
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137352e302f32342d3234203d3e203536303430.roa
File: 3130312e3235312e3137352e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: 8uVJ1Gv4qUsoNnhpOuOk3QysCjNXn6/iCgRBdzUJhT8=
Subject key identifier: 67:FF:BD:7B:44:32:DA:29:8A:C1:6E:31:E2:36:93:DA:41:57:5A:AE
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 143445EE30065C8E923A7A34829978C4634642BD
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137352e302f32342d3234203d3e203536303430.roa
Signing time: Wed 22 Jul 2026 06:50:49 +0000
ROA not before: Wed 22 Jul 2026 06:45:49 +0000
ROA not after: Wed 21 Jul 2027 06:50:49 +0000
asID: 56040
IP address blocks: 101.251.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:34:45:ee:30:06:5c:8e:92:3a:7a:34:82:99:78:c4:63:46:42:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: Jul 22 06:45:49 2026 GMT
Not After : Jul 21 06:50:49 2027 GMT
Subject: CN=67FFBD7B4432DA298AC16E31E23693DA41575AAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:55:17:bf:8b:b9:89:93:f1:3a:8a:91:89:
4b:2a:9a:f3:9b:21:64:66:4e:84:22:af:14:81:fb:
43:87:76:1c:52:a9:36:b2:73:15:91:03:28:3d:27:
47:fa:09:21:ef:62:75:de:e8:1e:52:d3:d7:38:87:
04:eb:27:d5:d1:5d:1b:74:92:56:56:50:0b:b0:1b:
01:e5:7d:28:a6:80:31:64:1c:a0:c9:e0:a9:9d:f4:
bf:2c:9f:e8:69:30:14:81:0b:a0:bd:94:1e:78:27:
4d:ce:5e:0e:68:74:9d:b4:41:bb:71:3e:b7:e4:cc:
f1:bf:bb:c1:c2:68:17:d7:d7:21:c5:a0:c6:2d:19:
59:14:1b:fa:6e:40:92:48:c8:09:36:d0:db:db:b5:
b1:ad:28:7e:2c:f1:0c:41:73:7f:ff:25:b2:30:fd:
6c:c5:e7:28:6a:1e:37:17:5b:06:b5:74:7d:b9:d2:
18:ca:c5:42:a9:25:ff:8f:ef:30:61:05:d2:db:50:
ce:4a:5b:73:73:2b:99:eb:85:68:94:52:67:a7:62:
52:6a:94:50:8c:c5:48:6a:4d:13:8b:1f:a0:36:2a:
18:66:18:1d:72:62:a8:62:8d:fa:11:8a:c6:48:4b:
6a:02:ac:70:61:14:df:6f:b6:ee:94:92:6d:77:d2:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:BD:7B:44:32:DA:29:8A:C1:6E:31:E2:36:93:DA:41:57:5A:AE
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137352e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.251.175.0/24
Signature Algorithm: sha256WithRSAEncryption
79:21:38:14:2e:2c:ba:90:07:49:7e:22:c1:95:75:ab:17:14:
92:dd:9e:17:8f:e2:1d:e9:b9:57:d8:9c:57:c6:c4:c2:c0:a7:
a8:64:df:4c:f6:c2:53:bd:27:a1:00:d3:f4:e1:58:98:69:77:
e2:d8:16:6f:ae:79:01:ac:04:e5:e1:71:8f:cf:5c:72:dc:3e:
ed:15:32:a6:32:fe:b1:1c:5e:bb:bb:d6:8f:f0:64:70:ef:25:
16:ef:ca:61:11:53:a4:5d:9a:06:5d:97:80:b0:ae:b7:23:24:
d3:0a:6c:47:94:bf:5c:b5:4b:45:b2:a9:3b:8e:eb:e8:b1:62:
b8:48:61:27:85:5d:d5:84:60:fd:d9:7d:23:4e:ed:dd:7d:5d:
13:8f:8f:4b:a0:3f:37:db:fa:a9:69:eb:8d:ad:d2:e5:45:5f:
de:8f:6e:50:eb:69:94:17:1b:f3:f9:7d:73:c8:a3:e6:48:ae:
c2:13:89:72:95:b4:7f:94:7e:24:e0:f5:85:10:64:d2:e3:83:
d0:07:bf:e2:aa:d4:5e:9c:c6:14:3f:a7:3a:d9:e6:c1:c6:75:
6f:41:42:3c:61:fe:64:d5:3c:cf:54:b0:b4:a2:34:cb:57:86:
3d:fa:e5:53:1d:18:d8:2f:00:11:d4:03:9f:aa:43:a8:95:2f:
f9:14:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:18:57 2026 by rpki-client