
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a643030303a3a2f33362d3336203d3e203137393638.roa
File: 323430303a666530303a643030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier: zBLkbQa7oP2IfgDsD8SjDm1WmbS+xUK+jAGUA4/3PiI=
Subject key identifier: E6:1D:81:1A:53:AF:5C:0E:45:F3:05:D0:1B:5F:54:79:70:82:B2:CA
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 45235482C5785AFDB05012DA5501A9FE35C95D00
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a643030303a3a2f33362d3336203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:46:51 +0000
ROA not before: Mon 29 Jun 2026 02:41:51 +0000
ROA not after: Mon 28 Jun 2027 02:46:51 +0000
asID: 17968
IP address blocks: 2400:fe00:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:23:54:82:c5:78:5a:fd:b0:50:12:da:55:01:a9:fe:35:c9:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:41:51 2026 GMT
Not After : Jun 28 02:46:51 2027 GMT
Subject: CN=E61D811A53AF5C0E45F305D01B5F54797082B2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ca:72:93:f9:b2:b4:c8:67:59:d7:28:18:f0:
54:73:6c:5e:6d:3a:a4:ca:df:98:64:f7:de:65:ca:
f6:82:1d:a4:6a:db:8c:18:6c:fb:3a:fe:d3:90:ef:
88:2a:c5:00:f2:5b:35:13:6a:49:ee:9a:b5:be:c9:
d4:6b:fd:e0:89:7b:f1:13:35:ef:64:66:0a:d5:3c:
fb:5d:af:59:bb:21:5f:66:26:24:56:f1:23:a1:5d:
e6:83:6c:25:ba:7b:10:f0:18:f8:a3:a1:5d:1c:62:
dc:4f:d5:70:08:13:b1:ce:ba:ed:6b:4a:d4:22:69:
92:8d:bb:51:79:bc:f8:3f:70:7f:66:a1:af:65:e7:
32:12:6a:d8:88:78:d7:a7:f4:fe:c2:4f:8a:0c:43:
34:93:1e:8a:24:7c:27:d9:f9:55:c0:9d:a3:30:03:
29:7e:50:cb:b2:19:e6:a6:f8:e1:a6:c1:7c:8c:0c:
be:17:dd:10:bf:b1:81:f7:4e:f4:b7:0c:e7:e3:34:
6f:aa:de:ae:bf:87:03:76:b1:ed:d4:e3:a3:17:a7:
5a:47:d6:6d:13:65:55:93:7a:67:1f:ca:b1:53:03:
a6:a8:a8:49:df:12:4b:fe:4d:21:ed:74:ed:da:a2:
37:dd:40:f0:86:36:53:d7:84:4e:4a:aa:ff:7a:86:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1D:81:1A:53:AF:5C:0E:45:F3:05:D0:1B:5F:54:79:70:82:B2:CA
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a643030303a3a2f33362d3336203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fe00:d000::/36
Signature Algorithm: sha256WithRSAEncryption
b7:0a:b0:cf:c4:96:1a:e9:3a:e7:5c:0d:e7:8c:ad:c8:b9:7a:
93:c9:3e:7b:19:a0:99:97:5f:a7:dd:49:2a:84:9d:8d:a4:a8:
ec:af:2b:ec:b0:62:2f:d8:80:6b:da:07:c2:15:f5:97:02:6f:
6f:36:e3:fa:d6:50:bd:18:00:db:8f:a3:93:73:ec:cf:a7:e3:
71:a3:49:d5:8b:a1:30:13:7c:b0:22:e8:c4:cd:ea:e9:ba:f8:
cb:5d:bc:34:e8:e2:8b:7c:ab:0d:6d:a0:ab:0f:db:b1:4b:2d:
1c:ec:f0:46:3a:54:9a:40:29:a1:d7:e8:69:ba:7b:a5:3d:7a:
fd:69:61:bc:49:fc:28:ca:c8:3c:32:d7:8f:37:ec:0f:55:7b:
85:ff:5f:d6:25:70:16:ac:93:0c:18:a9:b9:e4:d8:06:38:7e:
f1:6b:59:7a:7b:68:d1:ef:47:2a:38:4d:69:ea:ac:c0:d5:f7:
c1:86:a6:bd:44:84:8c:77:e5:cf:ed:ca:a2:1d:6e:34:62:3c:
30:ba:c2:6d:fe:12:c7:42:a2:bc:0e:70:f1:21:e3:c7:90:eb:
45:a6:86:eb:a0:c8:0e:aa:b4:56:e8:1c:73:5b:77:3d:e4:d6:
d9:fd:84:4f:5b:e7:c3:f0:bf:74:5c:ed:69:8a:a8:44:d6:7d:
89:2f:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:14 2026 by rpki-client