
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa
File: 3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa (raw, json)
Hash identifier: +HjXpsObooFxMgYry0JztncJM4mrrAryw27ZM/3Lsx8=
Subject key identifier: 6D:D8:69:AD:A3:18:70:51:AD:66:B3:75:54:99:3E:FF:2A:1A:A0:F2
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 0F1FB594A053C170082173D7C521AC30E74A7E41
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa
Signing time: Wed 27 May 2026 09:24:04 +0000
ROA not before: Wed 27 May 2026 09:19:04 +0000
ROA not after: Wed 26 May 2027 09:24:04 +0000
asID: 133775
IP address blocks: 180.188.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1f:b5:94:a0:53:c1:70:08:21:73:d7:c5:21:ac:30:e7:4a:7e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 27 09:19:04 2026 GMT
Not After : May 26 09:24:04 2027 GMT
Subject: CN=6DD869ADA3187051AD66B37554993EFF2A1AA0F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:da:75:b7:6b:b0:65:d0:fa:f5:f8:68:f4:
89:76:b7:fa:a8:90:cd:82:08:3c:41:8d:02:95:b3:
09:e2:90:ec:4e:47:e3:c9:fe:fb:bf:66:9a:ea:68:
7d:6a:f3:9a:d1:18:31:91:5f:92:f8:b5:4c:88:a4:
c3:27:31:df:6f:99:19:b3:cb:11:8c:77:8d:75:67:
96:3a:3f:8f:97:52:d0:03:18:64:3d:f4:e8:a4:f5:
d9:8c:73:eb:29:eb:c6:95:d3:1a:8c:4a:2f:f1:b5:
a0:98:b6:ce:e7:b5:89:8e:ea:16:c1:fe:82:fd:28:
e4:f1:9a:5c:af:c8:a7:16:a3:30:65:6a:61:36:1c:
22:3e:a4:42:02:7e:13:1f:29:bb:2b:96:69:51:af:
54:42:78:02:9e:79:b9:62:9a:d6:85:fd:93:da:10:
21:d0:ce:09:8b:6f:29:46:82:da:9e:1f:b5:0d:c3:
54:f5:88:f7:05:08:06:07:66:59:05:61:32:1b:4c:
02:39:51:89:26:47:6d:bf:2f:c1:eb:4d:c4:0d:fd:
67:7d:ed:61:37:26:ea:de:20:af:2e:5c:c7:3c:29:
0f:59:e2:11:dc:a6:3b:f1:96:ca:c9:51:1d:67:cb:
4b:fb:bb:d1:42:d0:2d:50:18:59:a6:42:de:25:46:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D8:69:AD:A3:18:70:51:AD:66:B3:75:54:99:3E:FF:2A:1A:A0:F2
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.40.0/22
Signature Algorithm: sha256WithRSAEncryption
af:43:26:22:1d:ff:1e:0e:f2:d8:56:9a:4d:56:b8:3e:7b:b4:
3d:33:ea:c7:c1:89:61:3b:2e:e6:ad:90:57:0d:af:11:79:ba:
8e:14:1d:fc:9f:72:1b:9e:d2:39:4c:00:02:5d:1b:bf:21:1d:
c2:f4:3a:d3:c4:e1:e0:6d:39:7f:b1:70:e8:f5:64:51:f3:78:
be:78:34:55:b4:86:f0:2f:f7:47:2c:5f:bf:69:c4:cd:8c:24:
e3:89:54:59:a9:08:a9:25:c0:3a:6d:80:4f:20:16:f6:13:42:
6c:65:1d:ca:fd:f5:c0:4d:06:1d:18:2c:e3:f5:4f:5d:7e:49:
7c:ba:f4:d6:13:19:60:e4:a4:c5:3d:fc:25:56:55:07:12:2f:
85:0b:81:b0:00:13:65:f3:ad:06:b6:fc:57:f4:56:54:e3:71:
69:bb:8d:5a:59:6a:db:16:5c:41:27:6c:e5:a2:b6:d9:8d:2c:
37:fa:59:17:29:ab:43:3d:44:6d:7b:2c:37:ad:30:96:85:22:
e7:6b:24:c4:69:94:69:39:9d:b6:d4:ea:2c:92:82:43:78:43:
c7:8c:07:d0:b2:76:bf:a1:1b:9f:65:03:e0:cd:40:24:72:d0:
6c:ca:82:65:f0:25:23:e4:9b:12:c3:c7:b0:22:8c:55:9d:99:
2e:ba:6d:09
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDx+1lKBTwXAIIXPXxSGsMOdKfkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjcwOTE5MDRaFw0yNzA1MjYwOTI0MDRaMDMxMTAvBgNV
BAMTKDZERDg2OUFEQTMxODcwNTFBRDY2QjM3NTU0OTkzRUZGMkExQUEwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOO9p1t2uwZdD69fho9Il2t/qo
kM2CCDxBjQKVswnikOxOR+PJ/vu/ZprqaH1q85rRGDGRX5L4tUyIpMMnMd9vmRmz
yxGMd411Z5Y6P4+XUtADGGQ99Oik9dmMc+sp68aV0xqMSi/xtaCYts7ntYmO6hbB
/oL9KOTxmlyvyKcWozBlamE2HCI+pEICfhMfKbsrlmlRr1RCeAKeeblimtaF/ZPa
ECHQzgmLbylGgtqeH7UNw1T1iPcFCAYHZlkFYTIbTAI5UYkmR22/L8HrTcQN/Wd9
7WE3JureIK8uXMc8KQ9Z4hHcpjvxlsrJUR1ny0v7u9FC0C1QGFmmQt4lRtzBAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUbdhpraMYcFGtZrN1VJk+/yoaoPIwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTU5NzQyNTIxOTQxMDMyOTcvMC8zMTM4MzAyZTMx
MzgzODJlMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEArS8KDANBgkqhkiG9w0BAQsFAAOCAQEAr0MmIh3/Hg7y2FaaTVa4
Pnu0PTPqx8GJYTsu5q2QVw2vEXm6jhQd/J9yG57SOUwAAl0bvyEdwvQ608Th4G05
f7Fw6PVkUfN4vng0VbSG8C/3Ryxfv2nEzYwk44lUWakIqSXAOm2ATyAW9hNCbGUd
yv31wE0GHRgs4/VPXX5JfLr01hMZYOSkxT38JVZVBxIvhQuBsAATZfOtBrb8V/RW
VONxabuNWllq2xZcQSds5aK22Y0sN/pZFymrQz1EbXssN60wloUi52skxGmUaTmd
ttTqLJKCQ3hDx4wH0LJ2v6Ebn2UD4M1AJHLQbMqCZfAlI+SbEsPHsCKMVZ2ZLrpt
CQ==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:39 2026 by rpki-client