
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32342d3234203d3e2039383131.roa
File: 3231312e3136372e36342e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier: o4bnNJ78Kl2jod7r29ikImDOcgf8zxycG6iyny1s68A=
Subject key identifier: CC:58:AC:FA:37:5D:A5:FF:C0:A7:1B:D5:E6:98:ED:94:BB:DD:59:D7
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 6D083AF15E558FE0E7B3E442D9FD1373D16A648D
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32342d3234203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:15:26 +0000
ROA not before: Wed 03 Jun 2026 08:10:26 +0000
ROA not after: Wed 02 Jun 2027 08:15:26 +0000
asID: 9811
IP address blocks: 211.167.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:08:3a:f1:5e:55:8f:e0:e7:b3:e4:42:d9:fd:13:73:d1:6a:64:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:10:26 2026 GMT
Not After : Jun 2 08:15:26 2027 GMT
Subject: CN=CC58ACFA375DA5FFC0A71BD5E698ED94BBDD59D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:98:23:d3:09:67:79:ac:d8:96:ee:0d:b1:
ea:6f:1a:66:a0:7c:50:80:42:f4:fc:c2:2b:ab:10:
32:be:8c:e3:a2:a3:e0:29:38:e7:25:b1:3c:fd:5f:
c9:bd:8f:0e:7f:8b:e6:f3:5e:81:59:82:3c:16:f5:
d3:dc:dc:88:50:d5:8f:08:55:4f:7a:b6:81:41:02:
8a:00:7e:57:d7:3d:2c:1e:f5:69:01:84:09:16:33:
9f:92:fc:05:43:d5:97:b8:3b:18:45:7c:fc:b1:3a:
21:7c:a9:c1:31:9d:ae:c0:d5:89:0b:7c:3e:59:8e:
e4:6b:3f:16:09:52:39:3f:58:fb:9d:e7:65:bb:95:
b3:15:31:09:60:37:60:9b:8a:09:88:0a:a3:d7:de:
83:b5:07:66:81:e4:61:85:dd:14:89:79:02:02:ae:
11:f1:af:9b:6f:d6:5b:8d:dc:38:7b:83:d9:c6:09:
59:5e:b7:e8:25:2d:7d:30:fc:6c:7a:ec:ee:62:a8:
47:59:3e:3f:51:1b:b0:2b:86:fd:df:a0:9e:56:41:
87:b9:26:9b:bc:ba:12:eb:31:73:e4:2c:79:eb:c9:
42:c5:7a:2b:08:63:67:16:e3:19:38:8c:95:61:31:
c7:11:5e:03:2d:0a:92:0d:bb:78:b3:a7:d5:30:6c:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:AC:FA:37:5D:A5:FF:C0:A7:1B:D5:E6:98:ED:94:BB:DD:59:D7
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36342e302f32342d3234203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.167.64.0/24
Signature Algorithm: sha256WithRSAEncryption
af:50:a9:66:f3:16:f6:fc:e2:34:ca:7d:46:27:53:69:47:72:
7b:ae:dd:b6:ed:f7:18:83:82:a7:d0:e2:8c:d9:84:11:6d:cb:
b6:87:1c:b5:4b:30:ee:c7:20:ec:04:b2:05:ec:25:dd:c8:74:
c1:64:fd:42:8f:1e:08:9c:c5:d4:58:48:c8:12:3d:d4:a8:ec:
19:b9:9f:e7:cf:95:ad:3b:03:7c:ba:15:7c:fc:23:92:19:fa:
84:1d:ea:d7:11:33:9f:8e:93:1f:07:6a:57:69:af:d7:d1:7d:
f9:38:0d:be:2d:e0:e3:41:d2:ab:e9:c0:ce:ef:8a:a3:ec:28:
f2:03:77:ac:92:15:55:a9:61:61:d8:30:17:1f:a3:69:ca:11:
4a:17:2e:36:30:a3:1e:76:db:0a:ba:ab:c9:2f:80:f5:74:de:
05:a2:66:eb:85:8a:dc:be:fd:a1:b7:22:89:72:40:5a:9d:b2:
1e:c2:a7:fd:27:af:bd:e8:1f:4c:1f:e2:39:55:98:cf:0a:ba:
7d:93:ea:02:fb:95:28:bb:50:bd:0f:15:f2:cd:24:38:32:2f:
86:94:2b:d2:90:b0:78:71:1d:3c:35:07:d5:0b:5a:f7:98:77:
ca:d5:6c:a6:9e:25:81:55:85:3e:b8:01:fb:33:f9:29:bc:86:
b2:f0:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:41 2026 by rpki-client