
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa
File: 3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: dSpvCpoI92h2YFFNjhylf2gwffWJ6CSD2MtGApDrMx0=
Subject key identifier: B8:69:C5:BE:CD:58:EC:C6:8C:7A:0C:B9:CB:E1:5B:B9:AF:61:40:5B
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 38345FF53C6866B2F6831326A11647DE85046BAE
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:17 +0000
ROA not before: Mon 29 Jun 2026 02:47:17 +0000
ROA not after: Mon 28 Jun 2027 02:52:17 +0000
asID: 17968
IP address blocks: 114.197.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:34:5f:f5:3c:68:66:b2:f6:83:13:26:a1:16:47:de:85:04:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:17 2026 GMT
Not After : Jun 28 02:52:17 2027 GMT
Subject: CN=B869C5BECD58ECC68C7A0CB9CBE15BB9AF61405B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:81:51:ba:bf:24:83:00:94:a0:bd:9d:64:
a4:72:37:cb:93:73:f0:66:1d:9b:70:be:66:01:7c:
3d:f7:2e:54:90:2a:39:a3:48:1a:49:7e:f9:a2:e6:
f7:82:79:ea:be:dd:10:d4:a0:8f:d1:62:46:5e:a1:
f1:08:50:40:53:7a:dc:f4:6b:7b:1d:29:7b:9d:1b:
da:da:14:06:97:ef:aa:24:b6:43:94:1a:b5:63:54:
58:cb:00:a2:0e:a8:90:58:4e:66:c2:e2:e6:7b:aa:
fb:69:fc:dc:4b:f1:8c:5b:25:19:a4:ad:e1:36:76:
2e:d1:31:9b:a0:49:a5:dc:55:7e:31:b6:8a:80:8c:
ca:eb:53:68:e9:89:12:73:ed:a6:02:00:ab:88:f5:
97:2f:80:a3:88:8d:d5:30:1e:2c:7d:88:c0:c2:4a:
dc:cc:d9:64:83:fa:dc:2d:19:f8:50:f3:ff:84:7e:
99:f6:e9:4b:e0:9e:fd:81:0a:17:ed:3e:d7:4b:ff:
30:50:62:f2:cd:47:e0:1f:3e:53:bf:d6:c1:8e:17:
de:76:4b:1d:0c:77:d8:87:3f:96:96:a4:65:3c:88:
5f:4b:4c:52:7a:1c:82:30:2d:bc:af:06:c5:50:94:
2f:71:a5:fa:2c:b5:08:b8:9b:2c:9a:0f:a2:44:2e:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:69:C5:BE:CD:58:EC:C6:8C:7A:0C:B9:CB:E1:5B:B9:AF:61:40:5B
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.197.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:99:16:96:de:7e:eb:7c:e3:72:51:43:b8:35:f6:8a:cf:58:
a0:82:d3:3f:9f:f1:e6:13:12:35:12:a7:a0:ba:f2:e1:b9:52:
23:26:6c:8c:bd:24:48:cc:96:d3:e0:88:33:03:25:dd:11:69:
e2:f1:09:70:63:a0:83:d3:9e:69:59:29:83:bb:b2:4b:f6:10:
ed:6a:91:6d:20:11:3f:9a:b4:1a:c6:da:64:78:98:49:57:a4:
bf:2b:3f:87:86:0d:cb:79:18:95:fa:28:c6:84:42:08:d5:97:
18:ff:7d:6b:30:32:b2:14:f2:ed:f6:61:ce:20:29:20:43:89:
ce:4c:4d:00:5b:38:ec:7b:15:66:35:81:90:ed:3f:e0:9b:5b:
62:70:12:67:94:30:81:29:f8:0a:e4:31:82:9d:70:72:47:a2:
0b:b2:bc:0c:41:70:f8:cb:f9:a8:53:ab:39:78:19:e2:2f:f6:
56:0b:a3:cc:aa:64:9f:1f:e1:a7:d7:07:ae:a5:56:e5:ac:4a:
00:36:8c:e5:53:c7:05:ce:c3:d4:b8:5e:ba:1a:72:26:3f:9d:
f9:be:11:08:63:91:82:ce:e5:32:54:f0:21:65:6c:52:2b:0d:
33:49:a3:59:e1:08:86:14:6b:ca:bb:22:03:54:b5:6a:7d:16:
43:b6:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client