
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3132382e302f31392d3139203d3e203137393638.roa
File: 3132352e35382e3132382e302f31392d3139203d3e203137393638.roa (raw, json)
Hash identifier: 7zJ98kwLNB1r0QH675IpIryFV/NhXlT9EnuOkITZxps=
Subject key identifier: BF:08:E3:6E:CB:FC:F9:52:5A:1B:5A:F8:EC:DF:03:64:68:48:95:66
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 7AFF8D21B434C27770A0C5CA6E953016A347AA52
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3132382e302f31392d3139203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:53:33 +0000
ROA not before: Mon 29 Jun 2026 02:48:33 +0000
ROA not after: Mon 28 Jun 2027 02:53:33 +0000
asID: 17968
IP address blocks: 125.58.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ff:8d:21:b4:34:c2:77:70:a0:c5:ca:6e:95:30:16:a3:47:aa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:48:33 2026 GMT
Not After : Jun 28 02:53:33 2027 GMT
Subject: CN=BF08E36ECBFCF9525A1B5AF8ECDF036468489566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:a7:78:fb:b1:40:e4:2c:f6:41:65:d8:de:
70:af:09:c3:33:46:2f:bc:b3:f3:b9:a7:56:b0:e7:
a9:fb:88:dc:45:c6:f1:4a:88:47:cc:4f:83:7b:82:
5f:40:8b:c5:34:ca:30:7e:74:b9:9b:56:b1:bd:1b:
ad:4c:8d:3f:31:17:b8:b5:5a:71:a5:0c:61:db:35:
8d:17:d1:63:c5:49:99:f9:69:f4:33:25:65:54:41:
45:67:49:9a:ad:76:b6:b7:37:0d:dc:b6:3a:54:fe:
61:5d:a7:85:05:d1:37:c2:09:60:ff:5a:f3:4c:90:
1c:e5:fa:8d:86:17:d8:bb:72:29:96:14:a3:f8:19:
e0:81:41:ac:72:c0:da:91:b7:4b:53:1a:c3:e0:70:
5d:fd:69:4d:82:53:a1:73:08:b5:4a:77:bf:e8:0f:
91:39:60:d4:a5:d1:20:51:9b:ce:c2:54:1e:38:03:
8d:73:6c:49:a4:9f:aa:7d:4d:90:34:09:ba:01:fa:
8d:11:1a:06:a7:98:c7:6d:b9:37:d9:4d:f2:60:a2:
f6:ac:34:a1:9e:b3:94:2e:50:98:f0:30:32:68:19:
cb:28:fb:81:1d:8e:f3:88:d9:5e:a6:47:8b:47:d8:
a0:79:dd:56:c5:9a:f6:f5:46:4d:1f:0b:8d:6d:29:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:E3:6E:CB:FC:F9:52:5A:1B:5A:F8:EC:DF:03:64:68:48:95:66
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3132382e302f31392d3139203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.58.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:e4:d9:5f:51:d1:d0:ce:a2:9f:34:df:54:5c:99:39:f3:de:
3f:81:c0:b8:1b:fa:25:89:11:81:11:1f:5a:de:d5:2c:bb:7f:
7c:5e:fa:41:c5:25:52:89:0f:92:ab:57:dd:56:e9:df:52:58:
26:88:cd:45:99:c4:50:a7:7d:de:de:e3:44:a1:0a:6e:81:a2:
b4:80:e2:07:c7:2d:58:84:3a:8d:40:3a:34:50:70:0e:40:36:
e8:a9:b5:e5:a2:e4:20:cb:c0:b8:10:8c:07:3a:5f:2b:8a:71:
72:f1:2d:28:5b:66:61:97:74:da:b9:83:5d:0f:83:36:d6:08:
a1:45:7e:26:44:78:9d:13:ee:78:1c:ff:03:09:83:44:c0:ac:
97:5e:ac:55:bb:fd:9d:43:41:ba:16:af:05:db:9e:68:e5:88:
c7:eb:4a:74:20:d2:5f:ed:4d:91:5a:d6:cf:62:62:d3:ad:7e:
54:5c:a2:97:21:78:d7:f3:85:de:1c:1d:48:a9:5d:a7:aa:2e:
9f:e3:0d:84:fb:5c:64:9b:b6:03:fc:6c:47:26:22:2d:aa:9b:
19:d7:6e:e1:4c:8c:d0:e8:a3:03:e6:3b:e4:72:41:49:7b:32:
88:92:c0:fb:65:23:27:17:cd:d4:26:ab:22:ef:51:f9:b3:20:
7e:f9:31:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:44 2026 by rpki-client