
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a353030303a3a2f33362d3336203d3e203137393638.roa
File: 323430303a666530303a353030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier: WXNuGlGsoXOAD/+zQ5iIawtu3rLT3+mIp0GcHv+VzIc=
Subject key identifier: CA:D9:B0:B0:D4:8F:90:22:43:A8:FA:A1:C3:9F:C4:6C:82:12:F0:B3
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 5E33B29FB2EE9EC776313365F8093541B079D189
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a353030303a3a2f33362d3336203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:46:51 +0000
ROA not before: Mon 29 Jun 2026 02:41:51 +0000
ROA not after: Mon 28 Jun 2027 02:46:51 +0000
asID: 17968
IP address blocks: 2400:fe00:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:33:b2:9f:b2:ee:9e:c7:76:31:33:65:f8:09:35:41:b0:79:d1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:41:51 2026 GMT
Not After : Jun 28 02:46:51 2027 GMT
Subject: CN=CAD9B0B0D48F902243A8FAA1C39FC46C8212F0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:0a:01:12:b3:87:0f:2b:31:2e:d8:3d:0c:
68:4b:81:c6:f4:37:38:32:d9:19:48:a7:76:5b:f2:
06:f2:00:c6:63:d9:58:d6:af:14:7f:c7:f0:4f:db:
bb:49:e0:70:05:2c:0c:aa:08:c6:1d:9f:d1:25:07:
1f:39:40:98:81:b1:7a:5c:e3:5c:1e:54:21:99:38:
07:0e:f6:03:fa:bc:74:97:b7:03:f3:2b:b0:56:a6:
09:5d:d9:f9:41:7b:72:29:4c:2d:10:24:86:78:ef:
e8:5e:bc:9e:2d:f3:d9:e5:60:08:15:0d:44:ed:68:
bc:ae:7a:d9:41:f3:08:7f:0e:88:88:92:88:61:ab:
d9:ea:c1:2e:8b:ad:95:e0:7a:0c:ee:dd:eb:ea:a8:
c9:a9:de:7e:19:71:52:3e:1e:d2:e6:58:0e:c6:ee:
62:48:6e:ec:a8:cb:ba:5e:82:45:03:73:77:31:3b:
29:ce:3d:f4:fa:9e:82:0c:9b:92:eb:8a:de:83:1a:
2b:31:19:0e:8a:86:b5:6c:aa:b2:18:84:be:f2:05:
c2:a9:1b:5f:3d:00:0a:37:e5:43:35:af:b3:7c:30:
41:d2:72:a3:ad:54:6a:1c:f4:71:45:91:c8:74:e2:
ad:46:5a:f9:25:6e:d8:8f:2f:6b:a0:b5:44:e6:38:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:B0:B0:D4:8F:90:22:43:A8:FA:A1:C3:9F:C4:6C:82:12:F0:B3
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a353030303a3a2f33362d3336203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fe00:5000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:8c:32:7a:a9:51:e4:f4:8b:0d:aa:a0:4b:b4:3c:4c:f7:8e:
3e:79:65:ba:8a:0e:30:a3:9e:29:ca:c2:c2:de:2e:ee:e7:24:
c2:70:29:6f:86:fe:6a:c9:e7:ac:97:2f:18:98:8c:41:5d:b7:
2d:29:49:ce:41:44:a6:c1:b3:00:8a:df:f1:20:48:3d:89:14:
47:6d:28:33:e4:18:24:c0:9d:43:52:38:b9:b4:74:1e:1e:7f:
a5:9c:87:4f:70:d9:b2:e8:8c:25:0e:16:35:12:d3:c2:66:78:
60:ae:1c:fc:26:cc:30:a2:54:d2:4e:95:f6:ee:a2:63:42:cb:
dc:e8:9c:d3:0b:bc:2a:a4:3c:09:3c:2b:e2:cd:54:a3:75:48:
16:b9:71:a4:84:e9:23:81:a0:bd:a3:89:19:80:f2:95:fa:90:
fe:a8:65:de:2b:d7:7c:47:67:20:5e:fa:39:12:4a:96:1c:5f:
77:ce:f6:b5:dc:2b:e2:f7:ad:36:d8:22:d3:1f:d3:c8:42:1f:
de:4e:49:b8:a0:79:13:47:01:e1:3e:f5:9d:44:e4:86:66:4c:
06:49:45:79:11:1c:81:0e:e8:3c:c0:b9:97:65:e7:99:f6:89:
6a:e3:98:74:f0:15:aa:68:33:e7:db:44:e6:b1:fc:ea:fd:d4:
5e:68:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:23 2026 by rpki-client