
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa
File: 323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier: 1wHeM3ur8hQTkAjlNu3pz04aYY20oHPIPMOjvb2hRMs=
Subject key identifier: 52:63:1B:3C:D7:C6:30:F6:FB:19:CF:4B:8B:C5:A4:0F:F3:E4:26:DE
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 5398BC2B6889E1F9DB5395E01F3702D9AE3A0B81
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:46:50 +0000
ROA not before: Mon 29 Jun 2026 02:41:50 +0000
ROA not after: Mon 28 Jun 2027 02:46:50 +0000
asID: 17968
IP address blocks: 2400:fe00:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:98:bc:2b:68:89:e1:f9:db:53:95:e0:1f:37:02:d9:ae:3a:0b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:41:50 2026 GMT
Not After : Jun 28 02:46:50 2027 GMT
Subject: CN=52631B3CD7C630F6FB19CF4B8BC5A40FF3E426DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:60:21:ca:16:8e:19:8f:aa:23:1b:32:7b:
45:69:22:34:fa:9f:e3:51:7a:f1:7c:6e:25:1c:fb:
a7:07:b3:c5:fe:c9:21:d6:7e:05:ed:42:a6:c3:24:
c8:da:b0:3c:74:b6:56:c5:1c:f4:40:a5:e7:a3:1d:
1b:e5:43:ab:43:70:1b:7f:6c:79:b1:a0:63:0d:d7:
fd:25:18:d4:1e:f8:77:21:d5:aa:23:ee:af:03:f5:
7b:3d:d4:dc:2d:e1:b4:8f:b3:d0:67:fe:1f:7a:6e:
84:5e:25:7f:93:72:8e:38:32:28:eb:64:dd:7b:1b:
73:64:9a:99:5f:5f:47:6d:73:07:b4:4d:9b:55:b5:
bc:b6:56:7c:47:9f:c5:eb:0d:58:c7:e1:ef:28:1b:
09:8b:24:a4:2b:fb:9b:72:b9:7d:f5:0b:c0:72:c7:
fd:f3:8d:d1:e6:43:bf:4d:2e:26:fa:ce:a6:40:dd:
31:f4:c7:29:26:31:61:cd:da:34:11:a1:8b:fa:6b:
d6:eb:95:ec:6f:c4:fe:3b:4b:df:ab:de:3b:b9:d7:
5e:9e:5c:36:3d:93:d8:98:1f:0a:2a:a5:18:85:5a:
d4:4a:7d:5c:51:62:25:bf:ec:81:00:32:c6:c6:ac:
41:dd:e7:df:0b:ff:14:29:4d:61:c7:ac:99:d1:ec:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:1B:3C:D7:C6:30:F6:FB:19:CF:4B:8B:C5:A4:0F:F3:E4:26:DE
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fe00:a000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:31:cd:98:18:ba:b2:20:02:ae:36:5b:38:02:a6:fe:2f:da:
46:8a:3e:4f:3f:f8:e3:c7:4c:9a:c8:b7:16:0e:79:e2:74:28:
73:4f:c0:98:a0:ac:38:46:17:c9:b5:0b:fc:98:95:0a:3b:46:
d3:14:ad:9f:b1:c9:c4:1c:cd:af:83:82:f6:61:af:ab:1a:ef:
10:9f:c9:f8:3b:51:ff:58:52:18:d0:f6:77:6a:89:33:64:9a:
cc:98:a7:35:d4:bb:3c:61:36:3c:6b:a8:3b:da:91:8f:1a:8f:
57:d7:22:83:e2:e2:d1:64:de:ed:46:c3:7b:1d:03:8f:10:b6:
21:f2:59:55:c4:ff:eb:a3:ff:39:ff:f8:07:72:6b:93:76:26:
53:4e:b7:97:f0:9b:d5:28:be:83:59:a7:d8:2e:49:51:be:37:
59:51:df:6c:46:eb:8a:0c:8a:8c:31:79:5c:31:48:e6:e2:be:
2f:6e:4d:7a:c2:93:9b:f8:fe:21:2a:a4:4f:84:c0:47:fd:83:
78:0b:7d:05:ae:85:80:2d:07:f7:7b:ab:d5:ee:e6:49:db:61:
b1:78:4e:03:2d:4e:74:74:03:da:81:c8:d6:84:a0:2d:fa:16:
55:7f:5f:54:dc:8b:77:34:fc:e3:a7:54:b4:90:44:01:e1:6f:
92:61:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:13 2026 by rpki-client