
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e20313331353638.roa
File: 34352e3235312e31302e302f32342d3234203d3e20313331353638.roa (raw, json)
Hash identifier: syIBqYuJ2ZOveB+W0N/q4K6YbXz3RNs5tEoBWZT0xis=
Subject key identifier: 87:42:91:22:5C:E5:30:00:75:1E:ED:96:8A:1B:4E:EB:07:EB:3E:99
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 1EF4C4B68671CE1821C3EA7058D893E7B10567F9
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e20313331353638.roa
Signing time: Fri 29 May 2026 05:51:33 +0000
ROA not before: Fri 29 May 2026 05:46:33 +0000
ROA not after: Fri 28 May 2027 05:51:33 +0000
asID: 131568
IP address blocks: 45.251.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f4:c4:b6:86:71:ce:18:21:c3:ea:70:58:d8:93:e7:b1:05:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:46:33 2026 GMT
Not After : May 28 05:51:33 2027 GMT
Subject: CN=874291225CE53000751EED968A1B4EEB07EB3E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:64:d0:6d:00:a4:4b:41:ee:d8:19:30:ee:
c2:fc:11:20:fb:1e:ad:9d:95:de:fa:23:b0:bb:d1:
81:b8:a0:11:c2:ec:96:80:09:48:a3:5c:e4:f1:9d:
c6:53:c3:7a:43:95:f9:ef:a4:92:d5:b6:9b:69:39:
e7:fc:c5:a6:77:f7:64:83:d0:3f:11:7a:4f:ff:d5:
c4:33:53:d5:3c:a1:19:a3:62:b0:b7:4f:1a:31:08:
b9:ca:19:60:49:3c:66:8a:2f:1b:2a:ec:88:b9:7a:
ed:76:34:53:77:d9:f9:30:b2:fb:76:1a:86:2b:98:
69:35:74:6d:b8:df:e7:d8:24:db:91:4e:3c:be:ec:
56:2c:85:84:ee:8e:83:cc:33:11:e3:88:d4:f2:69:
2b:97:e9:4e:9a:51:da:b3:e0:1c:c9:e1:a6:7c:1b:
fb:d3:11:a6:37:56:be:04:6c:b3:76:18:ee:90:aa:
b4:13:15:83:45:cd:cd:78:3f:8f:80:de:a1:ab:26:
f2:ec:40:e4:94:82:de:bb:36:40:60:b6:be:a8:c7:
3a:70:3b:73:54:de:82:f2:af:55:f4:49:35:9b:e8:
1d:ad:70:f5:ed:a9:90:14:76:51:41:6c:bc:db:f3:
c5:95:20:c8:88:8f:28:68:40:fb:3b:64:cb:52:36:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:91:22:5C:E5:30:00:75:1E:ED:96:8A:1B:4E:EB:07:EB:3E:99
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e20313331353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:84:e0:08:76:b6:c4:ee:57:eb:96:ea:d8:f2:30:74:e8:01:
79:cc:3c:1f:80:5e:b9:e4:f7:67:3c:5e:a6:f8:58:80:38:c8:
fc:f0:fc:c9:6a:7f:d3:6d:1a:cd:62:0e:55:94:63:e0:d1:01:
06:03:18:d2:b2:2a:ed:a6:cf:12:f8:72:af:2d:49:f3:1c:3e:
57:b4:14:5b:07:9c:6a:3a:3b:b9:8b:0e:60:e1:50:e4:22:1b:
84:9a:b9:0e:79:7b:be:0c:79:4a:8a:43:ae:c4:b4:33:25:71:
86:40:62:2e:60:52:2d:a3:fc:27:97:c8:a4:3e:d9:78:41:c7:
0b:ac:3e:43:8d:2c:3a:9f:64:4b:3f:3e:23:0a:2f:b9:c5:25:
91:a8:92:38:5f:78:24:15:df:d8:48:1e:3a:27:9d:1a:f3:c4:
45:53:a2:3f:f0:96:b9:2f:eb:7c:a6:d5:70:67:5c:1c:34:e1:
68:a7:28:86:52:93:74:25:43:c5:0c:a3:19:71:3f:fb:71:a0:
65:18:f8:67:a5:73:19:43:7c:a3:d3:1f:f7:a6:44:44:15:f4:
bf:b5:06:a9:fb:9c:95:0a:b4:fa:12:8e:27:98:6a:4a:75:27:
1c:60:d6:1c:5b:e5:ab:95:68:56:c1:1e:51:6d:ef:62:88:33:
8f:e2:ec:cb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHvTEtoZxzhghw+pwWNiT57EFZ/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjkwNTQ2MzNaFw0yNzA1MjgwNTUxMzNaMDMxMTAvBgNV
BAMTKDg3NDI5MTIyNUNFNTMwMDA3NTFFRUQ5NjhBMUI0RUVCMDdFQjNFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvWTQbQCkS0Hu2Bkw7sL8ESD7
Hq2dld76I7C70YG4oBHC7JaACUijXOTxncZTw3pDlfnvpJLVtptpOef8xaZ392SD
0D8Rek//1cQzU9U8oRmjYrC3TxoxCLnKGWBJPGaKLxsq7Ii5eu12NFN32fkwsvt2
GoYrmGk1dG243+fYJNuRTjy+7FYshYTujoPMMxHjiNTyaSuX6U6aUdqz4BzJ4aZ8
G/vTEaY3Vr4EbLN2GO6QqrQTFYNFzc14P4+A3qGrJvLsQOSUgt67NkBgtr6oxzpw
O3NU3oLyr1X0STWb6B2tcPXtqZAUdlFBbLzb88WVIMiIjyhoQPs7ZMtSNtMBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUh0KRIlzlMAB1Hu2WihtO6wfrPpkwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk3NDI1MjE5NDEwMzI5Ny8wLzM0MzUyZTMyMzUz
MTJlMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC37CjANBgkqhkiG9w0BAQsFAAOCAQEAn4TgCHa2xO5X65bq2PIwdOgB
ecw8H4BeueT3ZzxepvhYgDjI/PD8yWp/020azWIOVZRj4NEBBgMY0rIq7abPEvhy
ry1J8xw+V7QUWwecajo7uYsOYOFQ5CIbhJq5Dnl7vgx5SopDrsS0MyVxhkBiLmBS
LaP8J5fIpD7ZeEHHC6w+Q40sOp9kSz8+IwovucUlkaiSOF94JBXf2EgeOiedGvPE
RVOiP/CWuS/rfKbVcGdcHDThaKcohlKTdCVDxQyjGXE/+3GgZRj4Z6VzGUN8o9Mf
96ZERBX0v7UGqfuclQq0+hKOJ5hqSnUnHGDWHFvlq5VoVsEeUW3vYogzj+Lsyw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:12 2026 by rpki-client