
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f31392d3139203d3e2039383131.roa
File: 3231312e3134342e33322e302f31392d3139203d3e2039383131.roa (raw, json)
Hash identifier: kSdv9XO6weZKPntqIE14j9JLZMu597KUhnOVwaxcjk4=
Subject key identifier: F2:B6:1D:BE:32:7F:32:02:15:5D:4A:4A:56:AD:20:4C:94:CD:2B:C2
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 49905A4AA25A1068D3780A9B21D6D7D6106C5360
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f31392d3139203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:09:49 +0000
ROA not before: Wed 03 Jun 2026 08:04:49 +0000
ROA not after: Wed 02 Jun 2027 08:09:49 +0000
asID: 9811
IP address blocks: 211.144.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:90:5a:4a:a2:5a:10:68:d3:78:0a:9b:21:d6:d7:d6:10:6c:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:04:49 2026 GMT
Not After : Jun 2 08:09:49 2027 GMT
Subject: CN=F2B61DBE327F3202155D4A4A56AD204C94CD2BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:1c:93:a3:2c:6e:f1:77:fc:0a:06:35:68:
c3:db:0f:44:94:1b:34:b6:92:8f:9c:03:10:83:cb:
8a:5a:1b:54:3f:97:62:ab:b0:2f:eb:8d:f0:db:b2:
67:e2:ba:80:e4:61:43:d8:74:8a:1d:b3:36:b5:0a:
94:cf:2a:53:d1:ee:78:41:21:aa:3c:03:74:54:19:
49:20:4a:b4:fb:cd:01:9f:a4:47:1d:56:b4:69:50:
e4:57:13:d9:3f:1d:65:1e:ba:7c:92:56:14:b4:b3:
13:07:9b:81:54:c2:1d:25:86:52:f6:94:0f:d8:28:
01:1a:21:20:16:e8:f1:f7:35:ed:20:99:d7:40:b2:
c4:58:a5:e4:1c:78:3c:ee:52:bc:ac:50:d9:33:7e:
38:bb:e5:21:8e:0d:5b:68:b9:1e:02:01:4a:bb:8c:
fb:a7:2c:96:6c:31:ce:03:65:c7:64:0d:11:23:ac:
2f:72:75:8b:20:ec:d2:40:03:03:f9:6a:3b:7f:5d:
67:85:3f:d0:ef:fb:7a:b5:60:7e:a3:31:73:ae:00:
71:37:01:65:fa:53:6e:c5:a7:b3:8d:f4:64:7e:af:
69:0d:80:51:5d:97:73:8b:fa:63:79:ca:67:80:17:
a8:63:d1:41:09:39:77:ec:97:9c:93:0c:c4:c9:5a:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:1D:BE:32:7F:32:02:15:5D:4A:4A:56:AD:20:4C:94:CD:2B:C2
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f31392d3139203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.32.0/19
Signature Algorithm: sha256WithRSAEncryption
42:db:b9:70:b9:90:34:03:22:f0:6b:7e:53:21:60:9c:29:c0:
c8:51:76:ed:27:55:b4:1b:88:ce:43:8c:90:00:d5:27:1e:09:
60:a0:48:7a:ac:ef:fb:c6:18:76:ba:78:04:c1:76:24:ce:ec:
da:c8:c7:a4:5c:7f:07:55:33:86:d0:ef:72:c2:6c:4a:f2:f0:
b6:72:ae:19:bc:f5:50:63:63:82:a0:fb:f0:d2:3b:32:ad:52:
2a:83:eb:46:49:dc:e1:fb:aa:1f:5a:e1:62:b9:b1:ac:fe:27:
e0:dd:a5:dc:48:39:e3:8b:ec:08:3b:d9:18:33:62:23:9b:e4:
34:12:b8:ca:cb:4c:0d:d8:b0:4c:14:82:c7:8e:e2:81:06:04:
2a:91:b7:40:87:45:43:15:25:0d:4a:3e:e9:1b:10:4b:ca:f4:
9f:a2:8f:26:c4:7e:ca:fd:67:6d:0d:b1:8c:ad:e5:6b:9c:41:
80:b3:f8:3a:ea:a6:13:f4:37:71:02:ee:9c:a4:d3:fe:92:e2:
ab:0e:90:32:38:f6:22:dc:4a:94:a6:e4:17:39:0e:02:3c:a8:
c8:00:c6:bf:3d:5a:48:19:e2:2c:12:92:c1:f5:a6:74:19:ef:
d5:2c:d5:79:65:9e:e9:a3:72:93:be:98:dd:cd:2a:b9:d0:d4:
5a:c6:97:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:31 2026 by rpki-client