
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34372e302f32342d3234203d3e20313331353638.roa
File: 3138302e3138382e34372e302f32342d3234203d3e20313331353638.roa (raw, json)
Hash identifier: 2CFeLTZxM8FG03sq/aa2Y8bm0L7hR4zRlpyE0qgp+F0=
Subject key identifier: FD:85:51:2C:8E:C1:9B:85:46:D1:55:0F:CF:6B:2B:16:FE:20:17:CD
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 25DB5D23276E7AE21203D7B41CA9C10CAAB68728
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34372e302f32342d3234203d3e20313331353638.roa
Signing time: Fri 29 May 2026 08:25:06 +0000
ROA not before: Fri 29 May 2026 08:20:06 +0000
ROA not after: Fri 28 May 2027 08:25:06 +0000
asID: 131568
IP address blocks: 180.188.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:db:5d:23:27:6e:7a:e2:12:03:d7:b4:1c:a9:c1:0c:aa:b6:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 08:20:06 2026 GMT
Not After : May 28 08:25:06 2027 GMT
Subject: CN=FD85512C8EC19B8546D1550FCF6B2B16FE2017CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:00:55:a4:91:6d:a2:d1:47:01:f3:df:59:
55:62:dc:4d:f2:2d:b0:00:1b:03:c4:8c:a0:d0:15:
62:24:3e:66:7e:f4:92:c1:50:4d:ac:94:20:d4:61:
c3:a9:d9:19:39:00:31:44:4d:98:08:76:43:20:dd:
d5:7f:86:c2:c6:e2:4d:4d:17:4b:57:92:07:aa:63:
19:41:d5:64:cd:95:62:64:fb:29:dc:66:2e:92:7c:
d0:df:0f:22:30:01:55:ce:31:77:ed:21:38:a2:d3:
78:40:ec:2e:51:2d:da:ad:da:1a:75:15:cc:34:60:
e5:08:30:0c:12:f9:ed:f7:51:dd:3b:32:b5:21:85:
02:05:6d:77:e3:e3:3c:ae:0f:07:b8:63:44:09:b7:
d4:d3:29:e1:3d:76:82:25:29:d0:65:39:2a:1e:91:
0f:2c:bf:b3:0b:8f:61:34:ee:9d:44:32:29:0c:52:
5e:ac:41:f8:b8:13:21:68:2b:70:e5:64:e0:a1:ba:
c6:4a:3d:d5:53:af:93:74:1d:b3:6b:f2:7e:d3:4c:
6e:00:9a:c3:41:5b:c4:07:40:e2:18:db:ad:c2:7b:
d3:0f:0c:63:6a:f2:59:e5:f2:b7:64:7d:c3:7f:11:
0a:2a:00:c2:82:a0:3b:4f:d1:09:d3:d3:0b:70:6d:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:85:51:2C:8E:C1:9B:85:46:D1:55:0F:CF:6B:2B:16:FE:20:17:CD
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34372e302f32342d3234203d3e20313331353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.188.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5c:5c:a9:07:56:0e:41:a4:3b:92:a1:e2:f8:e7:d0:36:49:
82:f7:c5:b8:00:bc:83:60:b2:2d:a9:13:ad:ad:3e:6e:a0:56:
b9:c9:64:58:ba:fa:3e:aa:0c:cb:51:c5:1b:c6:fe:24:bd:43:
0a:10:fc:d7:7c:ab:b2:f5:2c:63:0a:2b:22:be:6a:31:42:ad:
75:f4:b9:6c:da:15:ea:be:48:c3:e8:f1:73:50:1e:59:c7:54:
b4:16:b9:a6:c2:29:7e:f4:86:96:b9:fe:17:d7:e5:12:4e:09:
03:35:b1:52:53:db:f4:f4:3b:ab:4e:60:06:ac:fb:e5:95:ab:
01:58:88:10:26:a8:72:ae:fd:1b:75:2e:3e:2e:4d:71:40:fd:
28:ea:10:85:67:20:ef:ed:ab:4b:c1:f3:74:ad:94:c1:f6:5e:
1c:06:89:67:e8:1e:db:ee:d3:08:2d:c5:f1:d4:03:ca:92:b2:
81:02:76:ef:30:11:a3:dc:83:aa:6d:88:b7:78:dd:8e:ec:10:
35:cd:df:37:d9:57:7c:c3:09:a3:91:12:56:9f:44:d9:a1:b6:
a8:2e:6c:9f:ab:4a:9b:fc:80:97:e4:22:6d:d7:67:09:04:8c:
4f:fa:a1:f7:60:27:af:99:b1:1e:50:62:f5:ea:f6:df:e7:21:
19:12:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:30 2026 by rpki-client