
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3235203d3e2034383337.roa
File: 34352e3235312e31312e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: 9LX/KIVLEyRf272yAGjKD/hB+vmnTR9MqY8odqkKiEU=
Subject key identifier: 3A:D3:7B:61:17:76:08:05:B8:F3:9F:8B:56:AD:C9:3B:5A:39:E2:B8
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 07AD9E104740E616DBB695FE2E5AE8E1D3A0D6CD
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3235203d3e2034383337.roa
Signing time: Fri 29 May 2026 05:52:31 +0000
ROA not before: Fri 29 May 2026 05:47:31 +0000
ROA not after: Fri 28 May 2027 05:52:31 +0000
asID: 4837
IP address blocks: 45.251.11.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ad:9e:10:47:40:e6:16:db:b6:95:fe:2e:5a:e8:e1:d3:a0:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:47:31 2026 GMT
Not After : May 28 05:52:31 2027 GMT
Subject: CN=3AD37B6117760805B8F39F8B56ADC93B5A39E2B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:09:a5:80:60:a6:33:9d:1d:bc:40:85:d7:
f2:4d:c6:ce:10:d3:a0:7d:d3:59:47:e9:e5:27:92:
c3:6f:4c:9e:26:70:39:05:a7:5b:d3:05:4a:60:9a:
dc:0b:83:a2:1c:94:48:88:13:54:8d:c5:b6:6f:78:
0e:54:d8:1b:29:dc:3d:c0:67:c8:53:e5:b6:51:73:
35:81:86:38:5f:aa:93:8a:8a:63:29:92:35:72:1a:
98:85:d1:0e:c7:f1:3b:46:7e:3a:33:3f:72:0f:ca:
41:3a:42:12:ae:79:3e:d1:5f:00:5b:51:a6:74:4a:
b0:05:63:a6:6c:b9:2d:2d:c7:59:f7:3f:84:1c:78:
15:bf:bf:27:44:b8:dd:2f:bc:17:e6:8a:41:43:f7:
cb:aa:5c:71:0c:3f:20:4e:af:57:4b:5b:4a:45:2f:
01:b6:5b:5a:aa:c9:f7:06:3c:4c:2e:59:79:96:3f:
06:d0:ad:4f:02:b2:6b:56:81:74:dd:83:8b:01:b0:
4a:6f:26:6e:38:b2:cb:7f:38:f0:62:c5:9a:60:15:
d3:71:51:02:6d:08:c4:d4:23:03:01:fc:df:bb:8f:
1a:ba:6e:fe:c3:76:fb:80:c4:ea:a1:b0:f2:09:cd:
f4:0a:87:e2:fd:de:69:7a:f4:46:b2:dd:fa:ac:0e:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:7B:61:17:76:08:05:B8:F3:9F:8B:56:AD:C9:3B:5A:39:E2:B8
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.11.0/24
Signature Algorithm: sha256WithRSAEncryption
60:39:90:0b:10:67:0b:5a:7b:31:20:2e:30:9e:21:9a:42:94:
25:a3:aa:fb:a4:ea:c0:49:01:03:c9:2e:be:a0:27:7d:b6:58:
6d:0a:3c:db:78:67:ed:b5:76:d2:4b:f7:ea:21:a7:00:ba:d8:
60:9c:40:42:c3:38:25:41:1c:ea:65:0d:43:bf:f6:96:96:c0:
57:9e:2e:d6:78:ae:38:3b:6c:6f:ac:50:b0:9d:27:e4:75:63:
8e:09:73:5e:c2:24:75:a5:f5:a4:c6:55:1b:18:43:7a:7f:2c:
ed:ac:5d:2b:ad:f7:56:e4:fd:2f:e3:69:d4:1d:d6:a3:4a:d1:
c5:ed:a5:45:10:b2:11:82:fb:53:5a:24:85:e3:41:84:f7:d9:
e1:c1:38:b9:cd:d0:77:5e:a1:5d:3b:df:ad:ec:6e:44:87:d7:
33:4f:6b:ab:d5:67:75:60:ed:2d:b4:91:76:aa:10:4f:d9:9a:
c5:95:4c:15:f4:5f:41:f8:be:5b:1a:bc:73:64:4b:33:75:d4:
c3:9b:2e:89:80:f4:b4:51:d7:24:36:39:b8:bf:25:d9:f4:ab:
10:b6:dd:54:85:51:c4:dd:6b:09:94:ed:00:da:5b:70:ed:56:
5a:1b:b0:78:b3:57:fe:26:84:0c:44:bc:bf:b1:41:5e:62:7b:
79:d0:3d:a4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUB62eEEdA5hbbtpX+Llro4dOg1s0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjkwNTQ3MzFaFw0yNzA1MjgwNTUyMzFaMDMxMTAvBgNV
BAMTKDNBRDM3QjYxMTc3NjA4MDVCOEYzOUY4QjU2QURDOTNCNUEzOUUyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkAmlgGCmM50dvECF1/JNxs4Q
06B901lH6eUnksNvTJ4mcDkFp1vTBUpgmtwLg6IclEiIE1SNxbZveA5U2Bsp3D3A
Z8hT5bZRczWBhjhfqpOKimMpkjVyGpiF0Q7H8TtGfjozP3IPykE6QhKueT7RXwBb
UaZ0SrAFY6ZsuS0tx1n3P4QceBW/vydEuN0vvBfmikFD98uqXHEMPyBOr1dLW0pF
LwG2W1qqyfcGPEwuWXmWPwbQrU8CsmtWgXTdg4sBsEpvJm44sst/OPBixZpgFdNx
UQJtCMTUIwMB/N+7jxq6bv7DdvuAxOqhsPIJzfQKh+L93ml69Eay3fqsDlTPAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUOtN7YRd2CAW485+LVq3JO1o54rgwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3LzAvMzQzNTJlMzIzNTMx
MmUzMTMxMmUzMDJmMzIzNDJkMzIzNTIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAt+wswDQYJKoZIhvcNAQELBQADggEBAGA5kAsQZwtaezEgLjCeIZpClCWjqvuk
6sBJAQPJLr6gJ322WG0KPNt4Z+21dtJL9+ohpwC62GCcQELDOCVBHOplDUO/9paW
wFeeLtZ4rjg7bG+sULCdJ+R1Y44Jc17CJHWl9aTGVRsYQ3p/LO2sXSut91bk/S/j
adQd1qNK0cXtpUUQshGC+1NaJIXjQYT32eHBOLnN0HdeoV07363sbkSH1zNPa6vV
Z3Vg7S20kXaqEE/ZmsWVTBX0X0H4vlsavHNkSzN11MObLomA9LRR1yQ2Obi/Jdn0
qxC23VSFUcTdawmU7QDaW3DtVlobsHizV/4mhAxEvL+xQV5ie3nQPaQ=
-----END CERTIFICATE-----
Generated at Fri May 29 23:50:51 2026 by rpki-client