
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3136302e302f32302d3230203d3e203137393638.roa
File: 36312e34372e3136302e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier: X7x9YtF1bgMqutdW0DCt0tgRGZLCNF6+eMBe4zmquLM=
Subject key identifier: 74:A9:2D:7C:47:42:8D:76:46:15:DB:48:17:A8:56:2B:FF:31:F2:F7
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 1401CB34195409C9D4DA5FC8743FA424CB074B2F
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3136302e302f32302d3230203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:18 +0000
ROA not before: Mon 29 Jun 2026 02:47:18 +0000
ROA not after: Mon 28 Jun 2027 02:52:18 +0000
asID: 17968
IP address blocks: 61.47.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:01:cb:34:19:54:09:c9:d4:da:5f:c8:74:3f:a4:24:cb:07:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:18 2026 GMT
Not After : Jun 28 02:52:18 2027 GMT
Subject: CN=74A92D7C47428D764615DB4817A8562BFF31F2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:d1:64:fb:15:d1:71:2f:c5:0c:9e:90:91:
3d:6b:d9:90:5d:a8:b1:53:11:a9:cf:f3:90:c4:f6:
9e:35:ab:eb:1d:4a:e4:b6:6e:cc:5c:4b:c0:77:21:
34:45:64:51:ad:49:33:01:b1:09:e3:71:52:87:a4:
1f:02:c5:67:54:e3:be:b5:e2:ea:bc:b4:d6:73:ad:
9a:9f:f2:0a:fd:9d:e3:ae:e7:b7:71:09:60:c6:6f:
1f:f4:28:fc:f4:a1:fc:c5:20:40:d0:6b:7d:5e:e4:
31:49:a8:db:93:62:31:ae:d8:00:91:a2:d5:8a:22:
39:14:4f:9b:3b:59:c2:0f:4d:93:bf:97:97:92:6f:
d5:ee:99:3d:08:67:55:74:6b:35:db:62:8d:4d:62:
49:52:74:a1:27:9b:cc:9d:ee:fd:94:15:9b:28:94:
04:15:d8:02:e5:7e:cc:1e:c9:3a:86:d5:a2:f6:40:
90:d0:f7:fb:1a:5e:24:5d:eb:34:0e:ff:a0:dc:37:
6b:da:26:bf:85:74:17:58:ef:c1:51:7b:7d:f7:e5:
9b:4c:76:ec:5f:9a:b7:15:c3:79:05:47:0b:d9:2e:
23:f6:91:c8:ce:fd:87:9d:53:5c:54:b6:3e:29:5c:
15:cf:e6:11:3d:2f:96:b0:8b:f8:e2:c2:c1:17:39:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:2D:7C:47:42:8D:76:46:15:DB:48:17:A8:56:2B:FF:31:F2:F7
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3136302e302f32302d3230203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.47.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:55:87:bf:21:b8:be:a2:c2:a5:99:db:64:07:1d:00:b8:91:
3a:4b:4b:47:dc:30:12:50:9c:b4:67:87:db:e1:b1:ca:7f:3b:
d5:06:6b:94:95:42:b6:e6:60:0e:ce:dc:ed:53:fb:56:f4:51:
f9:df:c2:e2:cb:7d:3a:77:4d:68:21:a7:66:23:b2:c7:43:a6:
4d:5f:84:ac:44:01:71:2a:fc:80:a9:50:b8:43:51:8a:9e:9d:
0e:92:15:62:8b:66:ac:69:ca:68:4b:b7:6f:3e:3a:48:a3:19:
35:89:1c:4a:1f:a2:3b:72:41:5b:bf:1a:c6:42:f0:15:86:62:
fb:fb:73:9a:01:4d:1f:5e:0d:0d:bf:73:cd:30:6d:16:87:8c:
af:88:11:68:73:c8:17:89:01:0e:c6:c4:69:7a:11:32:f1:98:
39:b9:fc:66:e7:cc:f1:8c:34:8e:c6:ef:f3:8d:fd:68:cc:4b:
3e:54:d3:94:93:ca:95:32:b4:8e:f3:cd:25:be:8a:07:54:87:
00:6e:3f:3f:fb:c0:42:35:3b:d3:94:c5:8d:f4:9d:a3:82:ea:
47:d3:a0:05:1c:5e:e8:bd:24:11:7d:5b:ae:b5:b4:85:d0:d2:
3d:67:0c:45:86:9e:9b:0d:1a:50:70:7e:a6:07:0f:c3:d9:92:
65:12:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:23 2026 by rpki-client