
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3136302e302f32302d3230203d3e203137393638.roa
File: 3230332e39302e3136302e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier: Xrdn8iXPJ/XsLAkG1tRslc6qeBRodS3FQHA+uM2Cgtw=
Subject key identifier: E5:5D:D7:AC:34:E6:49:2B:C4:D4:24:08:15:87:1F:E1:8A:32:F2:DA
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 695C1AC1CFF7D6EAC01E2A1465F466292AAF7928
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3136302e302f32302d3230203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:39:44 +0000
ROA not before: Mon 29 Jun 2026 02:34:44 +0000
ROA not after: Mon 28 Jun 2027 02:39:44 +0000
asID: 17968
IP address blocks: 203.90.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5c:1a:c1:cf:f7:d6:ea:c0:1e:2a:14:65:f4:66:29:2a:af:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:34:44 2026 GMT
Not After : Jun 28 02:39:44 2027 GMT
Subject: CN=E55DD7AC34E6492BC4D4240815871FE18A32F2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:b5:02:dd:2d:7e:ce:51:d4:16:60:9f:68:
2a:18:69:a3:a1:d2:ff:99:fa:df:14:b5:d5:e9:6a:
41:6f:1d:d2:63:0c:66:cf:b1:dd:fa:08:a0:77:20:
0c:d0:4a:fe:6d:a6:68:b5:3f:8e:c7:c6:31:89:0f:
bd:b8:cc:4b:1d:9f:66:cb:5c:2f:ad:54:99:72:82:
9f:46:1e:47:a3:98:0d:4a:42:9a:78:66:f3:4f:ab:
ce:3d:e7:ff:20:98:a1:4d:2f:21:30:bd:ae:73:e9:
2b:63:82:fd:c3:b0:29:cf:c3:57:31:8d:74:cb:81:
64:6c:ad:5b:1b:5b:6c:8c:fb:99:0a:95:82:5a:9e:
f7:70:f9:df:e9:3d:bb:c3:ca:9b:7f:2c:1c:6b:f8:
c2:d1:a5:6b:82:91:68:59:39:9e:90:11:f8:46:90:
bd:a2:5b:18:14:7b:5b:b4:93:a4:71:11:cb:29:9c:
f2:b2:83:2c:4e:03:77:98:ee:11:4d:61:b6:4b:fd:
a8:03:6b:dd:57:b4:c9:fd:49:0d:68:cf:6f:f5:f4:
f0:61:4d:ee:60:50:91:9e:87:8e:f9:c7:7d:82:11:
41:b3:da:9b:75:b6:9f:a7:66:ad:0f:2c:5f:28:ee:
02:8b:cd:5a:c6:45:6e:57:be:21:6e:9d:94:9e:23:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5D:D7:AC:34:E6:49:2B:C4:D4:24:08:15:87:1F:E1:8A:32:F2:DA
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3136302e302f32302d3230203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.90.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:20:9d:f1:0d:f7:a5:c9:c3:33:66:4b:3c:1e:46:cc:44:67:
f4:47:d8:eb:46:a6:db:70:57:1b:1f:bf:94:d9:3a:81:3c:4f:
9d:f5:1d:54:af:70:6d:b1:67:b9:ce:c0:54:56:d5:d7:7a:b4:
8e:41:db:64:92:eb:40:7c:bc:4f:cc:d2:3c:0a:f9:02:9c:aa:
88:44:fe:42:ed:70:b9:ef:15:12:d3:9c:6d:1b:56:03:63:88:
59:94:f9:bb:da:3a:7a:e8:ed:e4:c8:83:6b:b9:ac:d9:a1:80:
5c:ac:33:b8:c0:c0:ba:d0:a5:b7:c1:8e:dc:0b:9b:6c:81:80:
59:e1:e3:a6:21:ee:c8:e9:8d:ca:cd:34:07:e3:f1:7a:49:f1:
33:b0:ae:cf:83:f5:38:4c:54:66:d6:6b:59:69:d9:02:82:39:
bd:ee:41:ad:95:6d:18:38:e9:21:b5:d1:98:dd:91:77:1f:6c:
35:ac:bc:ed:3c:d6:3a:29:51:63:74:de:6c:d6:97:29:22:f3:
7b:44:03:3b:40:43:93:1a:cb:c9:2b:d7:36:cb:87:01:d9:a5:
d8:51:9c:7b:1c:0e:59:62:1f:b9:2b:f1:0c:90:13:67:18:dc:
61:b5:db:8a:5b:9e:8a:64:ce:16:d0:1e:6f:4b:dc:98:af:0e:
0b:c3:7d:e2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUaVwawc/31urAHioUZfRmKSqveSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjM0NDRaFw0yNzA2MjgwMjM5NDRaMDMxMTAvBgNV
BAMTKEU1NUREN0FDMzRFNjQ5MkJDNEQ0MjQwODE1ODcxRkUxOEEzMkYyREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnWLUC3S1+zlHUFmCfaCoYaaOh
0v+Z+t8UtdXpakFvHdJjDGbPsd36CKB3IAzQSv5tpmi1P47HxjGJD724zEsdn2bL
XC+tVJlygp9GHkejmA1KQpp4ZvNPq8495/8gmKFNLyEwva5z6Stjgv3DsCnPw1cx
jXTLgWRsrVsbW2yM+5kKlYJanvdw+d/pPbvDypt/LBxr+MLRpWuCkWhZOZ6QEfhG
kL2iWxgUe1u0k6RxEcspnPKygyxOA3eY7hFNYbZL/agDa91XtMn9SQ1oz2/19PBh
Te5gUJGeh475x32CEUGz2pt1tp+nZq0PLF8o7gKLzVrGRW5XviFunZSeI5lXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU5V3XrDTmSSvE1CQIFYcf4Yoy8towHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMyMzAzMzJlMzkz
MDJlMzEzNjMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBMtaoDANBgkqhkiG9w0BAQsFAAOCAQEAsCCd8Q33pcnDM2ZLPB5GzERn
9EfY60am23BXGx+/lNk6gTxPnfUdVK9wbbFnuc7AVFbV13q0jkHbZJLrQHy8T8zS
PAr5ApyqiET+Qu1wue8VEtOcbRtWA2OIWZT5u9o6eujt5MiDa7ms2aGAXKwzuMDA
utClt8GO3AubbIGAWeHjpiHuyOmNys00B+PxeknxM7Cuz4P1OExUZtZrWWnZAoI5
ve5BrZVtGDjpIbXRmN2Rdx9sNay87TzWOilRY3TebNaXKSLze0QDO0BDkxrLySvX
NsuHAdml2FGcexwOWWIfuSvxDJATZxjcYbXbilueimTOFtAeb0vcmK8OC8N94g==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:21 2026 by rpki-client