
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a393030303a3a2f33362d3336203d3e203137393638.roa
File: 323430303a666530303a393030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier: 9NyYc/Nq4AK2C9quUuZS7FIN/D80pJX0Pdo3ApwW7Ro=
Subject key identifier: 5C:B1:71:00:01:32:96:F4:9A:E1:4E:CA:25:77:55:92:E5:15:49:E4
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 7323E996F0F9B68F1DC4F73A41AD7AC2981C18B9
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a393030303a3a2f33362d3336203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:46:50 +0000
ROA not before: Mon 29 Jun 2026 02:41:50 +0000
ROA not after: Mon 28 Jun 2027 02:46:50 +0000
asID: 17968
IP address blocks: 2400:fe00:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:23:e9:96:f0:f9:b6:8f:1d:c4:f7:3a:41:ad:7a:c2:98:1c:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:41:50 2026 GMT
Not After : Jun 28 02:46:50 2027 GMT
Subject: CN=5CB17100013296F49AE14ECA25775592E51549E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:e0:f2:d9:d0:bb:e5:8d:58:14:65:df:b7:
98:20:b8:1d:56:86:c7:fe:bd:95:ff:54:21:03:40:
d7:2f:cf:be:9a:07:7b:0b:76:d1:b4:66:ad:2d:2d:
be:91:fd:82:fd:4f:52:29:8d:2a:6d:6a:d3:bf:19:
36:e5:85:40:00:53:f8:cc:ee:3a:c9:49:8e:0b:c4:
90:25:2b:5a:f3:94:a7:98:e8:51:94:56:79:d7:41:
e5:91:2a:f7:79:62:bf:7d:5f:1e:c5:e8:c6:72:b5:
db:38:20:f2:83:1e:57:45:c3:fa:3c:f3:4e:e8:2c:
a1:bc:9e:2b:6b:81:f3:b0:f5:6b:d4:14:96:b4:2e:
75:fd:61:68:bf:61:f1:06:8b:1a:ac:f1:8f:ad:0f:
b5:0e:27:b0:3f:7b:7d:22:24:b5:a3:74:f5:d6:9f:
8d:23:f2:4d:44:6d:f9:bb:84:53:c0:5d:8d:b9:0b:
37:15:03:d1:4c:09:a4:52:3b:39:7e:a6:a8:6c:58:
6f:39:54:ec:a0:a5:79:f4:e1:79:e3:e7:9b:73:7f:
ad:2c:ad:5c:fa:fd:d6:2c:28:58:67:a6:9e:49:14:
e7:38:d0:8a:57:a4:11:04:a0:ce:0c:4f:c4:e3:2f:
20:3e:7c:0c:cb:87:9e:c4:78:07:c2:38:74:a6:be:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B1:71:00:01:32:96:F4:9A:E1:4E:CA:25:77:55:92:E5:15:49:E4
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a393030303a3a2f33362d3336203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fe00:9000::/36
Signature Algorithm: sha256WithRSAEncryption
52:7c:5d:13:3e:de:d3:91:01:d0:c1:a7:52:b3:f1:07:8d:ab:
b9:37:49:ab:f7:3f:6e:4c:8a:61:38:e3:02:ed:5b:29:60:5c:
bf:9f:74:7c:bf:de:0e:16:d3:49:58:00:88:67:0c:a7:d7:68:
a4:59:ad:1d:79:99:e9:10:97:ab:a0:92:2a:ab:fb:b7:70:cc:
43:ad:66:e8:28:67:31:e5:34:70:1f:4e:48:d6:26:bd:c1:5a:
79:80:01:e2:2f:97:bc:8b:c0:76:26:9d:68:57:d3:44:96:87:
be:6e:4d:0b:b9:a3:a5:f0:b6:24:26:90:b7:e2:0b:e6:91:78:
6b:e8:a5:22:8f:0f:48:6e:74:b4:fc:d3:a7:12:3c:95:22:04:
8c:28:34:43:c3:69:80:2d:2c:9f:19:69:d2:bd:d2:ba:12:ad:
51:4e:c5:f7:3c:0d:e7:39:dd:7a:13:bc:71:90:0c:8a:d2:e8:
8a:15:b4:94:b0:2d:db:1a:e2:19:94:d9:ed:c9:ab:ff:25:8d:
6a:c8:73:ff:85:c1:d7:ca:58:5e:f8:07:28:01:a4:a2:17:7f:
8c:a0:ef:72:04:4a:64:60:6e:7b:df:05:0b:28:f3:e1:ac:4a:
db:a1:f6:f2:d5:13:6a:b3:95:ea:b7:53:6b:25:75:4c:ee:89:
b6:e2:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:11 2026 by rpki-client