
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3234203d3e20313331353638.roa
File: 3138302e3138382e33392e302f32342d3234203d3e20313331353638.roa (raw, json)
Hash identifier: 0O2K+gLTFktYf1RoCXhyZmc/82kH4Dmhvsn7AvS++6Y=
Subject key identifier: 98:A8:F2:78:F3:DD:F3:FD:E5:8F:8E:E5:96:1C:F2:92:F6:95:CF:CE
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 1D46425D7E3D0FA7031624188499765C622BFA1F
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3234203d3e20313331353638.roa
Signing time: Fri 29 May 2026 06:00:25 +0000
ROA not before: Fri 29 May 2026 05:55:25 +0000
ROA not after: Fri 28 May 2027 06:00:25 +0000
asID: 131568
IP address blocks: 180.188.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:46:42:5d:7e:3d:0f:a7:03:16:24:18:84:99:76:5c:62:2b:fa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:55:25 2026 GMT
Not After : May 28 06:00:25 2027 GMT
Subject: CN=98A8F278F3DDF3FDE58F8EE5961CF292F695CFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:f4:a6:87:65:dc:d5:67:c2:3e:3b:e2:d7:
b6:86:44:f1:be:f7:65:f9:df:48:43:03:2d:69:42:
00:4e:9a:c4:89:44:e2:0b:55:b5:cc:8c:ce:75:a1:
da:83:9b:1c:36:d3:d2:7c:c8:8e:3e:21:49:f5:ac:
33:73:29:86:70:41:9e:4e:3e:5e:fc:c9:4a:e1:82:
c0:8d:dc:87:65:13:cf:72:52:34:10:bc:05:db:82:
2e:26:72:10:9b:52:91:80:36:ba:32:9b:39:ce:ce:
73:ad:57:cf:b5:2f:53:5d:a0:19:83:43:3b:d7:e2:
93:1e:93:13:98:cf:f5:12:29:19:0a:1c:8c:a7:72:
81:71:8d:f6:c2:78:9c:86:ee:9b:a5:38:0a:5e:53:
4c:e2:f4:bc:3a:d7:40:08:69:88:65:f8:e2:df:0b:
68:5e:3a:51:6d:1c:cc:c5:30:19:9d:dd:13:0c:3b:
a3:45:55:99:4a:9f:f6:5b:e8:f4:1d:b7:4f:9f:1e:
69:e1:87:cc:21:08:0c:7d:87:80:ae:b0:88:a2:27:
a6:4c:31:16:1f:1d:2e:a7:82:37:77:a6:9a:bf:8d:
78:aa:02:04:b6:7c:80:c2:d7:ec:dc:cf:5e:9a:04:
51:20:36:29:1f:b7:9f:f2:87:40:b7:2e:12:98:c2:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A8:F2:78:F3:DD:F3:FD:E5:8F:8E:E5:96:1C:F2:92:F6:95:CF:CE
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3234203d3e20313331353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.39.0/24
Signature Algorithm: sha256WithRSAEncryption
66:64:fa:8b:e5:80:b2:9d:b3:87:97:b9:a3:8e:c0:d7:95:61:
f1:42:7a:6c:47:41:2e:47:6f:b2:f9:41:5f:83:31:38:ad:78:
bc:24:0f:c9:f8:c3:6d:17:b8:e7:f8:69:ba:ac:a4:de:64:6d:
1a:d1:53:af:82:f1:b6:d7:e9:59:48:23:08:3b:d5:44:54:2c:
2e:6f:fa:0f:8d:6d:59:22:d4:08:43:5a:1f:b6:41:64:4f:f3:
f4:61:cb:fa:0a:9e:72:60:02:4b:fe:8d:46:f7:18:67:f4:10:
6c:79:c7:68:39:16:80:07:d4:6d:04:49:f5:e6:85:92:79:6a:
25:50:ab:99:c4:1e:61:c0:ed:5b:5d:e7:c9:60:18:f8:ad:ba:
75:68:03:61:da:07:2f:e3:0f:16:b1:25:3a:9b:6b:2c:ce:70:
3a:10:66:bb:11:38:08:be:be:e3:74:55:5c:9a:93:6d:85:9e:
b4:68:ab:5f:fc:13:03:28:5c:1b:39:04:8f:1b:2b:c6:e8:72:
9e:ec:0e:8c:29:87:a1:ba:f4:52:35:ac:a9:94:04:1c:f9:71:
57:40:a8:fd:1a:92:b0:d3:02:e7:2d:c3:a4:89:a8:2e:31:43:
75:ee:1e:22:dc:33:96:d7:ad:e8:4f:24:10:3e:43:72:1c:f6:
a4:59:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:35 2026 by rpki-client