$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33322e302f32322d3232203d3e20313333373735.roa File: 3138302e3138382e33322e302f32322d3232203d3e20313333373735.roa (raw, json) Hash identifier: Nm7qiEg9noEOdU8DtGZu0KRmX4dc2XX0cjM4ae4H1TE= Subject key identifier: 18:91:00:63:6A:BC:24:34:BF:96:8F:1D:2E:F6:93:E0:9F:FF:0E:3B Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Certificate serial: 67F47700F7D076B1B40282BD96BF4DE1959A6A2C Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33322e302f32322d3232203d3e20313333373735.roa Signing time: Fri 29 May 2026 08:15:18 +0000 ROA not before: Fri 29 May 2026 08:10:18 +0000 ROA not after: Fri 28 May 2027 08:15:18 +0000 asID: 133775 IP address blocks: 180.188.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f4:77:00:f7:d0:76:b1:b4:02:82:bd:96:bf:4d:e1:95:9a:6a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Validity Not Before: May 29 08:10:18 2026 GMT Not After : May 28 08:15:18 2027 GMT Subject: CN=189100636ABC2434BF968F1D2EF693E09FFF0E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:ef:9a:4e:d6:57:7a:d4:6e:7d:7f:51:ff: 43:6f:32:e0:23:96:b9:7f:88:cb:da:b0:e9:0d:90: 67:df:b1:1b:a6:80:78:9f:c7:9b:8d:95:b3:1e:2c: 92:f2:33:f9:fa:0b:ff:21:e3:ef:a6:d2:da:96:fe: ca:e5:70:03:25:65:4d:24:63:9b:81:82:d5:5e:43: 28:c6:7c:5a:5e:39:41:73:7c:3d:d2:fe:38:d3:50: c3:90:40:4a:27:2d:d9:e4:86:52:cb:06:3c:d3:99: 85:f8:ce:51:09:2d:4a:5f:43:87:4c:41:c4:43:de: 93:d2:90:f1:66:a7:46:63:10:c2:b3:1e:3d:dd:b4: f6:53:d6:54:50:3b:6a:f2:fc:c4:07:27:12:65:aa: a2:24:8b:be:3f:72:17:45:c7:d1:3e:54:9e:03:50: 61:81:af:02:a1:d7:a8:65:84:d6:15:79:f8:22:71: 70:9d:52:fa:33:a4:4e:39:ef:a2:aa:bf:92:16:4a: 6a:34:f2:5d:3e:f0:50:d9:13:3f:d0:23:d7:1f:88: 9b:00:1b:3e:ed:65:81:22:b1:16:4d:0e:a2:17:f2: 1e:eb:07:8c:55:26:27:8a:ae:f6:51:a2:92:5c:15: 53:39:24:e2:92:c8:dc:4f:06:f1:4d:4e:4a:f3:d6: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:00:63:6A:BC:24:34:BF:96:8F:1D:2E:F6:93:E0:9F:FF:0E:3B X509v3 Authority Key Identifier: keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33322e302f32322d3232203d3e20313333373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.188.32.0/22 Signature Algorithm: sha256WithRSAEncryption a0:2a:0c:50:aa:e6:35:c9:0b:c9:30:a8:53:98:4d:89:d7:ae: e1:05:9e:6f:f8:2a:f6:d4:e8:02:c9:09:08:5e:e1:7d:82:6b: d8:af:4e:ec:dd:e9:00:e9:c2:8a:f8:cd:c3:17:52:99:58:fd: d6:c9:24:6a:1a:88:a0:41:f0:f0:6c:01:e1:65:23:da:29:35: d2:6d:54:47:a7:93:89:f7:ed:5d:77:93:3b:63:51:d1:8d:82: b1:1b:44:89:90:4f:f2:9c:99:cc:d4:50:65:11:3f:dd:dc:99: 87:c2:09:19:48:40:27:21:07:ff:ff:57:9a:de:50:e7:5e:d7: 20:c6:ab:e7:df:30:56:33:79:44:6e:13:3c:4e:dc:c0:0e:a3: 08:f2:ce:65:72:35:80:2a:62:11:7b:6f:9a:16:78:25:75:56: 7b:a5:f0:e2:ba:4b:7e:61:11:15:2e:00:2b:52:8a:79:65:a3: 7c:92:72:f5:c6:78:54:8d:1f:b4:56:a7:3a:4e:7a:0d:4f:91: d1:52:6e:20:b5:60:c4:82:c1:89:dd:5c:49:bd:94:6e:98:a5: c6:00:a7:42:93:63:02:b6:7d:0f:c4:cc:13:87:04:d0:e6:d4: c3:e7:4e:b3:de:58:22:7a:cd:86:8f:cb:ff:65:9f:e3:4e:47: 67:32:77:49 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZ/R3APfQdrG0AoK9lr9N4ZWaaiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC MzE4QUJGOTAeFw0yNjA1MjkwODEwMThaFw0yNzA1MjgwODE1MThaMDMxMTAvBgNV BAMTKDE4OTEwMDYzNkFCQzI0MzRCRjk2OEYxRDJFRjY5M0UwOUZGRjBFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIPO+aTtZXetRufX9R/0NvMuAj lrl/iMvasOkNkGffsRumgHifx5uNlbMeLJLyM/n6C/8h4++m0tqW/srlcAMlZU0k Y5uBgtVeQyjGfFpeOUFzfD3S/jjTUMOQQEonLdnkhlLLBjzTmYX4zlEJLUpfQ4dM QcRD3pPSkPFmp0ZjEMKzHj3dtPZT1lRQO2ry/MQHJxJlqqIki74/chdFx9E+VJ4D UGGBrwKh16hlhNYVefgicXCdUvozpE4576Kqv5IWSmo08l0+8FDZEz/QI9cfiJsA Gz7tZYEisRZNDqIX8h7rB4xVJieKrvZRopJcFVM5JOKSyNxPBvFNTkrz1tVZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGJEAY2q8JDS/lo8dLvaT4J//DjswHwYDVR0j BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0 NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5NzQyNTIxOTQxMDMyOTcvMC8zMTM4MzAyZTMx MzgzODJlMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArS8IDANBgkqhkiG9w0BAQsFAAOCAQEAoCoMUKrmNckLyTCoU5hN ideu4QWeb/gq9tToAskJCF7hfYJr2K9O7N3pAOnCivjNwxdSmVj91skkahqIoEHw 8GwB4WUj2ik10m1UR6eTifftXXeTO2NR0Y2CsRtEiZBP8pyZzNRQZRE/3dyZh8IJ GUhAJyEH//9Xmt5Q517XIMar598wVjN5RG4TPE7cwA6jCPLOZXI1gCpiEXtvmhZ4 JXVWe6Xw4rpLfmERFS4AK1KKeWWjfJJy9cZ4VI0ftFanOk56DU+R0VJuILVgxILB id1cSb2UbpilxgCnQpNjArZ9D8TME4cE0ObUw+dOs95YInrNho/L/2Wf405HZzJ3 SQ== -----END CERTIFICATE-----Generated at Fri May 29 22:57:46 2026 by rpki-client