
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3137362e302f32302d3230203d3e203137393638.roa
File: 3230332e39302e3137362e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier: E1dtvX5ptFANV//TnMhVpFXp4IGGH3+MlLackljGfjY=
Subject key identifier: 23:C4:10:F1:8B:8F:B6:94:AC:CB:3C:B6:64:E9:69:F5:7A:1F:1F:DB
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 6B2C377ABE2A3341213C11417B23CC945A2636B9
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3137362e302f32302d3230203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:39:44 +0000
ROA not before: Mon 29 Jun 2026 02:34:44 +0000
ROA not after: Mon 28 Jun 2027 02:39:44 +0000
asID: 17968
IP address blocks: 203.90.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2c:37:7a:be:2a:33:41:21:3c:11:41:7b:23:cc:94:5a:26:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:34:44 2026 GMT
Not After : Jun 28 02:39:44 2027 GMT
Subject: CN=23C410F18B8FB694ACCB3CB664E969F57A1F1FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:e5:a9:37:1d:31:81:b0:31:c4:78:03:eb:
ca:6b:05:52:01:6c:6d:c9:67:0a:a5:44:7b:10:54:
0a:87:eb:7d:9a:da:9b:7f:be:91:91:af:1b:0a:91:
84:1b:ea:eb:64:e3:4a:a0:46:20:7d:06:c3:f5:ed:
dd:d0:83:6c:9f:bf:8d:5d:fd:6c:a3:44:84:e0:60:
8e:fb:0e:cb:0d:73:66:69:41:56:a6:92:e1:b8:59:
c5:4b:dc:6c:a3:d4:9f:07:72:bf:a0:5e:58:a3:8a:
f6:b0:52:f0:db:3f:0c:60:e9:42:02:52:c2:ee:4d:
e3:dc:48:d7:f0:4c:0a:2a:b5:96:90:d4:13:f4:69:
52:b0:41:3e:b1:65:0e:58:f4:4a:90:88:ed:e6:af:
9f:86:be:93:2c:19:28:1a:2a:d6:88:98:1f:5b:97:
32:d8:aa:8f:b4:f1:89:3c:9f:7c:14:1c:70:80:30:
f8:0d:b3:15:9a:0c:34:a8:de:5f:20:1f:97:27:cf:
79:e4:9f:c0:8b:09:86:f8:f5:3b:a7:7d:2f:92:0b:
0d:c1:80:b8:45:5a:9d:14:51:80:c9:c8:40:cb:a3:
77:59:ca:c9:c9:89:40:62:c2:af:ab:00:6d:a9:91:
c9:c3:ab:30:3f:49:a9:ee:87:14:1f:de:49:74:b0:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:10:F1:8B:8F:B6:94:AC:CB:3C:B6:64:E9:69:F5:7A:1F:1F:DB
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3137362e302f32302d3230203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.90.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:f9:f0:88:9b:5e:8d:cd:d5:01:f0:48:b6:20:e7:49:81:50:
0b:18:95:8f:23:d0:6d:04:bd:36:16:64:dc:20:22:4e:a8:14:
75:59:3a:4b:7b:8b:9f:ce:cb:05:df:75:ad:14:72:72:05:f9:
f9:4f:a1:6a:d1:f1:8a:4a:e9:56:5e:50:2e:73:b7:1e:aa:22:
62:de:bf:51:0f:a6:14:65:9d:a1:1d:d9:64:6f:73:84:50:44:
ef:29:a2:c8:3b:39:79:27:63:5f:b1:48:9c:cb:60:83:6b:45:
38:5f:6a:f1:6c:e7:4a:6a:2c:de:55:06:eb:64:37:2c:2f:04:
26:f0:fd:8e:8e:25:ae:43:18:43:3c:a2:ea:00:35:26:dc:4e:
c1:0e:30:9f:cd:a3:d0:04:b9:8c:d5:1b:d1:9f:ae:e4:84:5d:
e1:d0:2e:27:d6:bf:a4:34:2b:74:2a:db:97:47:4b:30:43:6b:
83:29:fa:75:04:60:f7:28:cf:48:e0:2e:73:ed:d2:8d:78:27:
f1:e2:13:90:22:d2:ec:4f:3b:b0:5b:30:24:32:c1:12:a5:80:
87:a1:ab:a6:41:ed:87:32:51:b7:aa:08:96:b2:91:16:18:c0:
01:94:6d:9c:e1:c6:9c:d1:36:65:08:21:32:ed:50:43:ec:10:
8e:9d:c2:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:15 2026 by rpki-client