
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a363030303a3a2f33362d3336203d3e203137393638.roa
File: 323430303a666530303a363030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier: ocUKXeS2D+1ksTGXZgVubk+jcgj3qoRIyl35yODf47U=
Subject key identifier: AB:E0:F9:41:0D:18:35:2E:5A:6E:8C:B5:9B:78:BC:5C:E9:AA:8F:A3
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 35F30E1003B164E2F44227B9663C09B4F4DA7167
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a363030303a3a2f33362d3336203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:46:51 +0000
ROA not before: Mon 29 Jun 2026 02:41:51 +0000
ROA not after: Mon 28 Jun 2027 02:46:51 +0000
asID: 17968
IP address blocks: 2400:fe00:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f3:0e:10:03:b1:64:e2:f4:42:27:b9:66:3c:09:b4:f4:da:71:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:41:51 2026 GMT
Not After : Jun 28 02:46:51 2027 GMT
Subject: CN=ABE0F9410D18352E5A6E8CB59B78BC5CE9AA8FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:8d:2e:62:d1:44:72:d0:eb:bb:33:e7:73:
46:04:c4:39:a2:65:0a:8b:4f:aa:4e:c1:9c:18:e1:
ad:1f:3e:44:4b:71:65:ef:94:af:17:eb:fe:1b:ff:
17:e3:9d:0f:6d:88:56:32:14:e8:e0:e6:21:c4:4e:
7f:fc:4e:48:ef:86:78:75:e7:9d:bb:be:12:6b:43:
b4:ca:a0:44:66:81:aa:37:03:e3:05:75:f4:8d:0e:
47:49:d4:2b:12:3f:48:88:80:65:9b:ec:1b:2c:c2:
35:6d:06:8f:ab:d9:ea:bb:e3:87:8e:75:36:21:7b:
70:9b:09:91:b3:50:7a:3f:b4:66:e4:10:63:c5:60:
10:0a:1e:96:4f:64:52:71:20:f7:a2:80:9c:4d:bb:
03:49:f1:6b:db:2f:6a:42:e2:0a:21:d9:83:7b:76:
e5:93:85:c4:0a:5d:89:fe:f7:c6:53:ae:a4:3e:c8:
73:6a:c5:27:1a:1b:59:b5:67:f2:ee:05:a0:eb:96:
6d:2c:a9:02:73:f4:78:ce:ad:e5:ba:9e:bf:c1:9d:
1f:e1:fc:54:ea:01:c0:1e:5b:80:88:96:a0:00:28:
e7:2a:b8:fd:b2:24:7f:93:62:30:69:e6:e8:a8:57:
ce:e9:de:6f:04:d2:71:01:67:93:de:db:6e:7b:29:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:F9:41:0D:18:35:2E:5A:6E:8C:B5:9B:78:BC:5C:E9:AA:8F:A3
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a363030303a3a2f33362d3336203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fe00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
4e:34:56:46:7f:a0:ee:5f:2b:04:0b:42:00:d8:be:df:6a:8f:
56:01:dc:fa:8b:10:9a:f7:2e:99:41:6b:c9:13:0d:3a:f0:90:
43:1a:d8:29:d9:7e:b8:33:75:f0:b1:07:4c:ea:9c:f8:fe:9e:
73:d4:e5:a7:3f:65:e6:b2:03:10:6a:02:05:14:83:bb:95:b5:
28:50:ad:bc:ec:a1:b2:37:d9:8f:22:66:c3:3f:81:f1:89:f3:
b8:bd:34:f6:ca:f7:e9:eb:c8:72:01:91:99:24:54:73:33:b9:
a3:ed:78:27:b0:ce:62:c0:54:40:7d:a4:8b:63:72:83:77:84:
dd:d4:d2:81:44:3e:e2:9a:a3:f8:3b:8b:3b:e4:d0:5f:de:62:
51:87:88:93:e4:f7:db:e3:bd:5b:dd:08:1b:f1:96:d8:13:f5:
7d:f7:38:ad:17:e0:46:30:c2:a9:75:60:b6:67:60:8b:1f:0d:
9d:3b:85:e6:a7:d9:70:8f:c4:a3:31:19:13:7e:70:53:58:75:
b7:f1:14:6e:8a:ae:43:59:76:e7:f1:0c:08:22:54:97:6c:5e:
08:e9:71:17:3a:07:04:3e:0a:0d:50:85:a0:38:b0:74:a2:b0:
93:46:5f:1c:df:f3:5a:54:ba:3e:1d:6e:b3:98:4f:97:b4:c9:
9a:51:3f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUNfMOEAOxZOL0Qie5ZjwJtPTacWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQxNTFaFw0yNzA2MjgwMjQ2NTFaMDMxMTAvBgNV
BAMTKEFCRTBGOTQxMEQxODM1MkU1QTZFOENCNTlCNzhCQzVDRTlBQThGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRI0uYtFEctDruzPnc0YExDmi
ZQqLT6pOwZwY4a0fPkRLcWXvlK8X6/4b/xfjnQ9tiFYyFOjg5iHETn/8Tkjvhnh1
5527vhJrQ7TKoERmgao3A+MFdfSNDkdJ1CsSP0iIgGWb7BsswjVtBo+r2eq744eO
dTYhe3CbCZGzUHo/tGbkEGPFYBAKHpZPZFJxIPeigJxNuwNJ8WvbL2pC4goh2YN7
duWThcQKXYn+98ZTrqQ+yHNqxScaG1m1Z/LuBaDrlm0sqQJz9HjOreW6nr/BnR/h
/FTqAcAeW4CIlqAAKOcquP2yJH+TYjBp5uioV87p3m8E0nEBZ5Pe2257KSD3AgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUq+D5QQ0YNS5aboy1m3i8XOmqj6MwHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzIzNDMwMzAz
YTY2NjUzMDMwM2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzcz
OTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgQkAP4AYDANBgkqhkiG9w0BAQsFAAOCAQEATjRWRn+g
7l8rBAtCANi+32qPVgHc+osQmvcumUFryRMNOvCQQxrYKdl+uDN18LEHTOqc+P6e
c9Tlpz9l5rIDEGoCBRSDu5W1KFCtvOyhsjfZjyJmwz+B8YnzuL009sr36evIcgGR
mSRUczO5o+14J7DOYsBUQH2ki2Nyg3eE3dTSgUQ+4pqj+DuLO+TQX95iUYeIk+T3
2+O9W90IG/GW2BP1ffc4rRfgRjDCqXVgtmdgix8NnTuF5qfZcI/EozEZE35wU1h1
t/EUboquQ1l25/EMCCJUl2xeCOlxFzoHBD4KDVCFoDiwdKKwk0ZfHN/zWlS6Ph1u
s5hPl7TJmlE/Kg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:16 2026 by rpki-client