
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134332e302f32342d3234203d3e2039383131.roa
File: 3231312e3134342e3134332e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier: f2+9w74l5fmbBXlv+CMDPg5FPF9jhKfl3YKlmQtEn2k=
Subject key identifier: 79:12:3B:6E:B7:AA:7C:9B:9C:50:E8:18:74:03:E2:0C:B8:67:6C:81
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 1E9EC231D62EBECC2D49B8E0B30C99A7322E62CB
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134332e302f32342d3234203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:12:09 +0000
ROA not before: Wed 03 Jun 2026 08:07:09 +0000
ROA not after: Wed 02 Jun 2027 08:12:09 +0000
asID: 9811
IP address blocks: 211.144.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9e:c2:31:d6:2e:be:cc:2d:49:b8:e0:b3:0c:99:a7:32:2e:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:07:09 2026 GMT
Not After : Jun 2 08:12:09 2027 GMT
Subject: CN=79123B6EB7AA7C9B9C50E8187403E20CB8676C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:d9:43:ac:0b:d2:38:cc:12:fd:f6:a1:0e:
09:4b:1b:7c:e5:e3:e5:89:90:04:98:36:2f:19:3d:
a6:43:f1:15:96:ba:18:f6:39:e4:dd:04:59:aa:86:
9f:c2:06:39:24:84:05:46:29:8a:b7:ea:e5:ef:b5:
18:8c:6d:6e:a3:c1:99:8e:e4:06:b9:d2:12:bd:37:
9a:14:d4:22:eb:f5:7a:15:a4:7e:cf:b1:da:9d:0a:
db:0b:32:23:e5:e9:8f:da:92:db:d0:42:a4:8f:05:
b5:70:5e:8f:f5:57:f0:96:5d:1d:0f:c9:10:95:dd:
2e:c2:20:4f:85:ce:06:e6:7c:29:a8:36:cf:01:20:
ff:35:fd:53:b9:8c:d5:7d:35:f1:7f:b4:35:d3:8f:
e7:eb:7e:d9:2c:08:a6:5e:8c:9a:7d:74:c3:cb:0c:
8d:1e:ef:09:b1:49:c8:b9:b5:97:c8:b0:02:80:9d:
79:ac:0a:6e:88:82:f2:91:ec:4c:33:57:d8:e0:c8:
78:3d:e6:07:93:ab:cc:9d:ab:15:35:9a:6e:53:d6:
95:f8:99:04:c6:8a:3d:89:98:95:39:5d:c6:66:7e:
8d:10:12:80:9c:9c:04:ea:5a:86:4f:79:cb:3a:83:
71:db:97:01:d8:b5:34:b3:34:f0:c6:db:21:e1:a3:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:12:3B:6E:B7:AA:7C:9B:9C:50:E8:18:74:03:E2:0C:B8:67:6C:81
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134332e302f32342d3234203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c6:9d:fe:da:93:6d:98:9d:52:0b:ea:5b:84:be:e1:2b:2f:
3d:d2:42:d4:bd:a0:58:4d:d3:5b:f6:1c:d2:eb:9c:0a:52:6c:
9d:11:6f:28:42:2f:a3:4f:02:e0:22:3a:52:29:5f:57:46:33:
88:9e:77:aa:da:10:fb:10:d1:08:8a:12:7d:6f:f9:ff:c0:e2:
ed:bb:28:f7:9c:a6:e9:2c:7e:dc:c6:51:1b:76:9a:d4:b3:b6:
90:30:f9:f0:74:b7:52:96:1d:74:bb:07:ac:33:3a:30:3c:ce:
71:29:b7:c9:27:df:f3:e6:e7:55:b9:77:79:7f:e9:f9:b2:c6:
31:31:84:45:b5:ba:bf:60:fc:aa:f0:b5:92:39:84:6c:b1:51:
58:9b:e2:8b:62:a9:f0:4f:af:64:79:cf:89:e5:b3:34:1e:fd:
bb:d8:57:e1:c1:9c:72:da:a9:ec:25:3e:3d:e1:12:2a:62:1e:
b1:5f:cf:e9:07:1a:30:b1:db:33:d6:c1:ad:0f:fb:ed:50:7b:
a6:e5:46:19:f9:b3:03:55:74:7c:1c:82:84:16:50:af:cb:40:
50:9b:30:dc:6e:a0:4d:38:d2:fb:2e:12:01:f1:c8:11:df:81:
62:34:01:31:3b:85:2b:e4:02:06:65:71:1b:f7:e5:59:1f:d1:
45:60:c8:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:32:01 2026 by rpki-client