$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33362e302f32322d3232203d3e20313333373735.roa File: 3138302e3138382e33362e302f32322d3232203d3e20313333373735.roa (raw, json) Hash identifier: AM8/hm5xFgcjqxYgp/b4fHMSVvP9lHin8NpBQ6GaOvg= Subject key identifier: 24:8C:7E:86:AF:82:17:23:44:4E:4A:DA:5E:52:0C:87:BE:F4:8D:B3 Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Certificate serial: 72D77728B71BD686918E1F866075A64DD1C4F758 Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33362e302f32322d3232203d3e20313333373735.roa Signing time: Fri 29 May 2026 06:00:25 +0000 ROA not before: Fri 29 May 2026 05:55:25 +0000 ROA not after: Fri 28 May 2027 06:00:25 +0000 asID: 133775 IP address blocks: 180.188.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d7:77:28:b7:1b:d6:86:91:8e:1f:86:60:75:a6:4d:d1:c4:f7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Validity Not Before: May 29 05:55:25 2026 GMT Not After : May 28 06:00:25 2027 GMT Subject: CN=248C7E86AF821723444E4ADA5E520C87BEF48DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:25:c2:df:cf:53:ea:cb:fb:d9:1e:83:d4: 14:c5:d5:66:47:b7:5c:fd:e9:47:be:d0:cd:7f:66: 83:53:b3:3c:b7:2a:f7:ba:82:e7:7f:19:0e:38:4e: fa:ba:f1:29:0b:8e:87:5f:e8:41:74:a7:7a:90:d2: 54:8e:c8:53:96:42:3b:9e:d9:a6:07:64:8b:dc:9c: e1:a4:f5:03:81:92:b0:41:ba:4a:ad:dd:67:1c:4a: 72:42:cb:cb:8f:d7:e4:1c:3b:0d:62:4c:43:a0:0e: ea:74:ff:32:d2:18:f6:6b:b5:ab:74:e8:2c:f8:f6: 24:29:24:22:7c:dd:b3:46:d4:fb:d8:fa:6b:b5:13: ef:bd:6d:c9:76:e0:dd:f1:91:b0:fb:88:fa:f0:8b: 7c:88:98:c5:29:0b:e7:93:4e:2d:e1:e7:65:4b:10: 15:28:6d:15:20:8c:4b:62:d7:8c:27:4a:97:15:5b: 57:23:16:fb:a0:39:3c:ac:52:ff:d2:fa:d0:ea:48: 04:b0:77:ec:bd:a3:d9:33:82:66:d8:89:fc:19:c0: ee:30:c3:65:2d:ad:12:f0:b7:aa:f6:1c:3f:1b:02: 2a:b7:dc:9f:75:4e:93:27:ef:b1:3d:4c:ca:84:33: 4e:94:43:d5:ac:ce:95:8b:db:30:a8:e4:e6:5f:d2: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8C:7E:86:AF:82:17:23:44:4E:4A:DA:5E:52:0C:87:BE:F4:8D:B3 X509v3 Authority Key Identifier: keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33362e302f32322d3232203d3e20313333373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.188.36.0/22 Signature Algorithm: sha256WithRSAEncryption 91:cd:db:d6:c7:98:24:51:d7:c4:81:fd:a7:9a:10:8b:02:f3: 8c:56:7c:35:4f:d2:b9:29:18:40:33:b4:cb:77:03:6e:1e:08: bf:bf:66:87:17:c4:6a:0b:24:53:ba:12:77:58:c1:0c:aa:2d: d3:a6:18:ca:89:88:70:2b:4b:1e:95:56:21:69:b4:38:13:dc: 5c:12:53:49:30:76:64:e2:4b:e6:e2:43:e1:e1:e7:68:67:3f: 7d:04:58:78:bf:11:28:ea:00:36:81:6d:cc:e3:ca:b8:93:39: b8:99:10:80:f7:23:10:89:5d:9a:01:39:6e:8e:b7:e4:ee:30: 1b:ff:d3:b7:b5:c9:29:28:e3:0f:5b:9f:ae:24:01:eb:c8:ec: 40:8b:09:d5:59:b2:85:d5:97:58:17:3f:a6:af:2b:a2:de:3b: 01:6a:0b:3e:b3:1f:9e:2d:41:ac:e4:5d:4f:d2:cc:75:16:85: cb:33:06:51:5c:3c:a6:cb:12:86:c1:f8:94:93:81:09:e6:b7: 6e:a8:12:ee:be:9e:3b:7f:4a:24:a2:26:0b:5d:c8:74:b3:04: 43:32:7a:a3:b3:2c:fb:9c:da:f6:3d:5c:80:6d:89:87:53:ec: 1a:54:b8:93:79:c1:bd:34:4a:1e:fe:16:86:36:3e:fb:0d:dc: de:cb:43:c6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUctd3KLcb1oaRjh+GYHWmTdHE91gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC MzE4QUJGOTAeFw0yNjA1MjkwNTU1MjVaFw0yNzA1MjgwNjAwMjVaMDMxMTAvBgNV BAMTKDI0OEM3RTg2QUY4MjE3MjM0NDRFNEFEQTVFNTIwQzg3QkVGNDhEQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVciXC389T6sv72R6D1BTF1WZH t1z96Ue+0M1/ZoNTszy3Kve6gud/GQ44Tvq68SkLjodf6EF0p3qQ0lSOyFOWQjue 2aYHZIvcnOGk9QOBkrBBukqt3WccSnJCy8uP1+QcOw1iTEOgDup0/zLSGPZrtat0 6Cz49iQpJCJ83bNG1PvY+mu1E++9bcl24N3xkbD7iPrwi3yImMUpC+eTTi3h52VL EBUobRUgjEti14wnSpcVW1cjFvugOTysUv/S+tDqSASwd+y9o9kzgmbYifwZwO4w w2UtrRLwt6r2HD8bAiq33J91TpMn77E9TMqEM06UQ9WszpWL2zCo5OZf0pMxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUJIx+hq+CFyNETkraXlIMh770jbMwHwYDVR0j BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0 NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5NzQyNTIxOTQxMDMyOTcvMC8zMTM4MzAyZTMx MzgzODJlMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEArS8JDANBgkqhkiG9w0BAQsFAAOCAQEAkc3b1seYJFHXxIH9p5oQ iwLzjFZ8NU/SuSkYQDO0y3cDbh4Iv79mhxfEagskU7oSd1jBDKot06YYyomIcCtL HpVWIWm0OBPcXBJTSTB2ZOJL5uJD4eHnaGc/fQRYeL8RKOoANoFtzOPKuJM5uJkQ gPcjEIldmgE5bo635O4wG//Tt7XJKSjjD1ufriQB68jsQIsJ1VmyhdWXWBc/pq8r ot47AWoLPrMfni1BrORdT9LMdRaFyzMGUVw8pssShsH4lJOBCea3bqgS7r6eO39K JKImC13IdLMEQzJ6o7Ms+5za9j1cgG2Jh1PsGlS4k3nBvTRKHv4WhjY++w3c3stD xg== -----END CERTIFICATE-----Generated at Fri May 29 23:54:28 2026 by rpki-client