
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e302e302f31382d3138203d3e203137393638.roa
File: 3137352e34362e302e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: rj8F0wgpFJLr7DqFuZ9ZsbCF7gmviIrDeVkFMFU22x8=
Subject key identifier: C4:F6:59:8D:5F:D7:AA:6F:43:B8:1D:A4:77:AE:1C:4C:23:E8:55:91
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 4605F85DA05379EF772555FFA459631C8D6D1B96
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e302e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:53:33 +0000
ROA not before: Mon 29 Jun 2026 02:48:33 +0000
ROA not after: Mon 28 Jun 2027 02:53:33 +0000
asID: 17968
IP address blocks: 175.46.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:05:f8:5d:a0:53:79:ef:77:25:55:ff:a4:59:63:1c:8d:6d:1b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:48:33 2026 GMT
Not After : Jun 28 02:53:33 2027 GMT
Subject: CN=C4F6598D5FD7AA6F43B81DA477AE1C4C23E85591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:ae:5f:20:be:ed:02:e2:89:50:aa:47:c7:
60:94:9d:07:91:68:2c:4d:ff:6c:47:8b:5b:ea:62:
e1:d8:2d:d5:c6:1e:46:f4:a4:e4:47:09:48:9c:5b:
ae:c4:59:99:b4:ee:c8:77:33:bc:1c:08:26:7c:37:
56:4b:80:ee:7d:ff:30:22:2f:b7:b7:c0:c2:c3:31:
18:5e:d6:8b:c6:d7:cb:a2:59:82:ed:b7:1c:32:97:
45:fb:42:51:15:23:27:f3:ff:cc:f4:bc:f3:5e:dc:
95:0f:c8:0a:40:77:5f:bd:cd:2b:60:91:9f:c0:79:
c1:28:8a:e6:11:7e:39:4f:3d:51:61:d3:d4:e4:07:
99:eb:6f:a0:5c:d8:20:b9:67:4e:65:23:b2:5b:05:
27:6b:92:9b:9b:08:01:5c:ac:cf:2d:ba:2f:06:09:
85:2d:80:11:77:58:c3:dc:8c:13:58:64:cb:92:3f:
c2:81:90:b2:5c:f3:7c:c4:77:65:c2:a1:e0:69:e1:
d3:fa:e0:70:a0:73:f4:2a:87:3d:be:94:81:ae:0c:
8a:45:3c:65:c1:56:7d:d8:36:4f:59:a7:28:88:3b:
4a:d7:fe:5c:3f:75:d8:27:d8:fd:fd:5f:6b:56:b8:
41:7e:82:c3:88:be:47:41:7a:62:92:f0:1a:ac:4a:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:59:8D:5F:D7:AA:6F:43:B8:1D:A4:77:AE:1C:4C:23:E8:55:91
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e302e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.46.0.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:2c:82:f5:80:f8:9b:f3:b8:36:c7:57:43:0b:aa:c2:d6:80:
1b:f4:e7:d5:08:9d:07:a8:2b:b6:a4:3b:88:ff:30:b1:9c:e6:
d1:77:5d:8d:ff:2f:4d:b2:51:64:e6:21:7e:4b:05:67:ad:e8:
28:04:5b:7b:21:d9:5c:9e:c5:42:20:c6:62:e9:ef:0a:ba:c4:
43:83:a5:fc:bd:7e:dd:9e:06:d8:97:c5:76:fd:31:0f:68:c4:
0f:01:5d:6e:d6:00:a2:c6:61:20:09:b6:fe:de:ca:a4:cb:c5:
23:80:97:2c:44:88:45:d0:fa:d7:51:2a:54:dc:0c:87:a3:32:
c6:ee:fa:d2:b9:d8:70:bb:8e:04:48:ff:6b:71:fe:e4:ee:45:
fc:2b:37:35:66:7f:05:19:85:53:27:cc:3d:82:ca:34:bb:e4:
01:83:1d:64:1a:1f:7b:3d:9b:e0:36:fd:f8:0a:19:2a:00:f1:
4e:09:9c:3e:5e:c7:c6:4b:b2:c1:16:89:6b:1f:f4:ab:e6:07:
bd:92:f3:bf:23:09:46:f8:14:43:f0:02:d6:f4:e6:0f:45:a9:
4b:ce:20:89:6f:11:7a:b9:9e:6f:32:3e:17:82:f7:a5:1e:1d:
8c:9f:40:16:34:c2:eb:84:40:ec:73:6f:5f:09:6d:e4:59:a0:
87:9e:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:19 2026 by rpki-client