
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3139322e302f32302d3230203d3e203137393638.roa
File: 3230332e39302e3139322e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier: 6D2Z6Ve0fk80763ll6x34nMB1iZDNUq/9hOSeIfCXSY=
Subject key identifier: 8E:08:FC:4C:F3:5F:53:A3:51:30:66:03:5C:07:24:39:79:20:C9:6D
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 79C4F176DF3EDE2B230287B273D9A6C6FCE25485
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3139322e302f32302d3230203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:39:43 +0000
ROA not before: Mon 29 Jun 2026 02:34:43 +0000
ROA not after: Mon 28 Jun 2027 02:39:43 +0000
asID: 17968
IP address blocks: 203.90.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c4:f1:76:df:3e:de:2b:23:02:87:b2:73:d9:a6:c6:fc:e2:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:34:43 2026 GMT
Not After : Jun 28 02:39:43 2027 GMT
Subject: CN=8E08FC4CF35F53A3513066035C0724397920C96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:53:ce:b7:02:0a:12:34:59:4a:39:fa:8e:
ff:9f:e8:c9:0e:a8:ce:a4:e9:d9:8f:49:d1:db:e6:
ec:15:6e:9d:42:89:b2:2c:30:31:8c:98:b3:7b:96:
ff:91:bc:96:ee:7c:1a:ae:1d:23:5b:fb:ef:7d:a7:
b3:b9:0f:5c:57:88:65:b0:97:2f:0d:bb:6c:76:b4:
33:6f:ae:b7:39:e7:23:24:f6:cc:6c:62:5f:36:53:
12:a5:62:29:3f:9d:0f:17:f5:87:b1:a3:25:60:73:
59:c2:66:75:45:50:5e:54:45:f0:a1:aa:e0:e5:e9:
1b:03:de:d9:c8:12:56:32:f0:6f:b5:9f:73:ba:79:
6b:78:46:10:d4:d1:47:3e:e6:0a:7d:9c:92:b3:aa:
91:63:f0:92:72:d4:ea:d7:e5:5a:06:67:32:33:58:
ed:0c:5d:b2:24:5b:d7:9a:64:65:5e:e0:04:0e:93:
bf:3e:40:7a:72:e2:f9:80:32:dc:3b:2f:c5:80:a4:
6b:c3:18:73:94:5e:b2:8e:8f:46:76:14:9c:78:f8:
1d:75:98:95:70:e6:f0:62:6f:c6:d7:ee:5a:c0:c4:
7a:30:7c:bf:ef:bd:14:ea:dc:6d:26:07:db:89:2b:
f6:bb:50:a2:05:36:79:8e:cb:e1:7e:cb:c1:f7:e0:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:FC:4C:F3:5F:53:A3:51:30:66:03:5C:07:24:39:79:20:C9:6D
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3139322e302f32302d3230203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.90.192.0/20
Signature Algorithm: sha256WithRSAEncryption
92:c7:a9:d6:9f:97:4c:81:ee:7a:c4:d8:a1:f3:b0:94:62:ce:
f3:7b:ac:43:bb:f5:cf:94:3c:38:61:40:95:7d:5e:9d:e0:17:
8e:cb:e8:27:29:82:58:8c:25:79:d4:76:bf:a4:40:47:3b:43:
91:26:37:02:2d:98:40:d2:62:3b:cb:e8:0d:a9:ad:7d:04:5d:
f4:89:07:f7:71:7e:5b:f8:d8:e5:71:0a:0a:6b:61:de:64:ac:
34:ca:5d:d4:12:6f:d0:3e:97:37:41:51:d5:92:0d:ca:f8:87:
89:01:49:6e:d8:28:ae:19:79:77:ef:4b:e4:d7:20:38:aa:d2:
29:b1:41:fc:40:38:9f:84:ca:d2:51:e3:fd:ec:12:d4:25:0d:
77:91:13:4c:e8:3d:47:4c:7a:5c:10:ce:71:0c:a3:45:b9:5d:
79:9a:2c:95:af:d1:df:24:9b:42:e8:34:e6:9f:e6:59:7e:f4:
67:8a:74:ff:da:a7:1c:69:b3:67:b9:82:9d:1e:91:9d:54:c2:
5e:1c:05:69:d5:f8:f2:03:13:50:dc:76:62:5d:91:3c:20:78:
98:d7:3c:03:1d:b4:b5:3b:29:70:a2:7c:96:79:a9:4f:62:88:
12:fb:4f:35:04:13:8f:53:c2:09:4f:56:d9:4b:d4:44:79:6f:
03:32:d8:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:21 2026 by rpki-client