
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e36342e302f31382d3138203d3e203137393638.roa
File: 3131342e3139362e36342e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: HLE1ta7TI6giRQXdq+bdU0a4Rgoqi/8kN9ktqGP910o=
Subject key identifier: 08:21:F6:1B:D7:7A:35:00:33:31:3A:00:6F:E9:E8:6A:84:A7:49:FB
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 75FB9CF72AFCCE17D92EFEC0571B61A678387EDE
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e36342e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:17 +0000
ROA not before: Mon 29 Jun 2026 02:47:17 +0000
ROA not after: Mon 28 Jun 2027 02:52:17 +0000
asID: 17968
IP address blocks: 114.196.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fb:9c:f7:2a:fc:ce:17:d9:2e:fe:c0:57:1b:61:a6:78:38:7e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:17 2026 GMT
Not After : Jun 28 02:52:17 2027 GMT
Subject: CN=0821F61BD77A350033313A006FE9E86A84A749FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:84:e8:7f:4e:ab:d1:e1:16:b4:02:be:49:
88:85:0f:ad:00:2e:40:21:04:5f:57:1d:01:55:c8:
56:c6:2f:65:ae:e9:08:3c:64:41:96:48:36:f1:1f:
38:87:a0:aa:bd:18:e9:82:b2:bb:6f:a8:b9:af:36:
f9:fb:f7:a4:81:b9:d1:a0:86:1f:34:15:2a:48:dc:
0b:6e:f8:37:b9:d4:22:06:bf:82:fa:90:11:89:d4:
79:13:b8:8f:a1:65:25:83:38:1d:d5:47:1a:2a:79:
c2:a7:b5:c9:50:fa:21:21:7a:1c:7c:4a:65:21:52:
8a:50:2a:2f:e1:29:c0:fd:83:c8:c1:56:3e:ea:76:
57:44:4d:5e:0b:ce:f2:09:42:05:31:8d:d3:e5:ec:
66:bb:cf:18:49:49:a1:81:64:ce:68:a2:76:ea:22:
cf:73:f1:58:6c:db:f3:3c:a2:87:f4:4a:91:53:27:
cb:7c:23:02:b8:8c:b8:0f:5a:6c:29:2f:da:f0:f2:
cb:e3:a9:0a:5f:8b:cf:ab:a6:a6:d3:72:00:42:76:
e0:d7:e9:24:fb:91:8c:43:f6:81:32:14:9d:69:28:
05:0e:9a:c9:98:7e:00:f7:44:76:81:94:e6:81:2c:
e8:c8:00:0d:24:50:b1:28:0f:ad:a2:6f:29:30:38:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:F6:1B:D7:7A:35:00:33:31:3A:00:6F:E9:E8:6A:84:A7:49:FB
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e36342e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.196.64.0/18
Signature Algorithm: sha256WithRSAEncryption
03:34:bf:e4:f7:d0:16:c7:d4:0d:76:dd:eb:c1:32:6d:6c:f1:
b9:30:ba:a1:a1:4e:a7:99:84:c0:7a:0e:92:83:8b:27:1b:3a:
8f:c7:7c:c4:d9:4f:be:2c:d8:e0:cb:96:2e:8f:65:8a:f2:be:
08:05:3f:87:5a:dd:f9:af:08:6d:00:42:36:1c:e4:81:dc:4b:
27:88:75:b0:d0:ec:69:18:4a:8d:02:f1:1f:b2:9a:c1:be:3c:
55:9b:63:80:00:33:80:66:99:07:69:1d:ed:94:c9:be:9d:65:
0d:59:b5:15:2e:10:b9:35:53:57:30:bf:72:fc:d4:b1:6f:da:
da:84:63:3f:62:c4:70:7f:9a:98:c4:bf:17:98:24:58:89:f0:
21:00:3e:3f:90:9f:0a:66:6c:d7:44:78:12:39:02:39:63:a1:
99:10:3d:71:3b:39:ae:24:99:40:f4:63:9c:d3:14:31:0b:ad:
3a:f5:df:9f:19:85:8a:47:33:f6:c4:81:ce:f5:09:d2:28:8b:
07:21:de:8e:72:e6:95:71:34:73:40:7a:99:78:35:62:57:2d:
55:32:7b:82:66:56:f7:45:f0:d7:9d:9c:5b:31:4f:01:6a:c0:
75:9c:32:75:52:91:7c:3b:cc:bd:47:c8:76:e5:3a:7f:51:01:
af:2e:aa:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client