
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3234203d3e20313331353638.roa
File: 34352e3235312e382e302f32342d3234203d3e20313331353638.roa (raw, json)
Hash identifier: HIaA1qcaeqMdBjurcrlc0PVU41u+g+sZ6tz6aHxgNu4=
Subject key identifier: C1:28:DD:67:75:42:37:50:7B:22:E2:B2:B2:35:B0:65:19:74:7B:24
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 147120D547D227ACB4D461F901A03FE4E2EB93B7
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3234203d3e20313331353638.roa
Signing time: Fri 29 May 2026 05:49:39 +0000
ROA not before: Fri 29 May 2026 05:44:39 +0000
ROA not after: Fri 28 May 2027 05:49:39 +0000
asID: 131568
IP address blocks: 45.251.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:71:20:d5:47:d2:27:ac:b4:d4:61:f9:01:a0:3f:e4:e2:eb:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:44:39 2026 GMT
Not After : May 28 05:49:39 2027 GMT
Subject: CN=C128DD67754237507B22E2B2B235B06519747B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:21:9d:25:b8:3a:1e:89:31:1f:35:40:2a:
05:4e:fc:80:be:ed:1f:11:4c:00:04:cd:26:c3:3a:
90:e8:91:3a:9c:aa:41:46:85:ec:61:99:f5:df:63:
fd:8a:6c:45:ec:90:a1:2d:77:9d:82:d7:90:ad:96:
bb:fb:74:07:27:85:2e:87:9c:07:d4:3e:fe:57:23:
37:2e:66:1e:19:25:db:60:3c:80:01:5c:ef:8a:b1:
cd:1c:fc:17:1b:6c:aa:b3:80:36:e7:3b:cc:ca:d2:
d6:b8:22:4d:b5:58:11:77:38:7a:ef:65:dd:4c:69:
d3:44:ee:bd:e0:cf:07:b3:3b:6b:29:8d:30:44:b4:
cf:4a:79:2c:91:8f:5b:d2:aa:f9:4f:2d:4e:47:e2:
a1:f7:84:a2:79:e7:dc:63:9c:50:df:68:69:be:be:
09:ee:8e:d4:df:c3:65:08:f9:05:37:44:cd:82:c3:
33:73:be:82:d1:4d:31:a4:96:38:33:ef:08:3e:56:
1b:28:44:90:a3:2f:5e:c4:82:72:0f:c1:69:54:8c:
66:41:35:97:ce:38:10:68:a0:45:d3:4e:53:89:e2:
87:d5:30:47:29:bc:e4:50:84:df:4c:c6:ee:42:6a:
c7:88:f1:91:ac:3c:12:e2:22:8b:7d:fe:6a:dc:80:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:28:DD:67:75:42:37:50:7B:22:E2:B2:B2:35:B0:65:19:74:7B:24
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3234203d3e20313331353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.8.0/24
Signature Algorithm: sha256WithRSAEncryption
81:79:65:46:29:23:be:91:11:fc:3d:65:3d:1d:0a:06:5f:9f:
e5:85:86:a8:fe:c2:1a:2d:43:c5:a2:fe:ba:b5:c0:99:d0:18:
d0:fc:38:87:59:fd:ac:8f:db:14:40:3d:93:70:c7:76:f9:68:
21:22:f8:24:09:41:bd:9b:af:9f:8a:c8:85:62:3f:09:39:ac:
e5:6e:7e:7d:d4:ac:cc:49:ba:aa:d5:83:9b:d4:df:83:86:39:
d9:ff:b2:4d:e2:38:50:a2:45:68:5f:d9:dd:57:cf:86:fb:5a:
14:c4:4c:7e:44:78:f0:ff:19:e0:ec:8c:1f:28:d9:75:ca:92:
e8:26:4a:26:8a:57:a1:af:55:4a:c3:fc:9d:0c:4a:67:57:06:
43:01:68:63:e4:f4:d3:2c:b4:29:26:ca:4a:92:1f:25:88:de:
b2:f0:f6:29:fa:41:d9:34:c5:0d:4a:22:78:35:c3:99:37:21:
56:89:a0:43:1b:03:48:b0:0c:c9:06:5a:37:be:8c:32:a3:06:
52:ed:a1:33:a4:43:c3:25:a5:93:c3:96:fa:5b:19:67:05:c4:
59:93:f8:ac:a1:d0:bf:f2:32:19:4b:b5:f4:91:92:23:bd:d9:
0e:34:0c:8a:b0:99:49:43:ab:32:a6:03:5d:0c:20:b6:83:74:
8d:58:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:50 2026 by rpki-client