
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3137362e302f32302d3230203d3e203137393638.roa
File: 36312e34372e3137362e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier: jdUZ3X3AJDHHXhTevEwLiKzr7k3oM2j7Py5Lu+NrLwU=
Subject key identifier: 44:5C:C6:F8:81:9F:32:98:DD:3A:DC:89:6A:3E:37:81:C0:17:58:70
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 7D2D6F0F09D8E3FC0136D64C100E6A7C9A7C24DF
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3137362e302f32302d3230203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:52:17 +0000
ROA not before: Mon 29 Jun 2026 02:47:17 +0000
ROA not after: Mon 28 Jun 2027 02:52:17 +0000
asID: 17968
IP address blocks: 61.47.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2d:6f:0f:09:d8:e3:fc:01:36:d6:4c:10:0e:6a:7c:9a:7c:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:47:17 2026 GMT
Not After : Jun 28 02:52:17 2027 GMT
Subject: CN=445CC6F8819F3298DD3ADC896A3E3781C0175870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:41:13:2f:49:ea:00:41:0a:aa:70:8d:9b:
3f:36:b3:00:f0:0c:75:53:c2:72:84:fe:43:b7:77:
d5:f2:45:b8:00:3f:e0:28:f5:6c:02:d2:b0:60:88:
87:74:d6:53:e4:37:38:e2:34:01:a0:04:c7:8c:c5:
52:c3:bc:07:0d:c1:8d:25:fa:1e:88:23:e3:b1:3a:
0e:02:54:48:16:27:4d:6f:bf:25:e9:cb:68:8b:41:
88:c0:2d:81:a0:9d:aa:6b:58:23:73:ed:fd:36:8d:
db:2c:53:34:f5:2f:3a:6a:74:ff:aa:9b:ee:06:e9:
d3:92:70:cf:23:0a:21:a2:12:1d:4b:b4:f0:06:a3:
a6:9c:16:cb:10:79:61:f8:d4:52:92:5f:b5:75:d1:
31:ca:10:ac:e0:8b:86:32:13:04:25:b6:af:11:ac:
42:1f:46:42:ee:2c:7f:f3:88:9e:92:e7:af:48:a1:
6d:ba:df:8e:aa:ea:cf:92:6b:ed:2f:ae:bc:0f:03:
d9:c2:60:df:3a:ac:00:00:e9:74:bf:90:20:bb:4d:
b3:8a:97:fb:d7:f5:73:38:f6:9b:24:66:f0:74:7d:
8a:eb:72:77:f2:06:b1:49:db:d8:90:0b:8d:09:c0:
9f:ab:86:ae:87:b7:f8:91:5c:8a:7d:c4:c4:df:69:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:C6:F8:81:9F:32:98:DD:3A:DC:89:6A:3E:37:81:C0:17:58:70
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36312e34372e3137362e302f32302d3230203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.47.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:7b:bd:1d:d4:70:fc:db:00:ea:62:cc:4e:97:fd:79:b2:f6:
02:22:e7:55:81:7b:8c:71:58:64:30:3b:1f:eb:38:7b:e1:91:
cb:95:46:90:fb:fe:c8:f1:f7:c0:41:c0:fb:1b:00:41:70:13:
4e:62:78:ba:5f:d8:ce:2e:a8:5b:3d:57:8b:9e:8f:cf:b2:16:
71:db:f0:67:5d:2c:bf:be:8d:e8:2a:e6:0e:d6:31:24:71:0f:
e3:52:70:3e:a9:fe:c6:be:58:cc:f2:29:23:4e:a8:bf:75:d8:
45:71:05:9d:cb:14:7d:7d:3b:ff:67:dd:c7:4d:dc:9a:ba:68:
cf:39:cb:4f:cb:58:80:90:9d:23:84:fa:23:83:0c:8a:da:ef:
0f:8d:f6:38:83:2c:7a:50:b7:10:a7:b0:44:8c:cf:39:ed:af:
40:3d:1e:44:1d:22:9f:4a:02:7e:ae:96:c1:50:5e:c9:91:24:
70:38:e9:88:da:99:9f:d3:19:98:8c:5b:45:f9:7d:b3:e5:48:
db:c0:af:a5:8b:42:2a:d0:cd:85:f5:35:8f:de:4d:f7:48:97:
d3:7f:ef:36:09:95:41:e9:64:f3:94:7a:a1:a2:aa:93:3a:60:
84:52:fc:28:33:8b:73:72:6e:f2:e5:9e:eb:01:80:79:77:81:
c2:2d:f5:e9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUfS1vDwnY4/wBNtZMEA5qfJp8JN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQ3MTdaFw0yNzA2MjgwMjUyMTdaMDMxMTAvBgNV
BAMTKDQ0NUNDNkY4ODE5RjMyOThERDNBREM4OTZBM0UzNzgxQzAxNzU4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS7EETL0nqAEEKqnCNmz82swDw
DHVTwnKE/kO3d9XyRbgAP+Ao9WwC0rBgiId01lPkNzjiNAGgBMeMxVLDvAcNwY0l
+h6II+OxOg4CVEgWJ01vvyXpy2iLQYjALYGgnaprWCNz7f02jdssUzT1LzpqdP+q
m+4G6dOScM8jCiGiEh1LtPAGo6acFssQeWH41FKSX7V10THKEKzgi4YyEwQltq8R
rEIfRkLuLH/ziJ6S569IoW26346q6s+Sa+0vrrwPA9nCYN86rAAA6XS/kCC7TbOK
l/vX9XM49pskZvB0fYrrcnfyBrFJ29iQC40JwJ+rhq6Ht/iRXIp9xMTfaetlAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQURFzG+IGfMpjdOtyJaj43gcAXWHAwHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzYzMTJlMzQzNzJl
MzEzNzM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD0vsDANBgkqhkiG9w0BAQsFAAOCAQEAbXu9HdRw/NsA6mLMTpf9ebL2AiLn
VYF7jHFYZDA7H+s4e+GRy5VGkPv+yPH3wEHA+xsAQXATTmJ4ul/Yzi6oWz1Xi56P
z7IWcdvwZ10sv76N6CrmDtYxJHEP41JwPqn+xr5YzPIpI06ov3XYRXEFncsUfX07
/2fdx03cmrpozznLT8tYgJCdI4T6I4MMitrvD432OIMselC3EKewRIzPOe2vQD0e
RB0in0oCfq6WwVBeyZEkcDjpiNqZn9MZmIxbRfl9s+VI28CvpYtCKtDNhfU1j95N
90iX03/vNgmVQelk85R6oaKqkzpghFL8KDOLc3Ju8uWe6wGAeXeBwi316Q==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:18 2026 by rpki-client