
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34372e3132382e302f31382d3138203d3e203137393638.roa
File: 3137352e34372e3132382e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier: PK1xh0klrChc6vZZEGM97DgISd5sk2u1lEDLBGks1jM=
Subject key identifier: E7:5C:1C:7B:DA:05:0C:85:52:C9:A0:06:BB:F3:AE:00:33:CC:5D:98
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 4385F11C11E6CABDFB7026684DCC1D398BA98EF2
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34372e3132382e302f31382d3138203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:54:52 +0000
ROA not before: Mon 29 Jun 2026 02:49:52 +0000
ROA not after: Mon 28 Jun 2027 02:54:52 +0000
asID: 17968
IP address blocks: 175.47.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:85:f1:1c:11:e6:ca:bd:fb:70:26:68:4d:cc:1d:39:8b:a9:8e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:49:52 2026 GMT
Not After : Jun 28 02:54:52 2027 GMT
Subject: CN=E75C1C7BDA050C8552C9A006BBF3AE0033CC5D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:ad:7d:80:8e:94:2a:3b:a2:77:66:29:ff:
c0:1c:25:8f:6b:0e:8f:5f:5a:aa:3d:f9:e8:68:ab:
6d:6e:90:17:11:56:b7:23:be:e1:33:de:e0:23:36:
94:9b:7b:b0:9b:0f:b1:d7:54:b6:9f:f7:3e:61:2f:
1e:10:11:e2:1a:a7:76:5c:d0:44:c2:1b:c2:3b:76:
9e:55:8b:b9:a2:7a:d6:85:06:90:62:8a:e4:fa:9c:
6d:aa:d9:32:66:9a:1d:24:b3:cf:20:7d:0b:ad:dc:
6f:39:13:5c:f8:67:f0:05:59:e2:1c:8b:e5:ef:fa:
bb:b6:84:28:65:dc:07:be:86:a6:07:13:af:fb:53:
bc:08:24:91:52:19:1a:36:d1:ca:e1:b5:93:4e:7f:
e3:22:75:33:15:1c:55:84:4f:6d:f0:21:95:38:1d:
0e:26:27:b2:21:58:87:3c:fa:d7:89:83:f2:9c:41:
99:c2:90:1c:5c:49:4b:e7:ed:ed:29:4b:10:fd:fa:
22:90:c2:30:0d:f3:7f:49:ed:9f:4a:09:cc:e3:d7:
02:a8:67:51:2e:5b:6b:84:c7:c2:cb:c4:a3:d0:9c:
52:3d:48:7e:27:cb:68:27:04:a9:7b:86:42:b1:b7:
6e:b7:90:76:72:f3:75:b7:3e:b5:4b:94:1f:19:b3:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:1C:7B:DA:05:0C:85:52:C9:A0:06:BB:F3:AE:00:33:CC:5D:98
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34372e3132382e302f31382d3138203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.47.128.0/18
Signature Algorithm: sha256WithRSAEncryption
68:8f:b1:b8:4a:e8:48:0f:6e:aa:bc:e2:4c:32:42:08:f6:9b:
c6:d4:78:62:10:d8:69:e6:61:71:b7:6d:5c:8d:e0:a9:a6:4b:
b6:7e:11:b1:da:ba:d1:4d:49:15:36:f7:bb:0b:0e:bb:70:e8:
2b:77:00:ec:16:68:52:92:dd:ae:12:85:a0:ed:cc:fe:f8:d6:
9d:95:fe:31:37:b0:d3:bd:75:37:72:3e:8a:c4:db:5c:69:c4:
49:c0:02:74:ed:b3:6b:79:35:73:4d:66:ed:12:4a:c9:05:28:
ca:9e:ec:39:b5:77:00:a0:56:00:37:47:88:93:c3:21:97:3b:
67:7e:75:27:59:5a:b8:e3:d3:23:cf:c5:5a:40:d7:44:93:6f:
4a:44:a7:fb:07:a4:d6:28:e4:41:38:51:a2:58:02:91:4c:6c:
11:52:f5:84:5f:78:72:77:c7:05:68:06:a0:12:f0:e6:aa:97:
f5:fd:e6:24:fa:76:68:be:fb:c5:5a:fa:a2:1c:74:fe:03:7c:
8c:0f:ae:35:e6:a0:4b:58:8a:c7:c6:3d:d1:25:b8:f4:50:cb:
8d:7f:b5:13:36:7f:6d:33:05:0d:7d:9d:72:c2:4d:35:16:e2:
44:78:31:93:7b:34:cd:51:92:9c:84:72:fc:d2:f4:91:c3:6b:
c0:5e:60:d4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQ4XxHBHmyr37cCZoTcwdOYupjvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQ5NTJaFw0yNzA2MjgwMjU0NTJaMDMxMTAvBgNV
BAMTKEU3NUMxQzdCREEwNTBDODU1MkM5QTAwNkJCRjNBRTAwMzNDQzVEOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQrK19gI6UKjuid2Yp/8AcJY9r
Do9fWqo9+ehoq21ukBcRVrcjvuEz3uAjNpSbe7CbD7HXVLaf9z5hLx4QEeIap3Zc
0ETCG8I7dp5Vi7mietaFBpBiiuT6nG2q2TJmmh0ks88gfQut3G85E1z4Z/AFWeIc
i+Xv+ru2hChl3Ae+hqYHE6/7U7wIJJFSGRo20crhtZNOf+MidTMVHFWET23wIZU4
HQ4mJ7IhWIc8+teJg/KcQZnCkBxcSUvn7e0pSxD9+iKQwjAN839J7Z9KCczj1wKo
Z1EuW2uEx8LLxKPQnFI9SH4ny2gnBKl7hkKxt263kHZy83W3PrVLlB8Zs6/tAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU51wce9oFDIVSyaAGu/OuADPMXZgwHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMxMzczNTJlMzQz
NzJlMzEzMjM4MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBq8vgDANBgkqhkiG9w0BAQsFAAOCAQEAaI+xuEroSA9uqrziTDJCCPab
xtR4YhDYaeZhcbdtXI3gqaZLtn4Rsdq60U1JFTb3uwsOu3DoK3cA7BZoUpLdrhKF
oO3M/vjWnZX+MTew0711N3I+isTbXGnEScACdO2za3k1c01m7RJKyQUoyp7sObV3
AKBWADdHiJPDIZc7Z351J1lauOPTI8/FWkDXRJNvSkSn+wek1ijkQThRolgCkUxs
EVL1hF94cnfHBWgGoBLw5qqX9f3mJPp2aL77xVr6ohx0/gN8jA+uNeagS1iKx8Y9
0SW49FDLjX+1EzZ/bTMFDX2dcsJNNRbiRHgxk3s0zVGSnIRy/NL0kcNrwF5g1A==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:51 2026 by rpki-client