
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e3132382e302f31382d3138203d3e203137393638.roa
File: 3131342e3139362e3132382e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: Y0YYWb9CZA7qreOCoD4GH6MaWeOVkLlavGhgwWKDXe8=
Subject key identifier: C4:83:DE:52:A3:F3:2B:58:91:DA:64:AC:A3:9B:5B:27:9A:33:1B:A6
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 70819D037177D21618B553188F167F5191930F9D
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e3132382e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:18 +0000
ROA not before: Mon 29 Jun 2026 02:47:18 +0000
ROA not after: Mon 28 Jun 2027 02:52:18 +0000
asID: 17968
IP address blocks: 114.196.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:81:9d:03:71:77:d2:16:18:b5:53:18:8f:16:7f:51:91:93:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:18 2026 GMT
Not After : Jun 28 02:52:18 2027 GMT
Subject: CN=C483DE52A3F32B5891DA64ACA39B5B279A331BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:87:99:c6:38:1c:f0:e0:d7:6d:cc:03:0d:
29:08:2c:a5:52:02:20:89:af:41:ae:5c:a9:92:2f:
fb:67:6d:8c:72:d5:d5:ae:9c:2f:96:b2:53:5e:f6:
28:bd:4f:ba:9e:1e:2a:d2:5f:36:5a:64:e7:9f:62:
2a:86:75:6e:8d:dd:73:91:b0:56:7b:0f:63:1e:c9:
c0:ee:8b:a7:5b:1c:cd:30:5a:33:f8:64:5d:e9:74:
fe:c9:df:f5:e1:11:ec:a6:51:85:09:3f:19:b1:a0:
01:d8:e4:f6:90:60:f8:26:c1:14:49:ca:a8:1d:ea:
45:39:a3:a8:ea:25:ab:6a:6b:d8:9b:7a:32:d7:53:
d7:fc:bf:1d:90:b5:76:ed:fd:3c:31:05:be:be:bf:
ae:09:b5:83:8d:6b:ed:1d:26:09:de:d5:c9:20:56:
ae:43:fa:a0:8b:80:14:70:68:be:32:83:cc:a3:ca:
af:37:37:51:aa:6c:97:4b:34:2e:a9:a6:3d:73:5b:
9e:c8:3c:36:32:0a:c5:ab:ec:7c:e4:03:04:fe:64:
9c:76:d9:da:fe:98:13:f5:3d:dd:1e:42:29:01:cc:
5c:88:69:5c:ea:31:9d:8b:93:31:d5:59:22:ee:a1:
37:e0:6c:fb:84:82:b9:16:6b:15:62:7a:68:60:46:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:DE:52:A3:F3:2B:58:91:DA:64:AC:A3:9B:5B:27:9A:33:1B:A6
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e3132382e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.196.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:75:06:6f:0c:cd:51:7a:70:27:30:98:fe:84:89:41:f0:25:
ff:06:5b:ae:94:36:8f:a8:e9:e1:8e:c1:c6:50:90:d1:d7:78:
5a:8b:0e:6a:78:46:77:db:84:a2:c5:67:f3:bc:7b:37:f9:b2:
9f:54:28:35:c7:51:f5:ae:5c:a1:82:aa:02:f3:a6:1a:81:6a:
ed:dc:35:a5:97:ce:df:8d:f1:92:7f:a9:0c:dc:a0:09:73:07:
d2:13:83:af:9b:89:02:e1:7e:c3:ea:d4:5f:d7:32:f8:2c:09:
61:e7:4c:b6:ec:e2:e7:3e:89:65:e1:b5:7b:cb:b7:55:5d:52:
e5:55:67:3b:9d:b6:ba:10:d6:4c:2f:8d:75:f8:e3:b8:b3:83:
b1:89:13:b0:5a:b7:31:8b:66:d6:f4:a8:3b:b2:2f:d0:ba:03:
58:5a:24:95:37:65:c7:1c:f7:00:9d:b6:bd:fb:1c:2e:92:b6:
31:3e:00:a7:4a:11:ad:55:05:02:46:2b:3b:8d:cf:e4:27:f4:
78:85:eb:8a:94:e4:15:98:c6:e1:0d:a1:41:8c:38:bb:b9:5a:
6a:f7:ad:c5:ef:b7:c8:b9:32:c2:a7:13:fa:fc:22:63:45:33:
11:60:06:33:b1:44:ce:26:de:f0:93:6c:41:11:27:70:2d:5b:
25:7e:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:14 2026 by rpki-client