
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3235203d3e2034383337.roa
File: 3138302e3138382e33392e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: SOwO9rB7mGUDe11y4baBOk+QeBowGE9TgS6DFdz7NZk=
Subject key identifier: 12:B7:FA:6B:36:96:90:89:0E:EB:76:2C:01:C5:73:52:97:95:91:C1
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 10152C7B342D85BB3F3A0187D90BFE0F23CF36A5
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3235203d3e2034383337.roa
Signing time: Fri 29 May 2026 06:00:25 +0000
ROA not before: Fri 29 May 2026 05:55:25 +0000
ROA not after: Fri 28 May 2027 06:00:25 +0000
asID: 4837
IP address blocks: 180.188.39.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:15:2c:7b:34:2d:85:bb:3f:3a:01:87:d9:0b:fe:0f:23:cf:36:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:55:25 2026 GMT
Not After : May 28 06:00:25 2027 GMT
Subject: CN=12B7FA6B369690890EEB762C01C57352979591C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:cc:72:63:15:91:7f:20:a7:04:cf:82:90:
15:66:06:0f:92:5f:d3:e5:cb:39:11:d0:11:0d:10:
2a:92:72:f6:9a:39:4c:78:65:21:25:22:42:9f:2d:
b0:27:d2:dd:95:19:22:3b:5b:79:f4:09:64:67:44:
4b:88:df:30:04:56:10:31:aa:dd:b7:e7:df:c1:6d:
55:19:31:79:75:2b:be:0e:df:20:6b:9d:55:18:5e:
97:06:0a:e8:47:13:ee:99:5b:54:bb:16:e2:80:c0:
b6:60:c4:4b:89:e4:b2:c1:82:93:d0:1c:cd:c5:64:
87:a8:ec:00:b7:13:a3:7a:db:51:32:66:d8:63:11:
81:93:93:d5:ee:c4:cc:63:03:07:19:6f:7d:37:9f:
a8:d6:20:45:dc:f2:04:f5:24:0b:77:83:11:fb:92:
61:c2:d7:78:71:0c:ad:66:7b:df:ff:78:12:e2:66:
7a:09:b9:69:0d:62:3c:c2:52:23:59:d9:3e:0a:2c:
bf:11:26:00:cd:2e:57:96:0f:49:de:b4:16:fa:89:
70:11:d8:c6:0e:53:44:c3:76:30:35:7b:db:0e:2e:
95:db:ca:9f:15:1c:3f:04:45:a8:b3:66:f4:46:b9:
00:69:ae:de:99:c0:d3:a0:bf:bd:16:0d:00:83:cb:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:FA:6B:36:96:90:89:0E:EB:76:2C:01:C5:73:52:97:95:91:C1
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5b:2c:d4:0c:70:2f:73:9c:a1:e9:26:f4:68:a8:fa:5f:0a:
32:ae:31:bd:5d:f1:ba:39:5c:b7:8e:6e:11:8e:ba:a4:20:32:
6d:48:d6:4f:02:40:e0:26:83:66:fd:48:74:9b:79:e7:86:ff:
28:dd:c1:cb:4e:5e:8a:05:b9:a7:f5:21:d1:fe:fb:b3:e1:9e:
23:af:2b:08:08:4a:db:23:79:cd:1b:5e:ee:c2:c1:49:cc:80:
37:5a:a8:ea:25:f7:bc:5d:86:de:d8:a8:95:f8:3c:8e:8a:43:
95:11:bb:cc:f5:04:b5:7f:b8:cb:7a:7d:9e:7c:7b:1d:c2:d9:
7f:f3:e9:14:ec:03:e5:99:35:82:e7:c6:e1:95:d7:b9:5f:b1:
90:a2:a6:95:f6:d4:a6:e7:66:d4:79:11:45:ac:f3:d3:98:ea:
aa:04:68:fd:55:09:36:3f:c4:b1:65:52:9a:a8:77:fc:c6:ca:
e8:7f:18:1a:25:22:9f:c4:ff:1b:50:be:ce:ef:18:03:42:33:
0d:28:d4:38:3e:3a:dc:30:d9:68:bf:a7:b5:07:b8:4f:d7:e5:
f1:b8:0a:8b:72:4f:2a:46:6e:2b:ce:59:c0:36:1b:48:5f:45:
e6:95:11:8f:0e:bb:f2:4f:7c:4e:22:fe:ec:2c:b8:36:a2:77:
75:0e:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:13 2026 by rpki-client