
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3134342e302f32302d3230203d3e203137393638.roa
File: 36312e34372e3134342e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier: CYhieHalLwEkQtiJ84cIi2pTpN73GIF9kE+vFsktSIo=
Subject key identifier: 3A:96:1A:98:4D:7C:5A:B1:22:0E:A3:B3:E3:45:95:8E:D3:F9:41:15
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 37488D22F9CC279B379D164AF97A5557DEDAD934
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3134342e302f32302d3230203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:18 +0000
ROA not before: Mon 29 Jun 2026 02:47:18 +0000
ROA not after: Mon 28 Jun 2027 02:52:18 +0000
asID: 17968
IP address blocks: 61.47.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:48:8d:22:f9:cc:27:9b:37:9d:16:4a:f9:7a:55:57:de:da:d9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:18 2026 GMT
Not After : Jun 28 02:52:18 2027 GMT
Subject: CN=3A961A984D7C5AB1220EA3B3E345958ED3F94115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:bb:43:e4:92:0e:bb:f2:de:e0:80:f6:e0:
a0:6e:ad:34:96:2a:9a:b1:ca:19:7f:92:59:d9:b4:
48:85:35:af:69:a4:f9:ae:61:d6:99:60:83:32:b5:
63:78:90:f4:0e:de:77:a5:24:b0:e1:45:6e:b2:de:
01:b2:b5:44:b7:ec:10:e1:60:b6:9f:d6:ae:5e:e9:
e8:33:84:4f:7b:17:b9:b8:61:62:15:c3:4f:cd:ba:
e5:af:81:1e:2c:a9:11:62:a0:0d:75:6c:eb:f5:ab:
54:2a:61:6a:90:9d:0e:e6:28:98:a0:9a:1c:15:98:
18:a4:9e:6d:09:6e:9f:98:d3:49:a1:2f:45:78:c4:
7e:b6:bb:70:d7:90:97:14:68:4d:b1:af:6d:c8:f5:
66:e0:00:06:d3:e7:8f:7b:03:12:72:cb:68:e8:ca:
b9:ec:b4:25:3e:6c:53:b8:53:4a:7f:8c:d7:6b:05:
6f:00:42:98:ff:a1:5a:26:34:97:e3:75:f7:06:1c:
60:45:df:87:52:4d:1d:36:63:22:a8:fa:b6:0b:60:
d2:f0:12:8b:33:1b:07:65:b8:ae:70:78:5b:03:73:
78:24:b4:60:26:21:9e:89:cb:cd:f1:82:6a:d6:2b:
01:d3:b0:48:c3:29:3f:96:c2:26:99:2c:68:18:a7:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:1A:98:4D:7C:5A:B1:22:0E:A3:B3:E3:45:95:8E:D3:F9:41:15
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3134342e302f32302d3230203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.47.144.0/20
Signature Algorithm: sha256WithRSAEncryption
56:65:77:11:f3:04:e6:23:76:2e:eb:0e:64:95:e6:f0:39:67:
2f:fa:26:1c:84:42:a6:77:a3:62:f6:69:2c:6c:03:8d:f2:0e:
76:7d:61:9b:37:58:8a:02:ad:22:7b:a5:4d:33:c7:7b:02:ef:
de:e3:ad:83:a3:59:a6:ed:f6:9a:51:7c:54:e1:86:2d:93:f9:
fb:3d:81:d5:46:4d:de:05:56:1c:7b:8f:28:40:0f:7b:b2:5a:
8d:3a:ec:a1:e4:17:32:8f:63:9d:7f:55:72:4d:45:eb:8d:19:
e5:c1:8c:95:a5:22:28:12:d2:bd:df:c7:be:03:79:26:65:4c:
e5:7b:00:91:37:ff:87:a2:d4:b7:f5:1b:6e:a2:25:1f:1b:13:
fb:1a:d4:b1:cb:cc:33:3d:fa:f8:48:64:b0:93:2d:d3:61:2f:
98:51:3c:a7:01:f1:2e:cf:44:da:b5:af:b2:5d:d0:20:9d:47:
b7:48:99:3e:9a:a3:27:d2:e8:5e:dc:57:84:9f:ac:a7:2e:8c:
10:41:e9:0c:fe:46:b8:dd:f5:a5:18:e4:3a:36:98:47:6a:32:
68:15:93:96:0b:24:29:e8:a7:dc:1a:64:87:1e:d8:4e:01:e2:
39:6a:26:ec:89:eb:6c:fd:93:a6:bf:64:3f:e3:98:23:03:52:
8f:98:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:23 2026 by rpki-client