
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38332e302f32342d3234203d3e203534383031.roa
File: 3135302e3234322e38332e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier: 1hOr6RVap5hupQFJnA+SlejKMLAl/4NWrhOU6BkW9eo=
Subject key identifier: AB:3C:56:66:F0:9C:06:6F:1A:D4:BE:03:88:8E:D9:F1:7B:40:22:63
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 31BC6A9A288E7B4CA35D5B595B060D2C9066B121
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38332e302f32342d3234203d3e203534383031.roa
Signing time: Fri 29 May 2026 08:20:27 +0000
ROA not before: Fri 29 May 2026 08:15:27 +0000
ROA not after: Fri 28 May 2027 08:20:27 +0000
asID: 54801
IP address blocks: 150.242.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bc:6a:9a:28:8e:7b:4c:a3:5d:5b:59:5b:06:0d:2c:90:66:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:15:27 2026 GMT
Not After : May 28 08:20:27 2027 GMT
Subject: CN=AB3C5666F09C066F1AD4BE03888ED9F17B402263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:a8:16:7f:82:9b:3f:48:09:26:3a:f6:39:
d5:0c:b9:65:e8:71:8a:73:06:9c:ad:60:91:96:34:
3d:e9:8e:2c:f9:05:ed:97:ab:82:19:27:40:a7:b2:
a3:ee:40:88:b2:17:59:4a:52:ed:86:e8:f0:be:fc:
05:48:3d:7d:bb:84:70:e5:e3:be:de:d1:cc:4d:20:
04:2b:c7:b7:7c:22:21:06:1a:9b:e7:06:d8:92:ed:
3f:87:2f:dc:18:00:e1:89:56:0d:2b:0b:cc:f3:0c:
aa:2f:52:cf:15:30:21:84:bf:d6:4e:25:2b:1a:1d:
57:36:70:c8:bd:09:ad:88:76:a9:17:d0:57:37:42:
13:8e:d2:15:06:da:b7:58:e9:89:96:42:df:86:c5:
64:27:c2:f0:64:e9:2d:75:4c:86:0c:82:79:fa:cb:
91:40:8a:7e:46:a3:6c:a4:90:17:ff:c5:b4:27:a1:
07:0a:46:23:4c:1e:6b:7d:16:1e:a8:f6:7b:fc:8f:
93:28:20:a4:20:7f:8b:99:80:80:07:9a:ff:63:7e:
70:8f:e0:8e:3b:d8:62:5d:7c:b8:02:70:5d:d2:d7:
db:7b:77:a7:79:6c:85:99:78:9e:ee:11:dd:6a:f4:
31:23:68:ec:5d:e6:83:3c:2f:45:58:7c:48:1b:c4:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:56:66:F0:9C:06:6F:1A:D4:BE:03:88:8E:D9:F1:7B:40:22:63
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38332e302f32342d3234203d3e203534383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.83.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4f:6c:58:d8:f9:6f:25:87:66:4c:63:8c:2c:a5:9e:36:b4:
e3:62:25:01:55:64:74:1a:c4:11:c4:2c:92:88:db:65:c8:24:
4c:9c:14:79:1e:a9:21:79:1d:9c:40:96:28:57:24:96:ff:e6:
93:23:f7:6e:3d:fb:26:ce:2f:a7:4d:83:27:5d:79:da:6c:c5:
6c:6f:ae:85:23:5b:56:da:11:ea:6a:15:80:1d:62:26:f0:b6:
ba:d7:58:91:1c:44:c4:52:42:59:ef:79:92:b8:d0:f4:1e:b9:
e8:ba:3f:05:17:ba:f8:37:36:43:6b:d7:57:53:6d:6b:39:d1:
af:1a:81:fa:81:14:87:12:f5:61:f8:df:51:f9:9c:ec:44:4a:
e0:c9:db:33:6f:97:3e:0f:ba:e2:ab:68:48:8e:0e:11:0f:ca:
cd:b5:95:9e:7a:fa:43:0e:bd:b9:bb:d2:9f:b4:9b:3b:b5:96:
94:ce:2f:69:c6:24:27:a4:75:c0:d8:7f:0b:55:31:01:5c:fe:
13:30:0c:8e:02:85:e8:30:ac:f3:57:03:01:eb:49:eb:5a:93:
f3:08:ec:ad:66:b3:68:46:6b:6e:d0:4c:0a:5b:fc:5b:1c:0d:
c4:50:9a:40:41:be:f9:d3:a9:0e:cd:bc:7e:c6:ac:6d:a0:9d:
9f:7c:a0:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:30 2026 by rpki-client