
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134322e302f32342d3234203d3e203536303438.roa
File: 3231312e3134342e3134322e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: H2ybBsU/2DMimlZNR/iVOj6sz/2wG5BnNZTmPJAiB0M=
Subject key identifier: 14:46:E3:14:55:81:4F:29:E6:F8:88:DA:FA:77:D4:98:6B:A0:9B:65
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 0BEB8932D171CA2CC17F0D0D82A37EEE4098AB33
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134322e302f32342d3234203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:55:28 +0000
ROA not before: Fri 18 Sep 2026 02:50:28 +0000
ROA not after: Fri 17 Sep 2027 02:55:28 +0000
asID: 56048
IP address blocks: 211.144.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:eb:89:32:d1:71:ca:2c:c1:7f:0d:0d:82:a3:7e:ee:40:98:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:50:28 2026 GMT
Not After : Sep 17 02:55:28 2027 GMT
Subject: CN=1446E31455814F29E6F888DAFA77D4986BA09B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:95:20:1f:e3:72:0d:63:e2:6c:1c:96:a2:
18:c3:59:04:f4:c1:b5:c2:0e:19:69:ef:60:3e:6e:
b2:8f:e8:a6:34:e0:b1:bc:b6:6e:2a:f7:3a:2e:5d:
ea:3c:fa:ad:0a:54:54:07:e3:84:2e:c9:3a:6a:0a:
a5:bb:01:8f:af:4c:69:75:b5:10:91:a6:98:95:9a:
eb:44:f9:64:80:39:0b:6b:f5:24:71:15:a2:ee:7c:
57:41:ee:81:a2:80:d0:6b:9b:3e:03:1b:39:38:53:
15:3b:d7:fc:ac:6e:33:fe:40:44:99:7e:95:8a:2e:
94:08:2b:c8:45:69:ff:64:0f:90:1a:ed:a1:af:6c:
9f:42:1d:40:1e:72:fa:8e:19:44:1f:a8:d8:82:da:
de:63:6d:78:cc:f1:6a:56:97:3d:9f:18:e0:2b:bc:
1f:c3:c8:03:c8:ea:45:7a:d5:76:3c:00:a7:92:f5:
01:0a:de:1c:6d:27:90:78:04:cb:b9:9f:04:0f:29:
ea:01:be:54:52:e5:ec:13:db:fb:2a:cf:2e:25:be:
ec:25:3d:54:26:39:ef:96:fc:29:3f:4a:06:38:28:
f4:8b:3b:8f:ba:b7:4d:7a:6a:e3:14:0b:12:4d:18:
2f:6d:43:99:91:3d:75:f6:5d:8a:44:b7:15:a0:e4:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:E3:14:55:81:4F:29:E6:F8:88:DA:FA:77:D4:98:6B:A0:9B:65
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134322e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e2:d7:c5:99:5e:4a:fb:e0:0c:9e:a4:07:5f:22:0f:18:55:
ad:c8:bf:22:25:3a:df:cc:6f:d4:a5:01:1d:6f:9f:df:f6:02:
e2:81:14:c6:5d:f3:1f:e0:35:e2:48:64:7a:d7:84:3c:a9:91:
0e:fe:31:5b:9c:32:2f:77:91:f9:ac:53:fd:4c:6b:f4:b4:99:
c4:8e:3d:c3:34:34:3d:3e:3c:bf:2e:21:00:88:b6:05:b9:e7:
29:59:45:af:fb:20:63:39:88:4d:9a:b1:3d:28:ea:c0:08:36:
e0:5f:79:94:bc:df:d9:59:49:3d:5c:c8:ab:a5:b1:4c:04:cb:
7d:ec:53:62:66:eb:a6:ac:ad:a9:ca:c2:98:30:f3:7b:b2:48:
c0:54:7a:59:54:5f:6d:22:7a:51:d3:36:ff:05:37:e1:53:69:
b6:ae:60:64:b7:68:30:ec:38:77:e9:cc:e6:60:0c:a0:90:e6:
84:21:83:4d:05:79:e4:22:2f:c8:e8:0f:db:f8:95:f1:e7:33:
66:98:07:7f:f1:48:ed:0b:75:f4:f8:74:83:d6:8b:d6:e8:17:
62:61:86:3d:c1:12:13:ee:07:ce:f6:41:23:6e:b2:4e:58:5e:
2f:44:de:d8:5a:dc:50:75:73:29:10:f3:78:55:34:59:fd:10:
e1:78:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:40:16 2026 by rpki-client