
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e2039383131.roa
File: 3231312e3134342e33322e302f32312d3231203d3e2039383131.roa (raw, json)
Hash identifier: l2aCFE1F8ZIt8Z96yFo0E+mGRh/digVHHx1jZseDm04=
Subject key identifier: 3A:41:3A:FB:67:52:50:9D:26:FF:9C:76:70:1B:88:49:AA:AB:E6:32
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 648AAA56BAEB6BD5385A63C20883C69BA4AD9EE4
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:09:22 +0000
ROA not before: Wed 03 Jun 2026 08:04:22 +0000
ROA not after: Wed 02 Jun 2027 08:09:22 +0000
asID: 9811
IP address blocks: 211.144.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8a:aa:56:ba:eb:6b:d5:38:5a:63:c2:08:83:c6:9b:a4:ad:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:04:22 2026 GMT
Not After : Jun 2 08:09:22 2027 GMT
Subject: CN=3A413AFB6752509D26FF9C76701B8849AAABE632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:37:2b:c4:a8:a2:c9:42:83:4e:57:95:68:
2b:e5:69:d2:34:ca:93:d7:83:fe:98:08:ef:24:01:
6b:08:b2:d8:8f:06:64:d7:20:46:0c:5b:22:82:97:
c2:73:6a:69:01:41:5e:e5:0a:0f:a9:ee:04:4c:9b:
ae:d5:e5:ba:ff:c9:72:26:b9:2e:6f:f3:76:87:36:
4e:c4:47:a5:32:ec:a0:74:19:b6:dd:2d:66:c9:71:
48:37:46:3a:00:b0:9b:09:fa:c0:3a:e3:88:72:73:
13:5d:d1:c7:11:c2:08:42:6d:53:ef:29:b8:34:c4:
f2:f1:26:46:58:72:3f:20:ff:f9:2c:29:36:35:59:
e8:e0:15:b7:03:91:56:55:0f:48:2c:4b:2e:87:f0:
cc:c0:a1:39:c1:5a:a3:7d:1b:b2:3c:dc:b6:0f:c8:
48:f5:3c:b2:de:e8:2f:ec:11:6a:9b:4b:10:5d:d0:
0f:e8:98:3b:69:e4:3d:bf:cf:c6:9a:7d:e4:b1:da:
e6:56:4a:4b:e0:a2:8a:f3:83:64:90:3e:62:c2:66:
a0:1f:db:25:9e:f8:43:73:f7:3e:81:42:39:bd:a6:
28:6c:40:1b:83:25:bc:b2:30:2a:8b:58:3e:75:d4:
40:56:5a:2f:55:fa:84:91:4b:31:14:74:b1:92:18:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:3A:FB:67:52:50:9D:26:FF:9C:76:70:1B:88:49:AA:AB:E6:32
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.32.0/21
Signature Algorithm: sha256WithRSAEncryption
64:0f:a9:fc:55:d6:3a:e2:86:6a:f1:45:12:c1:1f:b5:f3:f6:
ff:78:cb:28:7b:1b:58:7d:24:04:48:9b:ed:d3:5f:85:46:e2:
f3:93:46:64:29:a4:5f:d3:10:f3:1a:8c:72:d3:63:2c:9a:e4:
26:b8:d5:59:52:4f:f9:0c:45:8e:ec:7b:6a:c8:50:30:c4:c9:
2e:23:3e:e2:fc:02:22:5b:21:ab:6b:ac:49:6c:7a:42:0e:f2:
6e:48:bc:5a:97:ba:6d:79:92:26:8c:eb:74:89:78:af:a8:6b:
f9:dc:18:43:db:65:46:56:2f:76:4b:ea:fb:fd:15:eb:fc:ac:
10:12:fb:8b:a3:d2:6b:85:53:b8:c2:fb:99:f1:66:44:0b:60:
f4:aa:fc:b9:2d:be:c9:2b:ed:0e:e1:39:35:29:93:bd:98:19:
74:74:23:d3:4c:6d:53:a7:ac:27:f1:fb:35:95:c6:63:c9:05:
1f:bd:bf:46:53:5f:9c:59:58:d0:1a:91:18:87:b5:44:9b:e2:
1f:c0:ed:52:82:c3:cb:a3:67:6d:df:ed:41:b6:76:11:cf:b9:
3c:7d:51:ce:58:cc:83:d9:c3:4f:44:e7:e7:20:6f:39:1f:bd:
5e:ec:b9:36:22:56:eb:10:80:05:46:e9:63:b3:93:de:2a:49:
48:a5:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:31 2026 by rpki-client