
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3235203d3e2034383337.roa
File: 3138302e3138382e34332e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: okrHve8OCFfcI1437/le8FVLsh+IWwtSWRM+L0LPT/o=
Subject key identifier: 80:2E:3F:E2:3B:9D:2A:88:EB:37:3D:57:F5:F7:9E:65:61:F6:0F:1A
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 31573190050C041B13370295B5631941F96830ED
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3235203d3e2034383337.roa
Signing time: Wed 27 May 2026 09:24:04 +0000
ROA not before: Wed 27 May 2026 09:19:04 +0000
ROA not after: Wed 26 May 2027 09:24:04 +0000
asID: 4837
IP address blocks: 180.188.43.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:57:31:90:05:0c:04:1b:13:37:02:95:b5:63:19:41:f9:68:30:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 27 09:19:04 2026 GMT
Not After : May 26 09:24:04 2027 GMT
Subject: CN=802E3FE23B9D2A88EB373D57F5F79E6561F60F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:ab:ba:0c:71:26:54:85:77:31:fe:95:09:
2f:cb:9d:72:17:df:a6:13:0e:ec:28:59:46:1f:68:
c8:b0:ab:cf:18:54:d2:b6:2d:40:e8:68:0f:f2:dc:
cb:d7:51:7e:bb:d8:a5:e6:f3:16:0f:8e:46:27:9f:
1a:36:54:93:85:a5:ea:c7:aa:03:08:44:5f:89:96:
84:87:b2:e6:b0:f5:a1:0c:74:87:ac:3a:60:6a:4d:
a6:25:f5:40:19:83:eb:ba:5f:57:66:9b:1d:ba:24:
f5:67:39:d1:b1:f6:d6:01:ba:b0:d3:d2:24:6a:2b:
84:72:a6:4d:f8:4f:a4:4c:85:36:42:fa:a5:2a:52:
f6:9d:00:a5:95:47:1f:ff:57:c5:6a:a4:76:a7:38:
71:7a:bb:98:5f:9b:80:1b:e9:23:e5:b3:40:b1:49:
cd:ad:98:68:7c:70:27:ae:20:fe:33:7e:5b:2e:63:
39:69:17:b6:10:62:e5:01:10:cd:5e:5d:ff:d9:fa:
c7:74:6c:6e:c4:52:3d:74:38:25:2c:a7:fe:11:f1:
fa:6e:a1:46:de:91:57:fd:12:4b:23:25:3b:c6:29:
34:a1:d5:b5:e7:dc:06:ef:4d:c7:a2:26:3e:1e:fe:
63:73:c0:3f:5d:72:37:7b:f3:a1:d0:2e:5d:dd:72:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:3F:E2:3B:9D:2A:88:EB:37:3D:57:F5:F7:9E:65:61:F6:0F:1A
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.43.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dc:2c:26:9a:33:2c:8e:1e:7f:3f:bb:f8:a9:0d:05:01:4e:
56:04:18:03:85:67:27:c4:30:74:e5:95:f2:76:28:6a:9f:5d:
15:4b:62:c3:9d:56:50:c4:bc:ca:da:c2:b8:e1:13:15:42:94:
27:bd:e5:f3:fb:fa:bc:09:23:08:fb:17:48:5d:bd:74:87:da:
75:dc:80:22:cb:26:52:96:62:8e:5a:c1:84:fe:63:a7:7b:b6:
a0:22:ec:23:62:43:10:fe:86:3b:82:2d:91:53:32:6c:2b:2b:
9e:6e:36:d7:a9:4e:b4:50:67:fe:03:d5:0b:d6:2c:49:ba:8f:
33:a0:c2:fe:67:5a:9b:9c:55:d4:65:8b:d3:35:d4:68:1b:f7:
c0:99:7b:10:99:b0:16:e2:13:27:12:13:5e:64:59:dc:a9:e0:
08:4d:88:90:06:f1:4c:ad:3d:7b:93:7f:2e:5a:74:9d:e0:9b:
cb:67:4f:a1:6d:32:a0:60:88:23:f1:56:c6:db:57:f5:24:7a:
15:73:f1:f1:2f:8a:91:a4:f0:0d:33:6b:6a:91:4d:66:1e:74:
ce:62:c6:5a:3d:9e:78:35:d5:e9:4f:cd:b4:85:a9:cd:76:4c:
fc:0e:64:12:f1:54:fd:72:0c:18:7b:69:27:54:7f:af:a4:83:
cf:86:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:50 2026 by rpki-client