
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32342d3235203d3e2034383337.roa
File: 3135302e3234322e38302e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: CU2umfj43JNPOMq2/XXL5LF/KgT0mdzbf8QxYpfGlU4=
Subject key identifier: 12:E8:77:62:58:01:FC:63:D5:F8:0F:2C:76:1E:34:43:D8:0E:F3:A0
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 1254175F5C0CEBEDD0FD6BBDF87A00FB1BE4750E
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32342d3235203d3e2034383337.roa
Signing time: Fri 29 May 2026 08:11:58 +0000
ROA not before: Fri 29 May 2026 08:06:58 +0000
ROA not after: Fri 28 May 2027 08:11:58 +0000
asID: 4837
IP address blocks: 150.242.80.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:54:17:5f:5c:0c:eb:ed:d0:fd:6b:bd:f8:7a:00:fb:1b:e4:75:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:06:58 2026 GMT
Not After : May 28 08:11:58 2027 GMT
Subject: CN=12E877625801FC63D5F80F2C761E3443D80EF3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:48:b9:77:a1:6a:b5:bc:94:f2:83:c1:94:
dc:b6:36:ed:07:fa:1e:7b:36:79:a1:d7:0f:7f:3b:
e1:f7:f9:a9:e1:76:50:ba:63:9d:3a:4f:40:6a:7f:
fc:2f:c9:4a:b6:a2:93:c6:4a:ac:41:06:c2:c3:8b:
e3:b7:79:fd:d1:c0:e1:1b:5d:bb:d7:50:98:ae:2f:
c3:fc:fd:e8:7e:f2:30:fd:ef:f3:ff:82:ef:86:1e:
21:77:64:18:0c:31:41:8c:b7:4d:66:bd:6d:90:f0:
1f:b1:20:88:11:e0:ec:4e:f7:a0:50:fc:68:39:bf:
e0:fd:d7:50:de:f3:a8:59:20:d8:7d:07:2f:79:e0:
f2:7c:76:8f:94:c3:d9:d3:5d:96:6d:78:8e:e8:19:
6b:d0:04:1a:c3:1e:ca:e3:10:a4:75:58:9a:27:ba:
d8:7f:be:7f:e2:24:07:0d:ff:79:d5:ce:e1:8f:be:
28:a2:c6:b4:3c:b1:8b:4c:52:c5:5f:27:d3:19:89:
fc:1a:56:0d:17:aa:f7:8f:44:98:09:59:1a:d3:5c:
5d:94:5f:d5:38:42:dd:c4:fd:38:8e:3d:f6:1b:9b:
fb:c1:50:4d:4e:72:92:28:c1:9b:d2:16:4b:30:dd:
79:bf:10:02:94:55:f7:d9:ec:3e:56:4c:4f:e4:9b:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:77:62:58:01:FC:63:D5:F8:0F:2C:76:1E:34:43:D8:0E:F3:A0
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1e:17:42:29:f9:1c:f7:11:75:2e:ec:75:bb:c1:1b:e6:20:
a7:ff:ed:70:45:66:9c:84:ff:22:8e:80:9f:5c:cd:48:7d:48:
6d:b7:b0:39:67:bf:54:b9:b9:ff:b3:ae:1e:f5:23:e8:b9:0e:
47:a2:76:91:63:f4:40:f3:52:44:3c:41:5a:54:74:c6:b5:ca:
32:6a:d1:c6:80:5b:12:0a:33:de:5e:d7:cd:53:9b:0e:84:3f:
46:6e:90:e4:a2:6d:9d:72:3c:ce:0f:f2:b3:4a:69:67:73:a9:
85:e5:dc:56:18:a9:c2:b8:47:fd:f6:66:e5:5a:c2:30:cb:8e:
49:43:2f:36:24:ff:ca:ea:9c:29:ff:48:bd:2c:b5:e4:1b:cf:
eb:0b:be:84:fc:63:35:c9:31:cd:9a:57:69:9e:b8:02:d0:cd:
6f:50:f7:e8:64:ac:ec:54:09:e5:c4:5c:a6:03:42:ef:9f:97:
94:32:e3:81:9a:d7:34:9b:81:24:35:d0:29:eb:e1:9e:ac:25:
3f:52:f6:75:eb:f2:fe:34:21:75:d1:01:07:db:9b:10:1b:30:
e4:9d:96:06:38:d3:d9:ab:31:c6:ee:49:da:a0:73:bc:97:da:
78:43:f7:55:5e:7b:b8:2a:80:7a:a9:41:6b:b2:10:fe:a5:48:
e8:16:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:15 2026 by rpki-client