E
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137392e302f32342d3234203d3e203534383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3f:d6:5b:ca:75:c2:71:19:17:56:8f:8b:3d:eb:3d:30:7a:
18:5c:40:e5:19:a7:0d:3b:88:d4:d0:25:6c:dd:81:3a:6e:7d:
b1:67:3d:3c:3a:99:96:0a:96:d5:31:0e:33:db:76:04:b8:6b:
9d:c2:be:74:c0:74:13:2b:d1:9b:b9:a1:53:01:e9:d2:8e:e9:
65:9b:ba:34:18:86:1d:2d:dd:13:fc:83:8b:7b:20:a5:ee:61:
8c:fb:a1:a6:bf:7e:af:a3:b6:2a:94:80:3c:13:b7:bd:ac:2d:
1e:10:27:b0:bc:00:e6:9e:65:55:42:22:be:32:03:8f:1a:61:
f8:b9:69:a8:63:a4:87:0e:41:21:8c:b7:f2:72:02:12:3b:83:
94:ad:87:de:1d:e4:d3:3c:d8:36:63:4d:3d:b9:e1:f8:56:51:
19:df:5e:81:b7:00:6c:8f:c6:d4:17:2f:b0:a7:5a:af:4d:b9:
a5:c0:5e:2a:2a:3f:54:7f:cd:57:69:d1:ae:fd:e2:80:1a:13:
37:1d:ad:60:66:60:85:84:c1:f5:54:49:4b:4a:9a:57:66:12:
02:5b:9c:c8:c5:85:3c:9c:39:93:6a:d0:c7:21:0a:ff:d6:a0:
2d:41:b1:50:ec:88:6f:9e:b9:cf:68:75:c2:9c:80:0b:40:b4:
2b:cc:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:58:17 2026 by rpki-client