
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e36342e302f31382d3138203d3e203137393638.roa
File: 3131342e3139372e36342e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: UaD9HktyXFkTDUAr9Kj7lqDBz6JPcfdlmGeK7LmTnjg=
Subject key identifier: 05:EB:E7:37:17:31:C9:76:47:3B:43:B6:55:5A:E5:1D:DC:B9:E1:E9
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 5F85045B7850045E233CD7E534D110E37D63B5BA
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e36342e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:17 +0000
ROA not before: Mon 29 Jun 2026 02:47:17 +0000
ROA not after: Mon 28 Jun 2027 02:52:17 +0000
asID: 17968
IP address blocks: 114.197.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:85:04:5b:78:50:04:5e:23:3c:d7:e5:34:d1:10:e3:7d:63:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:17 2026 GMT
Not After : Jun 28 02:52:17 2027 GMT
Subject: CN=05EBE7371731C976473B43B6555AE51DDCB9E1E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:b9:25:3d:bd:d1:1c:42:67:1f:e4:f0:7f:
20:ce:e7:93:69:d8:94:0f:5d:f3:f8:db:30:12:95:
d6:a4:54:85:79:a8:c1:8d:04:9d:12:86:1b:bc:30:
2b:bf:aa:72:0c:a4:ef:70:ed:3a:6b:00:40:eb:7a:
ef:61:1c:f3:2b:1b:ca:8e:e9:20:32:75:cc:b4:1a:
d8:d7:23:e7:66:9c:ca:e2:70:7d:f7:83:2c:f1:d7:
5d:1e:fa:31:56:bc:0f:02:01:fe:7a:ed:ae:0f:77:
7d:17:43:6a:53:94:42:2b:c9:95:97:87:85:90:ad:
12:1e:95:61:56:21:47:d6:16:c4:bf:a7:79:b3:85:
92:2c:ce:01:c2:5a:99:df:46:c8:46:7a:04:bc:94:
81:41:4f:18:49:b3:4c:b5:1a:23:4e:43:54:01:47:
17:ec:68:79:70:84:b9:80:d3:fc:72:7d:92:ef:3a:
1f:7c:39:be:a6:25:b5:9d:d9:d2:f3:5a:08:e7:38:
3d:3e:19:60:a0:01:bd:52:f5:68:b9:e4:33:1c:96:
55:74:b2:f3:5b:95:65:9b:dd:38:55:2f:19:43:94:
76:2f:d7:93:82:dc:0d:b7:e3:4d:5d:fa:a1:e9:42:
65:5e:07:16:3b:5b:fc:3f:a6:f9:57:b1:83:70:2f:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:E7:37:17:31:C9:76:47:3B:43:B6:55:5A:E5:1D:DC:B9:E1:E9
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e36342e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.197.64.0/18
Signature Algorithm: sha256WithRSAEncryption
82:c0:13:5a:48:93:b9:fb:cf:86:84:bb:7d:e2:73:41:e1:8b:
5c:42:a0:9d:2a:e8:36:02:8f:5a:6e:18:ed:db:43:8a:fd:a8:
5f:12:d9:57:ce:e3:9b:93:4b:79:39:17:b3:62:9d:16:6c:89:
52:49:25:0e:77:0c:e3:da:1b:ba:18:44:49:12:25:e8:b9:0c:
4f:1a:a3:9a:a3:0a:50:7c:da:40:c8:fe:bc:12:1a:ad:5b:66:
e5:92:1a:9b:8c:3a:1d:18:c5:61:cd:c9:d2:a4:2c:be:54:84:
4b:de:6d:04:c9:e8:a9:82:b9:72:f6:71:58:1d:25:ea:1f:19:
41:ed:fb:6d:d6:59:4a:61:8b:86:a1:20:69:3c:d4:ff:58:79:
25:0d:2d:4b:63:39:51:17:ce:ca:f3:ef:3c:2f:91:21:e1:57:
b6:ac:2d:ec:b8:d4:27:6a:d3:a4:81:f4:a9:af:b0:38:06:2b:
76:15:2f:cc:f2:30:1a:03:46:d0:cb:22:39:84:0b:3f:05:e1:
67:ee:0a:3b:e7:eb:eb:eb:a4:11:17:18:cf:57:de:36:50:3c:
cc:d3:2b:ea:34:ff:ba:93:d7:6d:f1:6e:18:a5:06:8c:6f:09:
87:d1:66:c6:e6:14:2b:fa:4c:72:f7:2d:0d:2c:84:1f:c4:cc:
86:f6:b0:7b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUX4UEW3hQBF4jPNflNNEQ431jtbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQ3MTdaFw0yNzA2MjgwMjUyMTdaMDMxMTAvBgNV
BAMTKDA1RUJFNzM3MTczMUM5NzY0NzNCNDNCNjU1NUFFNTFERENCOUUxRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNgrklPb3RHEJnH+TwfyDO55Np
2JQPXfP42zASldakVIV5qMGNBJ0Shhu8MCu/qnIMpO9w7TprAEDreu9hHPMrG8qO
6SAydcy0GtjXI+dmnMricH33gyzx110e+jFWvA8CAf567a4Pd30XQ2pTlEIryZWX
h4WQrRIelWFWIUfWFsS/p3mzhZIszgHCWpnfRshGegS8lIFBTxhJs0y1GiNOQ1QB
RxfsaHlwhLmA0/xyfZLvOh98Ob6mJbWd2dLzWgjnOD0+GWCgAb1S9Wi55DMcllV0
svNblWWb3ThVLxlDlHYv15OC3A23401d+qHpQmVeBxY7W/w/pvlXsYNwLyTpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUBevnNxcxyXZHO0O2VVrlHdy54ekwHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMxMzEzNDJlMzEz
OTM3MmUzNjM0MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBnLFQDANBgkqhkiG9w0BAQsFAAOCAQEAgsATWkiTufvPhoS7feJzQeGL
XEKgnSroNgKPWm4Y7dtDiv2oXxLZV87jm5NLeTkXs2KdFmyJUkklDncM49obuhhE
SRIl6LkMTxqjmqMKUHzaQMj+vBIarVtm5ZIam4w6HRjFYc3J0qQsvlSES95tBMno
qYK5cvZxWB0l6h8ZQe37bdZZSmGLhqEgaTzU/1h5JQ0tS2M5URfOyvPvPC+RIeFX
tqwt7LjUJ2rTpIH0qa+wOAYrdhUvzPIwGgNG0MsiOYQLPwXhZ+4KO+fr6+ukERcY
z1feNlA8zNMr6jT/upPXbfFuGKUGjG8Jh9FmxuYUK/pMcvctDSyEH8TMhvawew==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:27 2026 by rpki-client