
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e302e302f31382d3138203d3e203137393638.roa
File: 3131342e3139372e302e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: 2kSUfpRcDE50Y0edNym6ET/wYoSJPKtXcUdtPLtgY/s=
Subject key identifier: 2E:C2:37:BE:DA:88:0A:EC:F1:C8:70:42:75:6C:99:E6:98:4E:20:C7
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 5CD9748A8D5BF079108D742ABB882E7037F94666
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e302e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:17 +0000
ROA not before: Mon 29 Jun 2026 02:47:17 +0000
ROA not after: Mon 28 Jun 2027 02:52:17 +0000
asID: 17968
IP address blocks: 114.197.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d9:74:8a:8d:5b:f0:79:10:8d:74:2a:bb:88:2e:70:37:f9:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:17 2026 GMT
Not After : Jun 28 02:52:17 2027 GMT
Subject: CN=2EC237BEDA880AECF1C87042756C99E6984E20C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:40:d9:48:b6:ec:1c:9f:9c:fe:ac:2f:ee:
03:f8:f9:f9:a3:e1:e5:b2:23:9b:76:71:d0:80:97:
74:95:fa:63:17:67:7b:d5:76:93:41:ae:90:30:93:
88:f0:be:5b:93:1c:16:11:6e:d5:72:e7:2d:af:9e:
7d:8d:bf:0c:75:37:5e:0d:63:76:83:0d:5d:ef:3f:
c1:dc:67:95:87:44:fc:bc:fc:a4:bc:02:07:31:0d:
59:47:eb:66:3b:72:5c:21:0d:a5:b6:5b:27:ce:7f:
f1:56:5a:0f:cd:a6:f7:b0:f6:34:69:99:3b:34:43:
5e:d4:3f:0c:e2:0b:74:6f:87:3a:0d:64:0c:92:53:
0f:15:27:ed:f2:d5:e4:c0:00:ea:47:ba:1b:05:61:
04:73:ab:a8:ac:64:76:22:ae:dc:4c:e7:53:ec:49:
91:b8:8e:41:a4:29:81:2e:dc:51:13:37:7f:af:ed:
d6:bb:e2:e7:03:ee:62:5b:e9:fb:0c:4f:d1:7c:e3:
d4:1c:f6:04:6b:9d:e9:51:95:00:ab:2d:1b:d0:8e:
bb:b2:41:37:32:b6:d6:03:da:8a:5e:9c:9c:28:04:
a8:20:33:58:56:d6:f4:d5:db:e5:78:c4:b5:5c:bd:
1f:8f:40:aa:64:eb:1c:79:24:12:85:8b:9e:a3:79:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:37:BE:DA:88:0A:EC:F1:C8:70:42:75:6C:99:E6:98:4E:20:C7
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e302e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.197.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9a:c7:89:b8:06:b7:61:5f:c0:5b:88:77:1b:19:97:8e:30:1b:
95:6c:33:39:ca:a9:f5:e3:5e:69:4f:bf:5f:d7:01:21:d5:59:
b8:59:f7:53:3d:98:93:08:a6:32:06:57:8d:f2:03:7b:32:3f:
f9:45:2c:00:e0:fa:55:5e:e2:36:92:8f:b4:f9:53:c9:35:b7:
90:6a:6e:e4:b3:ba:ff:e4:cd:38:dd:28:26:9c:c1:b9:ad:39:
f6:49:37:b0:a7:84:ee:3b:eb:09:07:36:0d:6e:4b:e7:2d:e2:
c8:38:b0:90:6c:5e:4f:58:5a:4d:b7:06:6e:17:d0:81:ef:ff:
c3:19:52:c4:ca:e7:fa:7b:c1:1a:bb:7c:42:c7:2f:0b:71:3d:
d0:5e:bb:71:49:c4:8a:dc:a5:4b:bf:5d:36:98:b2:6c:c8:40:
4b:d3:e5:ed:34:80:d6:ee:c4:14:43:ad:3a:2f:34:fb:a9:d4:
23:78:c5:c8:f0:63:f1:d9:09:10:dd:68:56:25:42:de:c3:63:
f2:e8:46:4b:1d:f1:14:d0:11:f5:19:02:67:07:83:eb:39:1e:
03:ef:19:69:25:28:23:d4:ef:ec:08:2a:cc:20:46:42:4e:92:
27:2d:bd:cf:4e:e3:d2:03:de:b2:bc:0e:ac:fb:05:db:95:31:
66:4b:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:59 2026 by rpki-client