
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e2039383131.roa
File: 3231312e3134342e3135312e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier: 3VKV6TglgNiZBDoqY+SzuLtteipM0b09DwJbk1JDJ9E=
Subject key identifier: 8A:99:9A:3E:D8:17:AA:1B:45:F1:DF:30:2F:E8:34:23:E3:56:29:56
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 7AFD7884A511BD9ABCDDA40CF73879CE0F807F96
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:13:43 +0000
ROA not before: Wed 03 Jun 2026 08:08:43 +0000
ROA not after: Wed 02 Jun 2027 08:13:43 +0000
asID: 9811
IP address blocks: 211.144.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fd:78:84:a5:11:bd:9a:bc:dd:a4:0c:f7:38:79:ce:0f:80:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:08:43 2026 GMT
Not After : Jun 2 08:13:43 2027 GMT
Subject: CN=8A999A3ED817AA1B45F1DF302FE83423E3562956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:6d:6b:ef:30:bf:7e:30:6c:c1:62:97:ef:
eb:33:75:ba:2f:cc:95:c6:48:d8:78:e2:75:31:85:
a7:f5:bd:db:d5:7a:53:78:ad:a9:08:8d:51:4a:11:
fb:2a:92:d2:f4:2d:04:95:db:7d:d0:7b:10:6d:89:
f5:13:13:12:82:5a:ae:1d:f4:d4:4d:ac:81:89:49:
76:ce:89:f3:68:b4:eb:0a:23:ad:37:9c:07:55:c6:
8d:8b:9e:7e:2d:5d:22:00:06:ad:ac:a6:5c:ec:09:
d9:b5:13:57:d5:9c:22:bc:59:03:fd:6f:5a:65:50:
07:48:a0:70:04:7e:29:d0:7d:a2:02:95:0c:93:35:
f5:1d:b6:00:2e:62:f4:33:b4:82:59:ba:22:ff:b6:
76:53:67:da:0c:bf:5b:d6:89:8e:90:24:72:ce:a6:
24:b3:6a:c8:93:74:f4:81:68:ff:24:08:a3:f4:d2:
2a:81:71:84:ff:2b:3a:12:e8:11:2a:2b:c6:84:d8:
9b:42:6a:8a:92:84:7d:ca:1a:6f:4a:88:af:fa:af:
9c:74:df:d2:37:66:87:e0:67:fd:23:46:d1:81:45:
f1:5e:1d:7c:17:a6:70:99:90:8b:a1:3d:aa:88:b2:
3b:3f:a5:27:6a:01:20:c3:b1:64:c8:e8:d5:66:67:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:9A:3E:D8:17:AA:1B:45:F1:DF:30:2F:E8:34:23:E3:56:29:56
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b5:16:62:2f:e4:56:77:bc:57:6b:c8:ab:a8:62:27:ff:48:
b9:77:de:71:51:93:9b:4e:5d:f1:e5:8a:c8:ae:a5:55:94:34:
9c:11:10:b2:92:38:2b:52:1f:c0:40:a0:15:1f:e2:44:29:ac:
4b:7f:0e:96:ae:52:3e:73:60:c9:13:cc:c6:e5:d0:18:9f:46:
5a:12:bc:23:0d:81:5a:0e:fd:da:1c:a5:63:82:a7:e1:f2:84:
c7:d3:86:72:e5:99:72:93:30:17:84:b3:3f:6f:5d:88:c6:97:
56:48:a4:f0:cb:cd:70:a1:f6:3c:a7:ec:ce:bc:da:98:c2:84:
bb:ec:b6:78:72:23:84:02:f5:85:68:28:1b:d5:7e:90:82:d5:
e0:08:95:28:cb:b0:d4:5d:ea:f8:99:0c:be:c4:9e:51:96:95:
45:ce:56:c6:2f:82:29:f7:38:7a:c6:d5:97:f5:59:0e:33:2a:
21:6d:6b:a0:bf:49:8f:32:76:a4:64:3a:df:b1:b4:4a:f3:bc:
5a:49:86:68:e9:72:62:f8:a2:f6:9c:07:dd:32:94:4f:ce:db:
54:ca:fb:cd:33:10:e0:b2:e1:ec:a7:d7:8a:43:a1:bd:28:1d:
21:4e:c6:b6:e9:c6:53:d9:16:3c:b8:14:e6:37:34:03:e1:d3:
ff:40:e5:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:30 2026 by rpki-client