
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e33322e302f31392d3139203d3e203137393638.roa
File: 36302e3235322e33322e302f31392d3139203d3e203137393638.roa (raw, json)
Hash identifier: O/nJZLlTNz18JOjg+lLjCeYdtFr46ZOqZC66vlubYiI=
Subject key identifier: C4:CB:FF:3A:57:50:6A:F3:F4:80:6D:7C:DD:DB:3A:D9:E2:4C:12:F9
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 22AD1BD80F9715A946CCBC30452EAE4C388BDD56
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e33322e302f31392d3139203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:50:15 +0000
ROA not before: Mon 29 Jun 2026 02:45:15 +0000
ROA not after: Mon 28 Jun 2027 02:50:15 +0000
asID: 17968
IP address blocks: 60.252.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ad:1b:d8:0f:97:15:a9:46:cc:bc:30:45:2e:ae:4c:38:8b:dd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:45:15 2026 GMT
Not After : Jun 28 02:50:15 2027 GMT
Subject: CN=C4CBFF3A57506AF3F4806D7CDDDB3AD9E24C12F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a0:82:ea:29:27:35:03:83:f3:cd:12:50:f0:
46:2a:5b:e8:c3:9e:5b:fa:21:c6:7f:31:dd:61:de:
74:a3:5b:02:45:1d:d2:7e:c3:71:61:08:00:1d:7f:
11:ab:77:de:01:bc:de:d7:79:40:47:70:64:bd:de:
01:e2:43:5b:84:4a:d3:67:62:1e:a3:e7:d9:2c:a7:
7d:80:1a:1a:86:b4:93:81:1d:95:3f:5e:b0:95:80:
31:90:cb:b3:f6:8c:5b:cd:33:44:cb:47:36:6e:f6:
ae:5c:93:05:82:36:e0:4c:5e:d3:e8:2b:2d:61:96:
84:f5:fa:5b:b4:73:77:53:ab:a8:37:e3:6b:12:4f:
9a:f0:cb:a2:0f:6e:6f:22:f1:6a:3f:ba:30:a6:42:
e6:c6:0f:27:8f:7d:ed:93:6c:69:48:59:f5:65:8d:
88:5a:c4:1b:00:ca:8b:3c:5e:a1:e9:74:ca:9b:18:
df:8c:53:95:85:e1:5b:7c:b0:3c:d6:58:7a:58:dc:
74:50:55:fa:22:24:8d:8e:92:0b:ea:0e:66:17:3c:
7c:23:23:aa:7d:32:4d:85:a1:a3:cd:69:47:4b:ef:
e6:b3:8b:1b:75:3c:5f:46:9a:98:8f:c7:49:42:0f:
cc:1a:8e:da:d9:e8:d3:72:32:0c:bc:5a:98:6d:93:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CB:FF:3A:57:50:6A:F3:F4:80:6D:7C:DD:DB:3A:D9:E2:4C:12:F9
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e33322e302f31392d3139203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.252.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:1e:54:6a:86:8d:ba:d5:08:3c:0a:4a:3b:65:c7:29:ef:fb:
bb:6a:21:75:32:1d:7e:be:83:37:b1:95:74:fc:3e:de:82:2f:
db:cf:6c:db:60:af:66:0d:7a:89:eb:19:39:3a:4f:b1:5f:a3:
b5:3e:8e:b2:38:35:ac:20:e8:b0:ef:3e:5a:77:82:2d:74:9f:
8f:f4:70:1a:b8:e2:7d:9c:67:d0:ce:7b:ab:95:db:e6:95:df:
8c:1c:d1:48:28:07:8b:7a:2d:9d:7b:fe:ef:be:12:9a:b0:fa:
17:9b:74:56:57:41:01:bc:ea:57:3d:2d:00:37:7e:4b:35:62:
9c:43:00:52:14:bf:ad:ee:7f:9f:f6:ca:d6:e2:8a:6e:81:9b:
cd:2c:25:57:d0:2f:ce:f8:04:4a:c7:74:a6:24:a7:45:0b:af:
32:bb:a8:7d:88:d2:ff:5a:ec:62:16:6c:fe:64:f8:46:2c:81:
03:b2:50:80:66:4a:68:1f:f9:43:21:ef:0c:20:14:5e:22:b7:
da:26:40:8b:6c:a8:ee:87:0f:5c:1e:7e:bf:6a:75:44:ea:55:
16:9b:f1:3c:3e:64:ea:88:90:cc:ec:2d:b0:60:5b:4f:75:8c:
6d:ea:e6:d5:a9:26:99:f6:cd:1e:8d:b1:67:1c:c2:9e:31:63:
d9:18:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:52 2026 by rpki-client