$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3235203d3e2034383337.roa File: 3138302e3138382e33332e302f32342d3235203d3e2034383337.roa (raw, json) Hash identifier: bKh3mpdeVmjtGsOR3kFjPXu9Erl4a/gsHp9gRSsida8= Subject key identifier: 91:B8:F7:07:47:59:DF:D8:AA:B0:DB:9B:A3:02:88:57:45:FF:76:7B Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Certificate serial: 50D859F97C5B48FE5A4446C45B57FFE8DB5443BD Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3235203d3e2034383337.roa Signing time: Fri 29 May 2026 08:15:18 +0000 ROA not before: Fri 29 May 2026 08:10:18 +0000 ROA not after: Fri 28 May 2027 08:15:18 +0000 asID: 4837 IP address blocks: 180.188.33.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d8:59:f9:7c:5b:48:fe:5a:44:46:c4:5b:57:ff:e8:db:54:43:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Validity Not Before: May 29 08:10:18 2026 GMT Not After : May 28 08:15:18 2027 GMT Subject: CN=91B8F7074759DFD8AAB0DB9BA302885745FF767B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:64:dc:48:24:1a:e1:39:16:17:7b:c3:c2: b8:47:04:70:8c:72:b2:ee:8f:fd:ca:b7:c8:93:27: ca:30:c0:04:73:76:6c:80:a3:05:41:76:3c:b6:de: 83:28:77:aa:42:ce:27:8f:38:25:73:c3:20:de:e3: 28:72:2f:26:2e:c2:16:e8:6d:04:7b:2e:b1:07:ca: 4f:a1:c5:3e:1e:13:1c:73:41:b9:53:bd:52:cc:de: 23:17:86:a6:da:85:30:86:a4:6b:92:27:24:f1:be: f1:ad:a2:97:4c:c2:89:bf:36:fc:14:cc:a0:3c:48: 22:b7:b1:7e:6c:33:9f:8a:9e:72:90:53:0a:e5:1d: 19:5a:24:2c:79:a2:d0:1c:f0:42:04:54:5b:d6:39: 64:8e:3e:d2:9d:5b:6b:e8:0f:74:e3:f1:07:ae:f1: 91:5a:e0:97:57:03:d5:5e:02:72:7a:aa:99:01:f0: f8:b0:76:a6:d3:9d:8f:3f:62:91:db:b2:d8:41:38: 4e:5f:4d:07:aa:0d:48:9d:46:d7:e6:e2:8c:45:1e: ef:66:83:f3:76:2b:eb:6e:b7:92:00:04:f9:04:17: 68:31:42:e9:87:2f:91:a9:c8:8c:d0:73:cf:6d:b7: b4:57:99:07:06:27:2e:5b:0d:75:4a:c9:35:e2:80: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B8:F7:07:47:59:DF:D8:AA:B0:DB:9B:A3:02:88:57:45:FF:76:7B X509v3 Authority Key Identifier: keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3235203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.188.33.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b3:49:1e:e5:3b:f5:07:59:6c:3f:23:25:7a:aa:4a:71:b1: ff:1c:81:19:6f:eb:e7:05:8e:bb:b0:f3:2e:50:da:22:e3:13: 7a:2b:1c:22:6d:35:73:ca:c9:d4:09:95:60:92:33:ec:c2:eb: 49:37:67:c2:f4:ca:d2:48:a3:94:da:e5:cb:47:6d:9d:02:b2: 5f:2d:8e:fe:05:ec:0e:3f:5e:32:49:8e:ae:09:e9:b9:60:0c: 4b:c8:36:55:52:64:3f:29:7c:88:fc:c4:16:7d:48:4a:de:2b: 40:d9:bf:cf:4f:19:3b:7b:40:1a:ab:92:13:4d:e9:89:c1:65: 69:fd:dc:8b:64:cd:9a:8c:fe:4f:23:f7:4c:10:90:dd:35:ad: 84:cb:88:86:66:ac:7a:52:59:cf:ff:be:13:08:b4:89:91:64: e2:4b:f4:eb:be:1e:30:80:ca:9a:f8:81:a2:84:32:9c:0c:d3: d0:4e:b7:93:0a:7b:c1:50:dc:34:30:2a:82:ad:d0:01:0d:26: 12:3d:1c:b3:89:87:a6:9f:cd:b6:e6:38:a5:d4:ad:ff:61:ff: cc:d1:63:70:7d:53:4f:1c:06:46:8c:a0:79:d2:fb:c4:3d:a7: a5:82:5d:a5:0c:41:f6:44:fb:52:e4:66:b4:2d:77:e4:33:db: e4:6f:ca:60 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUNhZ+XxbSP5aREbEW1f/6NtUQ70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC MzE4QUJGOTAeFw0yNjA1MjkwODEwMThaFw0yNzA1MjgwODE1MThaMDMxMTAvBgNV BAMTKDkxQjhGNzA3NDc1OURGRDhBQUIwREI5QkEzMDI4ODU3NDVGRjc2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6v2TcSCQa4TkWF3vDwrhHBHCM crLuj/3Kt8iTJ8owwARzdmyAowVBdjy23oMod6pCziePOCVzwyDe4yhyLyYuwhbo bQR7LrEHyk+hxT4eExxzQblTvVLM3iMXhqbahTCGpGuSJyTxvvGtopdMwom/NvwU zKA8SCK3sX5sM5+KnnKQUwrlHRlaJCx5otAc8EIEVFvWOWSOPtKdW2voD3Tj8Qeu 8ZFa4JdXA9VeAnJ6qpkB8PiwdqbTnY8/YpHbsthBOE5fTQeqDUidRtfm4oxFHu9m g/N2K+tut5IABPkEF2gxQumHL5GpyIzQc89tt7RXmQcGJy5bDXVKyTXigDBRAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUkbj3B0dZ39iqsNubowKIV0X/dnswHwYDVR0j BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0 NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3LzAvMzEzODMwMmUzMTM4 MzgyZTMzMzMyZTMwMmYzMjM0MmQzMjM1MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALS8ITANBgkqhkiG9w0BAQsFAAOCAQEAULNJHuU79QdZbD8jJXqqSnGx/xyB GW/r5wWOu7DzLlDaIuMTeiscIm01c8rJ1AmVYJIz7MLrSTdnwvTK0kijlNrly0dt nQKyXy2O/gXsDj9eMkmOrgnpuWAMS8g2VVJkPyl8iPzEFn1ISt4rQNm/z08ZO3tA GquSE03picFlaf3ci2TNmoz+TyP3TBCQ3TWthMuIhmaselJZz/++Ewi0iZFk4kv0 674eMIDKmviBooQynAzT0E63kwp7wVDcNDAqgq3QAQ0mEj0cs4mHpp/NtuY4pdSt /2H/zNFjcH1TTxwGRoygedL7xD2npYJdpQxB9kT7UuRmtC135DPb5G/KYA== -----END CERTIFICATE-----Generated at Fri May 29 22:56:49 2026 by rpki-client