
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa
File: 3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: jlaDUIT24l99BM/gLCA+csfz1+ZxnYSyDFWpIpgEXTY=
Subject key identifier: 61:16:ED:69:7E:64:5C:C0:01:27:4A:1C:3C:64:26:5A:AB:1D:A7:D2
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 5C1B1D05F01FADAB2351203933A0022C405904AD
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa
Signing time: Wed 22 Jul 2026 06:50:48 +0000
ROA not before: Wed 22 Jul 2026 06:45:48 +0000
ROA not after: Wed 21 Jul 2027 06:50:48 +0000
asID: 56040
IP address blocks: 101.251.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1b:1d:05:f0:1f:ad:ab:23:51:20:39:33:a0:02:2c:40:59:04:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: Jul 22 06:45:48 2026 GMT
Not After : Jul 21 06:50:48 2027 GMT
Subject: CN=6116ED697E645CC001274A1C3C64265AAB1DA7D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:61:af:3b:f4:81:a6:d9:2d:ca:a4:9d:15:
2a:39:92:d5:48:20:87:15:ee:b8:13:99:3e:d5:7c:
0c:e4:2f:54:dc:8c:d9:93:30:36:7b:05:c2:1c:86:
ea:e1:4c:b3:64:9e:a8:4a:be:b1:2b:49:51:d4:85:
1f:ef:dd:b8:0e:98:2b:3a:62:69:d4:ba:e6:4b:86:
f6:25:cf:12:00:2a:78:50:38:c2:04:60:20:14:82:
85:98:9a:b6:56:b4:88:05:33:14:c4:5b:7a:51:1b:
ad:e9:88:27:8f:f1:ed:fa:1c:c3:9d:6a:1b:ce:7f:
37:4a:ed:0b:27:73:f5:c8:88:a2:08:eb:64:ce:ae:
5f:41:44:52:ab:7c:60:bc:58:96:21:b8:c3:12:59:
f8:21:e6:05:da:02:a2:1d:a6:67:01:c0:a8:8e:dd:
e5:b1:b5:e5:fe:51:a9:5b:97:c3:65:ff:50:83:3b:
ae:e6:7d:d3:f9:cf:3f:12:69:6c:10:2b:20:2e:08:
bd:ae:78:ee:96:20:ca:9a:52:2a:18:9c:b8:6f:09:
58:8b:85:d7:44:27:3a:aa:1c:76:db:4b:98:d1:b4:
44:23:d4:8e:2c:0f:c8:5a:f0:9e:b7:05:63:d1:cf:
a5:4a:5e:73:1a:09:ec:9d:19:db:ef:73:4f:f0:38:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:16:ED:69:7E:64:5C:C0:01:27:4A:1C:3C:64:26:5A:AB:1D:A7:D2
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.173.0/24
Signature Algorithm: sha256WithRSAEncryption
40:45:64:6f:b3:85:3d:8c:4d:3c:82:65:a4:5f:14:bd:38:76:
b3:57:85:13:98:ea:46:fc:bc:77:02:9c:cc:7a:93:e3:e2:82:
17:0e:3c:06:4d:78:ca:d9:07:3c:08:8a:c6:6b:37:ee:69:ee:
a0:2f:18:fc:99:87:a6:6a:c0:49:f8:17:1d:5d:08:63:66:ad:
94:d0:0a:e7:c8:37:24:42:c2:aa:51:0b:24:d2:24:f9:ff:50:
7e:80:b8:80:47:5f:46:33:88:37:2f:5a:f1:3f:49:39:18:ac:
07:45:3f:ae:b7:d1:91:65:07:cb:90:1f:4c:16:0b:48:49:ca:
ac:0a:05:e1:69:f5:a6:5a:7a:46:fd:0e:44:5a:f9:48:10:c8:
5c:d9:17:f7:1f:dd:19:b9:17:03:e5:cb:28:6b:fa:5e:f3:b7:
6e:49:68:67:cd:fd:b2:99:23:41:91:a6:33:ba:34:c6:f7:bd:
24:62:a1:29:9a:9c:42:fe:12:b3:24:85:59:e5:d9:b2:cd:08:
fd:fd:d3:ef:ef:9c:16:d2:3e:16:69:f8:79:b0:0d:ab:50:4d:
cf:97:2d:ce:65:e4:54:bd:ce:ce:cd:8e:b4:0d:e4:ec:bc:8b:
32:7a:8b:a3:c3:07:cb:4e:b9:b7:96:f0:c3:ce:6f:da:42:a2:
2f:83:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:48:33 2026 by rpki-client