
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203536303430.roa
File: 3138302e3138382e33332e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: cw0ywAqZMy8FxegpoL1RcvlMuZs4lETQrYE6lcg0Qiw=
Subject key identifier: C9:A6:DD:2A:05:5E:75:4B:BD:52:DF:F5:34:D7:ED:20:0B:68:88:CF
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 2EB6CC7C88C9285E562BF37847301CD1B43A125C
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203536303430.roa
Signing time: Fri 29 May 2026 08:15:17 +0000
ROA not before: Fri 29 May 2026 08:10:17 +0000
ROA not after: Fri 28 May 2027 08:15:17 +0000
asID: 56040
IP address blocks: 180.188.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b6:cc:7c:88:c9:28:5e:56:2b:f3:78:47:30:1c:d1:b4:3a:12:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:10:17 2026 GMT
Not After : May 28 08:15:17 2027 GMT
Subject: CN=C9A6DD2A055E754BBD52DFF534D7ED200B6888CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:ed:17:ce:2a:f8:cd:19:53:74:61:48:11:
13:09:0f:78:a9:ae:ae:e4:0c:2f:b9:f9:38:79:5a:
ba:98:1a:9b:ae:a8:ba:93:25:ef:56:de:4e:c4:06:
9a:4d:c2:0e:e8:9a:db:6a:60:35:bb:da:02:97:27:
c9:0f:27:00:49:3b:d1:28:4a:31:4b:e4:81:c6:f1:
11:b2:82:c3:af:28:c3:90:81:a4:4e:b5:aa:28:f9:
49:73:46:98:b1:12:86:ae:f9:32:7c:ad:12:75:0b:
70:96:5e:f0:ca:5d:24:2a:6c:94:b5:ce:4b:9c:b0:
d1:2f:14:2e:da:67:13:47:d4:bd:5c:10:7e:ca:97:
24:2e:af:38:59:ec:97:38:73:95:42:d5:b2:7e:a7:
bc:dd:83:a1:ad:98:f2:0d:69:2c:93:d8:39:4e:09:
ac:b7:22:26:8b:d6:71:1a:b2:1a:d3:21:48:aa:4f:
54:ad:ec:b2:6e:28:fb:7f:ae:49:4b:c9:70:94:6e:
dd:42:39:aa:17:0e:14:72:09:83:09:8b:af:75:2d:
a3:40:ec:e3:95:cb:dc:9e:27:80:9f:4a:ea:fa:88:
7c:cd:d3:49:e9:d8:77:3c:12:ee:be:03:06:0e:2a:
1d:81:0f:cc:e1:1c:02:79:61:d5:7f:89:d1:61:38:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:DD:2A:05:5E:75:4B:BD:52:DF:F5:34:D7:ED:20:0B:68:88:CF
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.33.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c5:9f:c3:c0:77:d4:2d:3c:69:a0:b7:be:54:67:e0:55:23:
da:7f:8e:79:a2:1c:b7:8f:33:45:11:4f:97:0e:23:c7:85:9a:
8c:ab:36:fd:47:c5:94:99:1b:03:74:84:ed:ea:72:9c:04:74:
6b:b0:85:09:18:32:88:4f:b3:68:3e:aa:70:c2:b7:aa:fe:6d:
20:c7:82:1e:fe:94:dc:bf:25:41:15:05:c0:fe:76:9a:98:22:
c0:86:c4:01:03:a5:80:f4:d1:41:99:1d:94:aa:40:f4:e3:8c:
20:74:b8:9a:4e:d4:83:28:da:27:3d:b3:d7:fc:94:60:e8:4b:
3b:a2:6b:2d:e4:58:09:73:95:62:d9:df:9b:57:44:b7:7c:11:
78:7e:c3:c5:e9:38:a8:f1:03:fe:8f:07:fd:81:9f:19:3c:52:
83:2b:04:5e:36:6a:0c:d0:bf:79:4d:f8:d9:e1:37:ba:a4:a5:
89:20:8f:04:93:3f:33:c5:61:57:4f:ce:03:77:95:30:05:6d:
b4:98:56:bb:04:4c:7b:1f:c3:3f:17:07:ea:61:ad:b2:2a:68:
7e:3c:80:dd:e3:3c:2f:14:37:a3:95:85:14:42:0d:2c:48:23:
8c:7f:f9:ce:91:8f:b0:fc:b1:ec:41:53:d2:a4:49:69:56:83:
d8:e9:7f:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:47 2026 by rpki-client