
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e36342e302f31392d3139203d3e203137393638.roa
File: 36302e3235322e36342e302f31392d3139203d3e203137393638.roa (raw, json)
Hash identifier: DT/RrgNspMVSVQkYgzAKIHkH66ASUUFswnKj4jsDaq0=
Subject key identifier: E9:9D:B2:00:5B:81:D1:33:16:9A:EB:26:03:05:8A:70:1D:73:FC:94
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 1CC2B6EB5F1488D2C9EE710DE92EDF9D25697E69
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e36342e302f31392d3139203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:50:15 +0000
ROA not before: Mon 29 Jun 2026 02:45:15 +0000
ROA not after: Mon 28 Jun 2027 02:50:15 +0000
asID: 17968
IP address blocks: 60.252.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c2:b6:eb:5f:14:88:d2:c9:ee:71:0d:e9:2e:df:9d:25:69:7e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:45:15 2026 GMT
Not After : Jun 28 02:50:15 2027 GMT
Subject: CN=E99DB2005B81D133169AEB2603058A701D73FC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:4d:07:a4:8b:eb:5c:e0:e2:35:c7:9a:e2:
a3:d6:fe:98:9d:74:aa:67:b5:d0:88:2d:84:c1:7c:
d1:2d:e2:42:9d:59:db:ff:27:9b:fa:49:46:af:73:
d1:98:9b:f3:60:e0:86:0f:b8:1c:a2:62:1d:f7:d1:
b1:89:5b:91:67:35:52:01:1f:c8:a0:2e:b7:cb:ad:
62:b7:7d:fa:51:b8:a3:e7:18:fe:1d:b2:f0:bf:55:
06:36:98:8b:3b:69:53:1a:62:e6:f8:fa:6f:bf:d4:
9c:64:22:e7:75:c5:ef:7f:a9:8e:7d:49:69:01:83:
02:14:ab:20:f3:04:6f:ea:cd:0d:e3:ee:8c:e7:fa:
cb:48:c4:1a:95:2e:07:08:56:e7:75:3e:46:7e:0b:
0d:65:95:de:cc:ea:21:10:ef:cc:4f:fc:f0:c7:72:
11:39:27:a2:bb:db:d1:36:2e:64:ac:e9:1e:60:59:
4f:3c:cb:30:d1:69:88:89:1e:3e:5d:d9:a4:98:53:
f4:7c:af:6b:20:bf:87:25:51:79:71:8c:98:fa:22:
c3:72:3f:d6:79:5f:87:ef:d6:81:e7:d0:6d:da:86:
8a:76:ad:a9:c8:93:8b:4e:f2:69:28:0f:9a:96:d7:
37:6d:c6:5e:ac:61:1b:e0:1c:a1:d7:c6:b8:80:92:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:B2:00:5B:81:D1:33:16:9A:EB:26:03:05:8A:70:1D:73:FC:94
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e36342e302f31392d3139203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.252.64.0/19
Signature Algorithm: sha256WithRSAEncryption
94:4f:4d:e9:10:b1:eb:25:03:59:e5:97:1b:a8:f1:6f:a7:40:
db:e1:4c:a6:aa:a2:d3:58:0f:90:41:15:4d:ec:50:59:42:16:
92:af:44:cb:85:9e:b4:ab:71:01:f9:f0:5c:07:87:93:4a:53:
38:9c:4c:da:00:02:2d:53:d1:46:89:d7:5a:6a:f4:0b:17:8c:
43:d8:4d:5d:dc:d8:e5:2c:0b:94:04:a9:1a:53:b5:f5:11:b0:
ac:2b:34:3d:4c:3a:ae:de:71:b0:b9:90:68:ea:40:7e:00:d3:
c3:5b:ec:b9:d2:95:6d:1b:b6:68:d7:04:72:eb:4e:8e:83:de:
84:72:32:28:c5:1d:4a:92:2a:40:bb:91:f7:85:a6:de:cb:2e:
1b:4c:00:86:b8:2b:d0:34:f9:18:b1:5d:2e:81:1a:64:b2:34:
b8:4c:cf:44:4b:37:06:b9:96:37:e2:10:64:97:63:fc:20:9d:
81:6f:bc:af:fc:a5:3d:50:36:0b:59:40:a8:a2:82:b8:a5:86:
ab:d8:fa:6e:63:50:8b:db:29:d6:18:10:32:76:00:15:fe:11:
31:ca:23:9b:4d:46:df:6b:9c:3d:25:b7:8b:9d:22:53:7b:5c:
52:d9:f4:d9:2f:13:58:e6:18:b1:ce:96:af:38:73:6b:b2:ac:
32:4a:fb:94
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUHMK2618UiNLJ7nEN6S7fnSVpfmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQ1MTVaFw0yNzA2MjgwMjUwMTVaMDMxMTAvBgNV
BAMTKEU5OURCMjAwNUI4MUQxMzMxNjlBRUIyNjAzMDU4QTcwMUQ3M0ZDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/00HpIvrXODiNcea4qPW/pid
dKpntdCILYTBfNEt4kKdWdv/J5v6SUavc9GYm/Ng4IYPuByiYh330bGJW5FnNVIB
H8igLrfLrWK3ffpRuKPnGP4dsvC/VQY2mIs7aVMaYub4+m+/1JxkIud1xe9/qY59
SWkBgwIUqyDzBG/qzQ3j7ozn+stIxBqVLgcIVud1PkZ+Cw1lld7M6iEQ78xP/PDH
chE5J6K729E2LmSs6R5gWU88yzDRaYiJHj5d2aSYU/R8r2sgv4clUXlxjJj6IsNy
P9Z5X4fv1oHn0G3ahop2ranIk4tO8mkoD5qW1zdtxl6sYRvgHKHXxriAkncFAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU6Z2yAFuB0TMWmusmAwWKcB1z/JQwHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzYzMDJlMzIzNTMy
MmUzNjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBTz8QDANBgkqhkiG9w0BAQsFAAOCAQEAlE9N6RCx6yUDWeWXG6jxb6dA2+FM
pqqi01gPkEEVTexQWUIWkq9Ey4WetKtxAfnwXAeHk0pTOJxM2gACLVPRRonXWmr0
CxeMQ9hNXdzY5SwLlASpGlO19RGwrCs0PUw6rt5xsLmQaOpAfgDTw1vsudKVbRu2
aNcEcutOjoPehHIyKMUdSpIqQLuR94Wm3ssuG0wAhrgr0DT5GLFdLoEaZLI0uEzP
REs3BrmWN+IQZJdj/CCdgW+8r/ylPVA2C1lAqKKCuKWGq9j6bmNQi9sp1hgQMnYA
Ff4RMcojm01G32ucPSW3i50iU3tcUtn02S8TWOYYsc6Wrzhza7KsMkr7lA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:12 2026 by rpki-client