
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3235203d3e2034383337.roa
File: 34352e3235312e392e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: udy07T9ApB6/8W7CAOMI91CZ24KtYxkl1mOSqSPN228=
Subject key identifier: 27:C0:E4:7D:D7:C6:9E:62:68:44:35:AF:4B:EC:A9:DD:F6:FD:F5:A5
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 6115B90DC8B94BFB1782080DDFFF1C460506E027
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3235203d3e2034383337.roa
Signing time: Fri 29 May 2026 05:50:40 +0000
ROA not before: Fri 29 May 2026 05:45:40 +0000
ROA not after: Fri 28 May 2027 05:50:40 +0000
asID: 4837
IP address blocks: 45.251.9.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:15:b9:0d:c8:b9:4b:fb:17:82:08:0d:df:ff:1c:46:05:06:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:45:40 2026 GMT
Not After : May 28 05:50:40 2027 GMT
Subject: CN=27C0E47DD7C69E62684435AF4BECA9DDF6FDF5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:6f:be:cc:7d:67:13:10:b8:b7:0b:74:2a:
da:c4:bb:3b:1b:83:39:44:62:b2:5b:d8:60:42:4f:
b7:d8:a5:9c:96:f1:e5:8c:72:19:d3:56:fd:6d:e4:
d2:e7:43:a2:79:c2:32:15:13:ac:21:b2:13:66:79:
ad:61:f9:43:10:fe:f2:ab:cc:49:a8:cf:b5:66:af:
ea:b3:35:00:9f:b3:a5:d0:1f:94:2e:d9:ba:77:cf:
93:54:c9:15:33:27:7d:47:76:e2:0d:b0:58:b8:fb:
ea:48:8b:09:9d:8e:a3:da:2f:3d:82:26:6b:bb:2e:
11:e9:eb:c9:db:26:c3:75:2c:ad:64:74:c0:84:25:
5d:b3:19:05:82:f6:e2:1e:ab:e5:01:4f:dc:ec:2d:
91:8c:a3:12:1d:62:7c:a5:08:92:b2:81:e0:6c:59:
bc:ab:c4:be:c6:6b:b7:19:43:2c:bf:46:6f:55:f0:
bd:58:c1:3c:10:af:3e:ee:4b:17:6e:9e:75:a7:6c:
2a:76:af:a2:b6:e7:2e:c6:85:62:c1:ac:7e:39:36:
0b:d9:e0:55:dc:af:bf:5c:68:40:85:b1:4d:64:bc:
2b:51:62:b0:1a:d4:9b:f4:6b:44:eb:77:98:ca:1c:
a9:d1:50:5c:6e:56:51:70:14:10:35:15:7b:15:b7:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:E4:7D:D7:C6:9E:62:68:44:35:AF:4B:EC:A9:DD:F6:FD:F5:A5
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.9.0/24
Signature Algorithm: sha256WithRSAEncryption
49:19:92:f4:1e:20:25:6a:1d:48:fe:a1:e0:46:54:e3:ae:87:
c4:2c:1a:0b:7b:36:5c:9e:ee:50:4f:a6:ae:92:70:48:32:51:
3d:69:d4:3e:d3:52:d8:e6:34:fe:92:61:bd:c0:bc:a6:d2:f4:
eb:bb:04:ac:ec:95:16:57:b9:70:63:10:e8:a8:fe:90:dd:50:
b9:c0:af:43:29:2c:19:74:82:ce:fc:7f:56:34:8d:3c:49:8a:
d8:8b:f4:8f:e5:fe:98:2f:51:2f:33:d7:30:0d:e8:77:21:81:
b3:56:60:5d:88:c8:3a:d8:27:b2:af:52:c6:58:47:35:f5:ee:
6e:b2:4e:e2:36:23:b7:5b:53:fd:15:01:62:ed:32:a1:39:0e:
b7:d8:79:7b:f5:93:49:5d:41:b9:51:af:40:c8:de:bc:c7:45:
45:0a:2a:33:7a:d5:00:92:15:02:48:ce:8e:61:db:2d:da:db:
f7:cf:51:f0:77:3e:7c:64:d4:01:c6:82:83:09:16:9b:8b:8a:
e6:fe:2b:0f:f4:e1:14:1c:9d:af:81:a6:fe:b9:c8:60:d3:82:
7e:16:b0:0e:8b:60:bf:26:3b:5d:89:6c:4c:ad:cf:69:eb:4b:
c0:87:37:cb:d9:03:95:35:30:33:9d:2c:9c:16:37:e6:d1:40:
8f:9b:9b:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUYRW5Dci5S/sXgggN3/8cRgUG4CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjkwNTQ1NDBaFw0yNzA1MjgwNTUwNDBaMDMxMTAvBgNV
BAMTKDI3QzBFNDdERDdDNjlFNjI2ODQ0MzVBRjRCRUNBOURERjZGREY1QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEm++zH1nExC4twt0KtrEuzsb
gzlEYrJb2GBCT7fYpZyW8eWMchnTVv1t5NLnQ6J5wjIVE6whshNmea1h+UMQ/vKr
zEmoz7Vmr+qzNQCfs6XQH5Qu2bp3z5NUyRUzJ31HduINsFi4++pIiwmdjqPaLz2C
Jmu7LhHp68nbJsN1LK1kdMCEJV2zGQWC9uIeq+UBT9zsLZGMoxIdYnylCJKygeBs
WbyrxL7Ga7cZQyy/Rm9V8L1YwTwQrz7uSxdunnWnbCp2r6K25y7GhWLBrH45NgvZ
4FXcr79caECFsU1kvCtRYrAa1Jv0a0Trd5jKHKnRUFxuVlFwFBA1FXsVt8HbAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUJ8DkfdfGnmJoRDWvS+yp3fb99aUwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3LzAvMzQzNTJlMzIzNTMx
MmUzOTJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LfsJMA0GCSqGSIb3DQEBCwUAA4IBAQBJGZL0HiAlah1I/qHgRlTjrofELBoLezZc
nu5QT6auknBIMlE9adQ+01LY5jT+kmG9wLym0vTruwSs7JUWV7lwYxDoqP6Q3VC5
wK9DKSwZdILO/H9WNI08SYrYi/SP5f6YL1EvM9cwDeh3IYGzVmBdiMg62Ceyr1LG
WEc19e5usk7iNiO3W1P9FQFi7TKhOQ632Hl79ZNJXUG5Ua9AyN68x0VFCiozetUA
khUCSM6OYdst2tv3z1Hwdz58ZNQBxoKDCRabi4rm/isP9OEUHJ2vgab+uchg04J+
FrAOi2C/JjtdiWxMrc9p60vAhzfL2QOVNTAznSycFjfm0UCPm5s7
-----END CERTIFICATE-----
Generated at Fri May 29 23:52:14 2026 by rpki-client