
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3234203d3e203536303430.roa
File: 3138302e3138382e33372e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: knUYBqZm3sH4hvAyKiaOjr4ffhi7DKH9NhBHGugbS84=
Subject key identifier: 42:E7:B6:0F:7B:A0:0D:47:EC:11:03:4C:7A:49:F9:BD:A1:DD:E3:65
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 6AF9916DF14DD120F7D94F4D82F946F99FF26F3C
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3234203d3e203536303430.roa
Signing time: Fri 29 May 2026 06:00:25 +0000
ROA not before: Fri 29 May 2026 05:55:25 +0000
ROA not after: Fri 28 May 2027 06:00:25 +0000
asID: 56040
IP address blocks: 180.188.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f9:91:6d:f1:4d:d1:20:f7:d9:4f:4d:82:f9:46:f9:9f:f2:6f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:55:25 2026 GMT
Not After : May 28 06:00:25 2027 GMT
Subject: CN=42E7B60F7BA00D47EC11034C7A49F9BDA1DDE365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:67:e1:39:19:ce:0f:b1:8e:b4:c4:5f:04:
68:66:82:2d:28:36:a7:17:03:9b:46:e6:cd:6d:80:
8d:a0:d5:87:e9:03:3a:60:09:03:95:fe:21:c1:a9:
30:21:03:82:14:60:fc:f9:e9:45:3a:7b:ec:7a:0a:
fa:22:4c:3d:0f:79:d6:ba:00:12:e7:4e:0f:48:27:
ff:68:f7:50:66:77:d9:c2:e5:a0:af:77:fa:dd:41:
1c:2c:bf:30:db:1a:ab:bc:34:28:40:43:f3:e8:06:
b9:7b:f5:71:f7:97:df:74:90:df:ab:82:8a:f1:8f:
fc:b5:7a:ff:6c:27:c7:cf:03:68:20:b8:3a:9f:f3:
d4:c9:69:45:8a:e3:05:f2:b9:0b:cb:46:05:da:22:
b9:b3:1d:b6:45:e2:b6:b0:2a:33:c0:42:e9:56:13:
61:15:96:14:36:0d:a1:0c:e7:c8:83:31:db:a4:12:
dd:9e:a1:99:ae:dd:a7:8e:b9:4a:96:7a:8d:c1:2b:
f1:9d:b3:f9:b6:75:50:91:6d:36:83:d7:5e:a3:56:
cc:06:4f:69:3d:01:53:a1:65:79:45:8c:e7:ed:bc:
34:b0:5e:66:7e:15:c1:dd:7f:87:fb:a3:f1:c5:d5:
56:97:39:c8:bb:1e:56:43:65:5e:fe:e2:e0:16:2a:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:B6:0F:7B:A0:0D:47:EC:11:03:4C:7A:49:F9:BD:A1:DD:E3:65
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.37.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9d:3a:d2:ad:3f:89:6b:f6:f9:fb:40:c0:9a:80:8b:d1:e5:
ec:f7:be:84:be:26:71:1c:98:a8:72:22:51:94:2d:da:e9:7a:
b2:88:53:b6:8a:77:2c:60:e5:3b:66:a8:18:16:30:c6:bd:6f:
ce:59:b0:84:0d:a7:5c:5f:a9:18:02:36:fc:49:5c:c0:4c:a9:
38:9d:82:9d:38:9b:c9:05:fd:bf:d1:e7:f0:22:72:76:91:25:
04:c9:fd:64:3b:51:f8:20:71:11:17:93:ef:95:05:2a:2d:f8:
b1:fb:8b:6e:7b:f7:66:96:68:4d:17:9a:b5:fd:16:b8:15:1c:
37:36:7b:07:4b:ce:a0:8f:53:ca:3c:d3:0d:a5:d2:71:6e:a4:
9e:4b:64:fe:ca:e4:14:79:be:d0:70:64:b1:19:d0:38:18:ed:
66:be:5b:f5:9f:56:29:a5:a0:d4:68:e5:cb:ee:7d:ee:f1:52:
1d:d4:80:da:30:e6:ea:90:ce:fa:9f:99:dc:55:a8:8f:7e:73:
bb:84:d9:4a:4a:97:54:77:4b:79:bf:f8:c0:4e:8b:1e:2f:2f:
92:06:38:14:78:bd:30:29:cb:a7:61:b9:6c:56:df:32:7c:f6:
ad:c3:6e:58:f9:bc:15:0f:60:e1:97:5c:52:9a:b9:78:53:12:
6c:41:90:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:46 2026 by rpki-client