
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3136302e302f31392d3139203d3e203137393638.roa
File: 3132352e35382e3136302e302f31392d3139203d3e203137393638.roa (raw, json)
Hash identifier: L2tdlFOyoy/LLY89EI8+Oxppx32D0LdmTrGBOCeIBRc=
Subject key identifier: A3:65:C4:9F:43:8E:63:8A:47:56:F5:EA:44:C1:C0:9F:0E:C2:C1:32
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 70AE202AE5BD66423BB418DA4E0F59A4FD498E2E
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3136302e302f31392d3139203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:53:33 +0000
ROA not before: Mon 29 Jun 2026 02:48:33 +0000
ROA not after: Mon 28 Jun 2027 02:53:33 +0000
asID: 17968
IP address blocks: 125.58.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ae:20:2a:e5:bd:66:42:3b:b4:18:da:4e:0f:59:a4:fd:49:8e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:48:33 2026 GMT
Not After : Jun 28 02:53:33 2027 GMT
Subject: CN=A365C49F438E638A4756F5EA44C1C09F0EC2C132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:66:19:fc:88:2a:4d:c0:b6:93:06:5e:e1:
e1:1c:a1:eb:0f:b5:51:87:af:81:51:b5:9b:2e:35:
28:bc:eb:43:59:21:76:34:d7:d9:ae:e5:6c:73:ac:
f2:16:d5:65:c4:61:6a:20:15:49:a6:c7:b8:1f:47:
53:1c:fe:05:44:e6:8c:aa:a9:b8:73:34:f0:2c:99:
b5:cd:8f:95:75:a2:eb:a5:f0:7b:9b:01:5e:c4:32:
52:64:6f:c2:35:32:36:52:f4:5b:96:06:c3:2a:92:
57:20:3f:30:bb:c8:e4:3e:f8:53:05:27:92:8b:40:
b3:6c:36:26:0e:66:e8:05:01:a4:9f:c6:53:70:3b:
fa:78:a6:c6:a8:12:05:7a:38:f7:fc:10:f1:e7:45:
f9:b5:83:1e:a4:e5:36:9b:2e:55:3d:0f:e8:0c:4e:
f0:3c:3c:61:78:66:2f:59:87:7a:5e:88:bf:04:58:
15:89:a9:60:a3:29:82:23:e3:e2:e0:7a:9c:2a:9a:
f8:04:94:b0:e8:e7:fe:a9:aa:05:7f:88:9b:58:49:
e0:93:ee:f5:3b:ce:14:0a:a3:f5:29:84:60:79:6c:
3d:81:89:54:56:7e:37:96:fd:f5:42:5e:f9:4e:21:
f7:c4:27:40:ae:07:b3:7d:93:74:f6:15:fe:26:88:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:C4:9F:43:8E:63:8A:47:56:F5:EA:44:C1:C0:9F:0E:C2:C1:32
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3136302e302f31392d3139203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
88:80:3c:32:43:20:ac:cd:9f:bf:58:38:ab:90:45:c8:0c:be:
b1:d0:5c:17:09:98:60:46:07:e7:6e:c3:35:ed:69:6d:12:0b:
f7:d1:46:7e:fe:6a:e4:39:a7:a9:66:fb:d0:53:63:7d:db:bd:
21:76:15:68:07:b7:45:ae:97:59:97:bc:3d:02:89:b6:d8:54:
10:b2:3b:44:4f:b3:e5:41:50:e8:d4:cf:8f:01:e8:bd:3d:97:
1c:c1:a6:a9:6b:96:54:3c:71:b8:2c:5f:13:71:25:2a:f9:ff:
3c:7e:1c:6b:0d:60:5e:8a:22:63:65:73:4d:1f:82:cf:be:ff:
41:45:33:de:71:0e:8b:e7:ed:46:31:cc:ec:ac:a7:44:f6:d9:
ea:72:99:d3:7d:c9:46:e4:8a:36:6b:23:9f:89:46:24:43:87:
71:c6:5d:32:e1:d2:b8:a3:d0:3b:42:99:2c:a6:16:0c:86:d3:
41:3a:db:87:78:a2:ce:55:b1:48:09:53:36:41:9b:b1:67:83:
a7:33:57:4d:43:27:f7:87:b8:1b:2c:6c:42:c5:88:54:b8:bc:
2b:b3:c5:6d:f0:7d:00:ff:68:7c:44:69:1e:b9:3d:92:76:ac:
7e:06:11:94:e1:62:6e:32:c7:7e:1d:01:b8:a4:71:c8:ef:50:
82:16:49:f8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUcK4gKuW9ZkI7tBjaTg9ZpP1Jji4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQ4MzNaFw0yNzA2MjgwMjUzMzNaMDMxMTAvBgNV
BAMTKEEzNjVDNDlGNDM4RTYzOEE0NzU2RjVFQTQ0QzFDMDlGMEVDMkMxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSmYZ/IgqTcC2kwZe4eEcoesP
tVGHr4FRtZsuNSi860NZIXY019mu5WxzrPIW1WXEYWogFUmmx7gfR1Mc/gVE5oyq
qbhzNPAsmbXNj5V1ouul8HubAV7EMlJkb8I1MjZS9FuWBsMqklcgPzC7yOQ++FMF
J5KLQLNsNiYOZugFAaSfxlNwO/p4psaoEgV6OPf8EPHnRfm1gx6k5TabLlU9D+gM
TvA8PGF4Zi9Zh3peiL8EWBWJqWCjKYIj4+LgepwqmvgElLDo5/6pqgV/iJtYSeCT
7vU7zhQKo/UphGB5bD2BiVRWfjeW/fVCXvlOIffEJ0CuB7N9k3T2Ff4miIITAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUo2XEn0OOY4pHVvXqRMHAnw7CwTIwHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMxMzIzNTJlMzUz
ODJlMzEzNjMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBX06oDANBgkqhkiG9w0BAQsFAAOCAQEAiIA8MkMgrM2fv1g4q5BFyAy+
sdBcFwmYYEYH527DNe1pbRIL99FGfv5q5DmnqWb70FNjfdu9IXYVaAe3Ra6XWZe8
PQKJtthUELI7RE+z5UFQ6NTPjwHovT2XHMGmqWuWVDxxuCxfE3ElKvn/PH4caw1g
XooiY2VzTR+Cz77/QUUz3nEOi+ftRjHM7KynRPbZ6nKZ033JRuSKNmsjn4lGJEOH
ccZdMuHSuKPQO0KZLKYWDIbTQTrbh3iizlWxSAlTNkGbsWeDpzNXTUMn94e4Gyxs
QsWIVLi8K7PFbfB9AP9ofERpHrk9knasfgYRlOFibjLHfh0BuKRxyO9QghZJ+A==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:42 2026 by rpki-client