
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33342e302f32342d3235203d3e2034383337.roa
File: 3138302e3138382e33342e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: mN3bdLDpccMX8hXX0occn17Ewsqt0XrhU3WkwOW4Hr0=
Subject key identifier: D6:95:92:45:88:EE:B2:61:F4:22:AC:7D:B0:DD:61:A4:0C:2A:02:14
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 28416DA04BF85F607B9883CF7A6234824F4B0921
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33342e302f32342d3235203d3e2034383337.roa
Signing time: Fri 29 May 2026 08:15:17 +0000
ROA not before: Fri 29 May 2026 08:10:17 +0000
ROA not after: Fri 28 May 2027 08:15:17 +0000
asID: 4837
IP address blocks: 180.188.34.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:41:6d:a0:4b:f8:5f:60:7b:98:83:cf:7a:62:34:82:4f:4b:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:10:17 2026 GMT
Not After : May 28 08:15:17 2027 GMT
Subject: CN=D695924588EEB261F422AC7DB0DD61A40C2A0214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:8a:69:5e:ff:c2:fd:41:c5:15:ad:71:bb:
aa:5b:06:1c:df:87:07:9d:a3:cc:89:92:90:42:9e:
d5:ef:63:e2:4a:92:af:41:65:b8:a4:44:71:17:a7:
6c:1c:55:73:a9:c0:3e:95:13:fc:62:23:9e:56:5e:
92:fb:47:57:b9:5f:e4:bd:87:e5:54:93:d1:04:f8:
d1:25:ad:21:a4:10:b9:9d:13:04:17:5e:12:3d:c8:
83:ff:c6:58:47:c4:90:d6:e3:1f:59:67:52:86:0e:
10:19:e9:92:4a:b0:02:a7:8d:d7:6f:ed:2b:2b:3f:
85:b4:91:c4:73:14:68:47:12:eb:f3:b1:27:63:5c:
28:c1:d2:04:39:5f:b5:c4:39:4b:e5:05:b2:29:b9:
6d:a7:19:d8:02:7a:21:4b:44:66:95:34:cc:15:bc:
10:b3:9f:1b:b0:12:00:4f:d5:06:3d:b8:04:ac:a5:
67:ea:ae:3e:f1:11:0d:18:03:bb:d9:01:47:99:7f:
1f:db:b9:8a:56:0d:67:b3:92:dc:d4:81:12:88:4c:
a6:94:84:d0:5f:d6:31:8a:a3:ad:a3:ee:94:f3:97:
4c:ab:0d:c4:0d:aa:d2:5f:2a:0d:31:d5:a9:82:5f:
57:6d:f0:5a:0f:6d:ae:48:7f:ae:fb:75:d9:f3:06:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:92:45:88:EE:B2:61:F4:22:AC:7D:B0:DD:61:A4:0C:2A:02:14
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33342e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.34.0/24
Signature Algorithm: sha256WithRSAEncryption
99:82:e8:f1:9b:5a:8c:df:8b:f0:56:1e:21:ef:df:8b:3a:2c:
5e:4d:8f:74:c2:41:31:65:4b:73:bb:0f:08:90:6c:68:e8:1e:
93:d7:7b:7e:65:f4:ba:73:d2:71:da:fc:e5:2a:73:d1:62:6c:
cd:b1:19:fd:93:90:5e:95:66:6a:a0:a9:77:76:2b:33:48:31:
21:0f:91:b7:81:7c:f6:b4:ca:81:ac:c2:81:e9:e3:e9:97:d3:
49:61:fe:4f:af:65:62:97:f5:bc:a9:f8:96:47:89:23:7c:a4:
43:fb:46:3f:30:c3:fa:31:10:dc:70:b9:41:34:9e:30:b5:5e:
32:1e:c4:5b:ab:e6:f3:44:89:fe:7f:73:aa:ef:1e:e6:55:62:
20:cc:3d:ab:02:c8:ca:75:cb:42:b4:27:bd:3c:ab:2e:19:28:
28:f8:bb:14:dd:7f:04:57:21:9f:74:d7:a4:6e:78:be:9d:dc:
13:21:c2:a6:f6:71:ad:2b:c5:73:5e:ac:d7:d6:86:19:62:3e:
89:f2:07:39:bd:48:12:5a:0a:82:4e:07:9d:bc:41:0f:f7:61:
87:45:60:eb:c3:25:84:00:83:2b:9c:ff:06:c7:5e:25:d7:1f:
4d:5e:d7:58:9a:4d:08:d8:6c:3c:0e:d2:8a:83:b6:53:ba:12:
fa:f3:72:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:01 2026 by rpki-client