
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3234203d3e20313331353638.roa
File: 3130332e3231392e3137362e302f32342d3234203d3e20313331353638.roa (raw, json)
Hash identifier: NgR0HRzxaI6N4t73nVqTZnEWZF70SJxxUb6bXGGkogA=
Subject key identifier: 2F:1E:24:56:E7:2F:91:56:00:AC:25:B1:CA:F2:7F:0A:CD:87:38:99
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 396C87D0B56BE1E7743AAA8A3BB7D22485C6FEAB
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3234203d3e20313331353638.roa
Signing time: Fri 29 May 2026 05:54:37 +0000
ROA not before: Fri 29 May 2026 05:49:37 +0000
ROA not after: Fri 28 May 2027 05:54:37 +0000
asID: 131568
IP address blocks: 103.219.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6c:87:d0:b5:6b:e1:e7:74:3a:aa:8a:3b:b7:d2:24:85:c6:fe:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:49:37 2026 GMT
Not After : May 28 05:54:37 2027 GMT
Subject: CN=2F1E2456E72F915600AC25B1CAF27F0ACD873899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:99:a2:fa:92:b6:5a:e9:7b:56:2d:c4:91:
e3:3e:27:60:04:0e:00:79:c8:db:75:fa:b0:6d:2d:
54:a4:b0:28:9d:ad:3d:23:2a:02:6a:7e:a6:33:e5:
8d:be:37:e7:49:7d:3d:92:86:26:e9:86:76:40:da:
40:61:bc:ef:10:14:ed:ba:45:3e:a3:94:e7:38:4b:
87:93:7a:46:a8:24:6b:c7:98:cf:d3:bf:cf:e5:7b:
71:89:63:b8:98:cf:01:40:9d:26:75:c2:f0:38:a6:
d3:b5:12:8e:3a:8e:79:79:7c:96:01:1f:38:ee:64:
39:97:2c:ce:1d:1e:8e:a3:8d:03:24:c0:0f:1e:ca:
c3:d6:02:83:33:99:06:78:f7:77:a6:91:ac:33:34:
23:e6:ea:17:b5:38:1e:90:0d:3f:ce:fb:7f:89:99:
c0:fb:6b:6c:eb:23:f5:6f:fa:00:73:3a:15:eb:c4:
0e:1d:ea:d5:52:87:c4:5b:41:82:83:34:b2:95:0b:
5a:40:38:64:2a:10:d3:da:ea:cb:b3:c8:06:5d:33:
b4:5f:58:e7:c8:8d:39:83:58:cc:a4:f9:45:62:f5:
5d:80:fc:7d:bc:8c:98:06:14:68:a4:34:9d:0b:95:
22:38:7e:b4:85:e7:4d:00:a4:32:d3:3e:b2:27:63:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:24:56:E7:2F:91:56:00:AC:25:B1:CA:F2:7F:0A:CD:87:38:99
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3234203d3e20313331353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.176.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9e:40:04:b6:4a:16:6c:95:eb:93:cc:c7:9f:7b:83:e9:73:
3f:7f:61:2e:0d:25:2e:86:37:78:9d:32:1b:b6:cc:d8:6e:89:
bb:3f:03:b9:32:d5:8f:70:a2:0d:3f:0a:cb:ec:f2:c6:24:cf:
6a:3b:4c:5d:e3:37:e3:93:e1:0d:5d:21:d0:ec:42:94:0a:9c:
bc:26:f8:3a:be:53:58:3e:39:0e:8a:4b:87:d0:03:f5:58:59:
ca:4d:e1:7f:24:7b:a1:1c:0d:08:4e:a7:db:44:e8:01:69:c5:
da:db:9d:65:7a:2a:46:cf:27:60:29:18:97:1a:b2:68:57:83:
45:e5:ed:5c:1a:92:6b:c7:07:f2:69:55:43:89:71:4a:29:9e:
08:4c:e0:51:de:99:d2:3b:9a:77:ab:05:d7:74:f7:4c:52:05:
ea:53:d7:3f:c8:ca:04:95:1e:e8:8f:b3:35:70:5f:62:f5:b6:
91:1c:cd:18:35:98:99:9e:0b:34:f7:bc:ef:14:94:83:7d:09:
d1:18:85:25:b0:54:54:c1:72:06:75:e1:f0:ad:1b:79:1f:55:
46:da:51:ce:df:11:79:e1:8b:b8:53:7f:a3:e2:cf:c9:3d:16:
1e:8b:18:f9:5a:83:48:eb:cb:67:db:5f:2e:22:03:95:41:94:
45:46:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:58:27 2026 by rpki-client