$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33342e302f32342d3234203d3e203536303430.roa File: 3138302e3138382e33342e302f32342d3234203d3e203536303430.roa (raw, json) Hash identifier: XAvFiT9/yQkH8srIUbuA83NBZ7s/rjbj9zDXOfkFURk= Subject key identifier: 3B:07:47:CD:C9:7C:92:90:DC:39:92:71:80:FC:44:81:7F:20:FD:EF Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Certificate serial: 01C38E4D7151424A2C75243025C7D212A269ACB3 Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33342e302f32342d3234203d3e203536303430.roa Signing time: Fri 29 May 2026 08:15:18 +0000 ROA not before: Fri 29 May 2026 08:10:18 +0000 ROA not after: Fri 28 May 2027 08:15:18 +0000 asID: 56040 IP address blocks: 180.188.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c3:8e:4d:71:51:42:4a:2c:75:24:30:25:c7:d2:12:a2:69:ac:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Validity Not Before: May 29 08:10:18 2026 GMT Not After : May 28 08:15:18 2027 GMT Subject: CN=3B0747CDC97C9290DC39927180FC44817F20FDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:77:c8:93:66:83:fe:92:88:ce:cc:c1:a3: 45:75:cd:9b:a1:0f:62:cc:49:43:f6:ce:bd:e8:9b: 4f:cd:4e:a9:58:e8:20:e3:ea:c8:34:f2:cc:85:e6: 69:b7:58:a5:15:5a:0e:05:18:3b:af:47:f7:07:ba: 62:44:e1:3f:4a:55:a8:50:be:00:bf:76:b1:61:cf: 45:6b:6c:02:bc:b5:d9:ec:a1:cf:e4:d8:d3:75:f7: 07:4a:85:97:24:7a:a0:f6:63:fb:a2:54:cc:6e:39: 90:87:10:e8:b4:af:b5:84:94:26:4e:67:55:0a:e2: 62:24:17:fc:4e:3e:69:80:a4:93:b1:ca:0c:be:3d: c3:9a:57:58:34:7f:f1:bc:b5:52:9f:aa:b6:01:d6: 4e:ca:87:ac:c4:92:1b:6f:a1:56:39:96:b9:d3:27: e6:0c:f8:37:32:1e:f1:8e:30:af:50:05:2b:5d:9b: 3b:8e:47:83:47:f1:b5:31:32:1f:83:82:10:07:3b: c0:9b:6a:7c:06:22:c1:1d:c2:e6:97:b6:17:ba:ec: 2e:a3:62:07:41:81:08:a6:ce:39:c9:19:46:d2:17: f4:fc:40:30:6b:d8:81:2f:4c:55:39:83:59:9b:f5: a9:77:a3:2a:7c:3d:7a:72:18:be:ba:94:31:8a:32: f5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:07:47:CD:C9:7C:92:90:DC:39:92:71:80:FC:44:81:7F:20:FD:EF X509v3 Authority Key Identifier: keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33342e302f32342d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.188.34.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:9f:e1:3b:2e:c3:6c:5e:52:a0:e4:c4:c4:94:b5:82:1d:83: 16:20:19:ab:f3:9b:36:b4:d7:25:6c:a3:6c:5b:dc:e2:2d:1f: b9:26:b3:6b:ef:04:f6:6a:d6:8f:3c:4d:20:15:5a:7e:a5:38: 50:4c:fb:18:c4:5d:18:9c:69:63:ed:76:3c:07:cb:a4:2d:97: e3:cc:b9:ee:4d:4c:43:40:ad:ea:aa:e1:7c:b5:10:50:7f:c7: 9c:bb:49:33:9c:b8:60:92:a1:55:2c:0a:19:e4:67:f7:8d:75: ba:98:b5:5c:08:22:43:e6:6b:ae:1f:8f:6c:80:7a:27:78:23: 72:16:e3:84:49:2b:dc:3d:bc:07:c9:1f:57:ed:47:79:ed:4b: 09:e2:eb:89:e4:14:d3:fb:1b:32:c2:f0:f2:7b:ef:e2:b6:65: 2a:a4:ea:54:52:5e:ae:15:59:09:13:7c:81:eb:11:fd:eb:b1: 75:7d:21:4e:6d:16:30:f8:cf:9e:b9:ad:2e:93:12:32:65:5c: f6:87:ce:8f:4f:e3:d5:3f:cd:37:4b:41:06:11:af:d8:1e:5e: aa:11:cd:a9:e4:93:9b:06:2a:a5:db:fd:ad:3a:de:d8:e4:7f: 83:7b:90:a9:3e:25:e2:c4:06:6b:21:df:9f:d1:0b:92:02:48: 11:39:4b:7d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAcOOTXFRQkosdSQwJcfSEqJprLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC MzE4QUJGOTAeFw0yNjA1MjkwODEwMThaFw0yNzA1MjgwODE1MThaMDMxMTAvBgNV BAMTKDNCMDc0N0NEQzk3QzkyOTBEQzM5OTI3MTgwRkM0NDgxN0YyMEZERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vnfIk2aD/pKIzszBo0V1zZuh D2LMSUP2zr3om0/NTqlY6CDj6sg08syF5mm3WKUVWg4FGDuvR/cHumJE4T9KVahQ vgC/drFhz0VrbAK8tdnsoc/k2NN19wdKhZckeqD2Y/uiVMxuOZCHEOi0r7WElCZO Z1UK4mIkF/xOPmmApJOxygy+PcOaV1g0f/G8tVKfqrYB1k7Kh6zEkhtvoVY5lrnT J+YM+DcyHvGOMK9QBStdmzuOR4NH8bUxMh+DghAHO8CbanwGIsEdwuaXthe67C6j YgdBgQimzjnJGUbSF/T8QDBr2IEvTFU5g1mb9al3oyp8PXpyGL66lDGKMvWRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOwdHzcl8kpDcOZJxgPxEgX8g/e8wHwYDVR0j BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0 NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk3NDI1MjE5NDEwMzI5Ny8wLzMxMzgzMDJlMzEz ODM4MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALS8IjANBgkqhkiG9w0BAQsFAAOCAQEAbJ/hOy7DbF5SoOTExJS1gh2D FiAZq/ObNrTXJWyjbFvc4i0fuSaza+8E9mrWjzxNIBVafqU4UEz7GMRdGJxpY+12 PAfLpC2X48y57k1MQ0Ct6qrhfLUQUH/HnLtJM5y4YJKhVSwKGeRn9411upi1XAgi Q+Zrrh+PbIB6J3gjchbjhEkr3D28B8kfV+1Hee1LCeLrieQU0/sbMsLw8nvv4rZl KqTqVFJerhVZCRN8gesR/euxdX0hTm0WMPjPnrmtLpMSMmVc9ofOj0/j1T/NN0tB BhGv2B5eqhHNqeSTmwYqpdv9rTre2OR/g3uQqT4l4sQGayHfn9ELkgJIETlLfQ== -----END CERTIFICATE-----Generated at Fri May 29 23:53:25 2026 by rpki-client