
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e3139322e302f31382d3138203d3e203137393638.roa
File: 3137352e34362e3139322e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: 5uFsmWJBhSfzM9ZiT7l8IShZGa9kEqjJVX6Xfl+pK8M=
Subject key identifier: 6D:98:27:71:DF:D5:EA:FE:1C:D3:5D:A0:40:B1:8D:1C:84:8E:C4:A7
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 0E17972F3278F07113669A774BFF3AFFC01B8C1E
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e3139322e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:54:52 +0000
ROA not before: Mon 29 Jun 2026 02:49:52 +0000
ROA not after: Mon 28 Jun 2027 02:54:52 +0000
asID: 17968
IP address blocks: 175.46.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:17:97:2f:32:78:f0:71:13:66:9a:77:4b:ff:3a:ff:c0:1b:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:49:52 2026 GMT
Not After : Jun 28 02:54:52 2027 GMT
Subject: CN=6D982771DFD5EAFE1CD35DA040B18D1C848EC4A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:d2:9f:03:ef:e2:f5:f5:cb:16:5e:1d:dd:
e2:3b:ac:26:9a:3a:a8:12:d9:d9:2c:f7:06:a7:ec:
13:88:44:f6:7c:a4:38:b6:ca:f2:77:36:ad:fc:2d:
ba:7d:b8:40:0d:95:5b:cf:e8:5c:6a:92:ca:f0:c8:
c7:f0:b6:4f:15:c3:92:f9:75:37:54:55:4e:4e:4d:
07:94:f8:16:c5:ce:ad:06:20:6a:f8:20:12:d3:0a:
59:d6:f8:47:01:19:52:4d:a7:05:8e:21:05:e4:63:
3c:a6:73:f9:fd:9d:18:4e:87:04:32:4c:38:04:b9:
55:9d:b0:73:1f:3b:45:7f:60:6f:b6:c4:06:91:8e:
79:c7:98:ac:ad:c6:16:cd:48:fa:b7:7c:97:42:be:
d5:a0:a0:93:b4:f1:ae:ee:d0:c0:1d:2d:74:dc:e3:
06:69:c8:97:df:c7:d4:52:e9:b0:20:5f:2c:77:2a:
ad:ab:a7:86:f6:f4:7b:89:2e:3b:0c:2b:2a:6a:6b:
26:0a:22:ea:54:cc:50:9a:8b:d9:78:62:50:02:5b:
e2:44:62:8e:1f:23:c0:fe:21:e1:3f:76:ec:f8:9e:
f7:05:1b:26:90:65:de:6f:a2:6b:f5:6f:e5:c3:46:
0f:4e:8b:e4:07:11:3c:ba:63:24:19:e0:c9:46:b7:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:27:71:DF:D5:EA:FE:1C:D3:5D:A0:40:B1:8D:1C:84:8E:C4:A7
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e3139322e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.46.192.0/18
Signature Algorithm: sha256WithRSAEncryption
52:ce:53:dd:9f:b6:b8:3e:e9:1f:fd:4b:a2:9f:de:8c:65:f3:
99:b0:5e:03:6d:0b:b3:ae:b8:10:25:ea:ec:3c:81:5a:a4:4c:
fd:fe:b2:3d:f7:fe:05:cf:9c:68:92:7e:4f:3c:6d:cf:fc:a4:
48:d1:80:47:2f:28:db:fb:48:77:9e:22:e8:97:0d:e4:c7:c3:
00:db:ce:1d:f5:17:a7:4e:a4:56:df:60:40:66:c8:30:12:de:
18:0e:29:ee:f1:2f:af:03:87:7f:df:69:0b:1a:a3:57:46:da:
08:db:c1:d4:b5:54:4c:e6:5b:a2:d5:f5:ef:43:93:d7:7a:1c:
4c:c0:49:6a:73:53:bc:89:c3:a3:4a:ef:55:4d:e2:7d:75:4c:
fe:80:63:a4:ed:c6:ed:e5:bb:8c:24:03:96:ad:fc:5e:16:0e:
42:dd:c3:10:b5:6f:0c:f1:5b:3a:34:98:b4:c7:7b:12:0e:30:
29:99:10:04:1b:30:b4:ad:fe:64:ac:00:53:30:68:f1:c6:3f:
58:a4:35:63:3d:5e:6c:0d:ce:4b:f2:f3:dd:e5:be:2f:f2:1d:
e2:77:9e:91:cf:95:20:81:f4:3f:bd:e0:aa:76:6f:42:97:b2:
97:eb:a4:71:b1:44:a2:4a:0b:82:5f:31:ad:6e:f2:e8:d0:65:
3c:a3:ab:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:48 2026 by rpki-client