
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137372e302f32342d3235203d3e2034383337.roa
File: 3130332e3231392e3137372e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: CMjqptTP+x2c7YD0oZn4hPaVkUp8BQbOxeYySEF3m7U=
Subject key identifier: ED:6F:1D:C2:91:76:9B:FD:24:35:07:09:6A:66:28:45:43:6E:AD:A4
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 1780D7376AE99C0C4B6A7FB9B2D8974E42DEA080
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137372e302f32342d3235203d3e2034383337.roa
Signing time: Fri 29 May 2026 05:55:34 +0000
ROA not before: Fri 29 May 2026 05:50:34 +0000
ROA not after: Fri 28 May 2027 05:55:34 +0000
asID: 4837
IP address blocks: 103.219.177.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:80:d7:37:6a:e9:9c:0c:4b:6a:7f:b9:b2:d8:97:4e:42:de:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:50:34 2026 GMT
Not After : May 28 05:55:34 2027 GMT
Subject: CN=ED6F1DC291769BFD243507096A662845436EADA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:6a:0c:fd:34:b0:bc:57:0d:45:96:98:8f:
75:0a:d5:f9:cc:8b:f8:9a:5d:f1:7c:ea:34:bf:2f:
fd:99:1e:39:54:be:0c:dd:54:32:b0:fb:fc:6d:d3:
41:d1:a3:8c:05:a0:fd:68:8c:34:b4:f5:05:3b:2b:
7d:c3:21:8b:0a:a0:7c:83:c2:92:a8:8d:2e:c4:96:
d1:12:0a:80:4d:67:a2:02:bb:14:2f:e8:ef:f0:2c:
cf:05:45:f1:e7:dc:0b:ce:cb:d8:b6:c6:dc:01:8a:
99:21:64:ac:24:a9:bc:60:0d:31:e5:97:25:6a:d1:
be:f0:49:1c:8d:9f:4e:e8:3b:86:c6:67:bb:af:2e:
47:4f:d3:12:4e:6f:02:0a:80:90:23:16:08:57:88:
4a:6e:2d:1f:2e:a1:22:c7:90:a4:0c:a4:58:50:05:
e3:2e:a9:b1:ca:79:f1:0b:fd:99:3d:0f:74:67:5c:
7c:0c:e7:83:6b:bd:17:28:d1:b6:59:37:61:bf:1f:
e8:e9:a2:bc:f6:ff:f6:67:3c:0e:9e:26:25:c3:e5:
5c:f6:39:66:3a:40:ee:80:a9:4c:e1:e5:e6:20:0a:
01:93:73:df:29:e0:e9:32:05:2c:2d:75:1f:bc:89:
8f:a8:4b:16:b4:d4:0c:d8:6f:29:36:5a:e5:58:6d:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:1D:C2:91:76:9B:FD:24:35:07:09:6A:66:28:45:43:6E:AD:A4
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137372e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.219.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cc:a1:c0:f4:6c:f6:b1:79:cc:c2:71:27:ae:45:bb:49:c9:
ab:48:53:bf:9f:1d:6d:a3:ac:91:23:39:db:1b:60:54:2a:97:
d5:6d:cb:9d:d9:ab:f6:85:1f:e8:94:37:cd:a9:f5:81:26:6e:
56:ca:1c:c9:06:86:b9:33:f0:9b:10:49:98:fa:0a:df:f2:17:
b7:56:ad:9f:30:3c:1e:27:11:dd:d6:a0:a3:41:71:82:a8:93:
ec:db:4b:75:7f:de:5a:5d:ce:41:a1:a1:d5:f4:9f:31:e8:de:
e9:0a:ee:54:5a:b9:80:b5:50:f1:e2:e6:08:e8:76:73:ad:9f:
58:02:ff:c5:76:22:3d:21:8e:9f:30:db:2c:e3:c6:aa:69:43:
28:b3:d6:2e:13:3c:c3:66:01:94:bd:a0:d7:ca:a5:76:3c:61:
24:aa:b5:86:60:6f:6f:f7:ab:6e:78:68:73:fd:b5:b1:be:ee:
69:46:fb:b1:05:15:b2:71:ac:b4:60:bc:7a:d8:28:3f:22:ef:
15:09:cf:9d:95:ec:62:fc:86:03:44:cc:bd:62:41:8b:b0:3a:
1e:56:e9:5c:76:20:85:33:2d:7e:3f:c0:a5:ba:9d:f7:a4:08:
3d:47:89:84:cc:b4:2b:36:c3:8c:aa:3f:96:43:73:95:2d:9d:
85:28:7e:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:20 2026 by rpki-client