
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33352e302f32342d3234203d3e203536303430.roa
File: 3138302e3138382e33352e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: YXFcPhdBnb1UZdq4GpKNJL/poC5TRMakiedO0X0yHf0=
Subject key identifier: 7C:94:F4:59:F4:D1:0F:FB:CC:9C:F7:14:9F:78:22:55:24:97:8A:8F
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 5ADCAC2C857E7CD907E1DBC9D13EAA5E015D8FB9
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33352e302f32342d3234203d3e203536303430.roa
Signing time: Fri 29 May 2026 08:15:17 +0000
ROA not before: Fri 29 May 2026 08:10:17 +0000
ROA not after: Fri 28 May 2027 08:15:17 +0000
asID: 56040
IP address blocks: 180.188.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dc:ac:2c:85:7e:7c:d9:07:e1:db:c9:d1:3e:aa:5e:01:5d:8f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:10:17 2026 GMT
Not After : May 28 08:15:17 2027 GMT
Subject: CN=7C94F459F4D10FFBCC9CF7149F78225524978A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:97:7a:6a:b9:dc:f8:10:97:ef:ad:d5:e0:
39:e2:cc:bd:28:f5:fa:e1:dc:e9:bb:12:01:3c:e7:
b1:1f:ba:6d:26:2a:f4:ac:fe:1a:a2:02:19:94:20:
da:38:70:e2:c0:31:3d:31:a3:0f:62:af:35:64:89:
60:01:0b:29:c5:97:c6:0d:46:7d:b1:cb:c2:ff:23:
25:de:83:a4:1c:96:a9:06:c2:d5:38:7d:7a:5e:95:
c3:d3:2b:5f:cd:8d:d1:a1:93:b8:24:24:1f:15:bf:
b2:ca:a6:a0:0e:35:4e:da:c7:33:7a:7f:1f:54:e6:
60:ac:85:7d:4a:23:54:2f:81:6b:47:11:cb:2c:db:
83:db:9f:10:8c:11:9d:de:1b:fa:f2:80:a1:44:c1:
c5:fb:e3:a8:12:f2:ad:0e:f3:26:ea:fb:22:7b:eb:
3f:f6:9b:c1:93:9c:14:d4:7d:74:06:2c:25:09:57:
55:e2:1e:44:4c:90:3f:91:97:7f:dc:70:ff:c4:f4:
df:6b:3a:c9:c9:71:08:72:9d:62:20:9c:78:f6:2c:
bb:ba:10:de:05:f0:27:87:e4:35:b6:5a:33:05:88:
a3:9d:45:40:5f:f4:d9:be:25:b5:d6:58:e4:e2:10:
52:e5:97:47:cb:77:21:ad:48:1a:37:9f:58:96:3a:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:F4:59:F4:D1:0F:FB:CC:9C:F7:14:9F:78:22:55:24:97:8A:8F
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33352e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:58:86:28:d7:b2:d5:55:0f:62:a7:f6:3a:2a:ec:3a:69:30:
fa:56:fa:19:e3:ff:75:28:be:a3:6d:b5:f7:07:ca:7f:72:a5:
86:42:0c:65:e5:35:61:0a:5a:35:1a:4b:f1:60:5c:b8:6f:bf:
2a:d0:76:21:17:43:1f:70:d7:33:0c:ec:1d:f6:25:61:0a:0d:
7a:91:f2:5a:da:7b:95:e8:05:66:af:3c:78:77:22:d8:a7:b8:
53:a3:cd:b6:25:c5:2f:15:f1:17:5f:47:35:9a:dc:e6:fa:6f:
5b:b8:ea:3e:65:66:27:69:90:06:7e:e0:3f:35:a7:cc:ae:06:
51:d1:f3:6d:4c:a7:10:49:bb:a3:10:47:02:5c:b6:0a:78:2e:
33:32:34:3a:be:7c:78:09:09:6c:57:2b:af:09:0b:72:5e:a1:
2c:2e:35:a1:95:5a:da:d0:65:2e:26:d1:ba:88:69:45:79:66:
e6:11:36:8a:83:79:42:de:91:2b:dd:b9:c6:8a:3b:45:07:89:
82:4f:d4:41:fe:6e:31:97:f7:53:ab:2f:01:9b:ab:8c:6c:21:
67:df:5d:e0:e0:02:38:5e:a4:93:0a:43:91:57:18:8e:0a:a9:
57:8a:35:5d:67:0f:df:14:33:41:5d:a3:6b:61:fe:1a:1d:2c:
5c:ce:90:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:09 2026 by rpki-client