
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36362e302f32332d3233203d3e2039383131.roa
File: 3231312e3136372e36362e302f32332d3233203d3e2039383131.roa (raw, json)
Hash identifier: k7F1s3CYrktZkKQbzVrsJfkRKpUehgJ1x/jOPpRYt6A=
Subject key identifier: A2:91:DF:F0:37:D9:21:CB:F4:16:D4:B9:FA:19:CA:51:B4:0A:E7:2E
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 32C68FAC18660B7B3C8995EDDC543FBB718AC950
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36362e302f32332d3233203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:16:31 +0000
ROA not before: Wed 03 Jun 2026 08:11:31 +0000
ROA not after: Wed 02 Jun 2027 08:16:31 +0000
asID: 9811
IP address blocks: 211.167.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c6:8f:ac:18:66:0b:7b:3c:89:95:ed:dc:54:3f:bb:71:8a:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:11:31 2026 GMT
Not After : Jun 2 08:16:31 2027 GMT
Subject: CN=A291DFF037D921CBF416D4B9FA19CA51B40AE72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:20:01:32:47:22:67:56:ea:fc:d8:5c:33:
7c:db:46:0c:ca:25:c2:2e:68:3c:45:50:da:be:ca:
64:e6:4d:1b:c3:f4:8e:f2:25:01:e9:b8:a6:8e:78:
88:94:41:97:d8:9c:7b:41:4a:85:2b:44:64:92:36:
af:33:b8:49:73:a8:7c:68:df:e1:f7:0a:8e:45:6c:
07:7e:d1:81:8d:07:f2:5d:a3:fe:8c:36:48:87:61:
67:9c:20:b4:17:d8:10:5e:02:86:43:1d:42:ad:a7:
d5:08:e5:0c:bb:11:fc:12:16:6f:30:ba:35:dd:ca:
40:c8:93:44:b5:91:3f:60:48:be:dd:68:05:f9:af:
f2:96:55:c8:3b:93:11:2d:33:08:e9:61:ae:a7:60:
4a:76:f4:c3:32:97:14:90:de:e1:ae:3f:6e:78:19:
3d:14:be:96:a1:bc:e5:2e:d6:c9:98:ba:ad:98:38:
00:70:d2:31:07:c9:76:7b:ea:3c:d0:5e:f0:e2:b9:
18:0d:2d:44:df:14:5e:13:4a:23:e6:05:bb:d7:79:
53:b1:f5:2e:97:49:cc:bd:68:f2:4c:6a:42:83:10:
6b:c4:bf:c8:66:54:e0:d3:cd:dc:8b:1b:0f:9e:16:
5b:f7:62:26:5b:fe:1c:20:cc:da:50:e9:ac:6e:26:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:DF:F0:37:D9:21:CB:F4:16:D4:B9:FA:19:CA:51:B4:0A:E7:2E
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36362e302f32332d3233203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.167.66.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:ce:fb:ca:b1:1f:bd:9f:67:e7:25:c7:c1:02:b9:51:07:16:
25:ae:86:16:84:47:65:9c:9a:cb:2c:bf:74:63:89:30:5c:2c:
e9:9d:ef:f3:bc:a7:80:8f:5c:07:d5:34:b5:82:07:04:02:a9:
e2:a6:3f:db:84:0e:8b:c4:9e:2a:29:96:c2:7b:e1:88:81:ec:
fc:d3:46:20:76:e5:31:c7:94:bb:9c:38:51:95:2c:f4:66:3d:
5c:07:04:6a:8b:97:6e:44:27:3a:95:f0:4b:84:54:ae:71:b3:
f5:c4:21:3f:18:ce:98:b1:d3:ef:05:5f:04:4d:01:68:38:5d:
31:e6:13:4b:57:94:23:2a:a8:6b:87:db:23:f8:32:60:ae:8c:
1c:7b:1b:a0:ac:a5:ed:fd:46:db:c2:b3:46:64:1c:d0:70:f4:
e0:b8:fb:f0:86:e5:b8:5f:70:d9:2a:a9:e2:f6:22:88:be:bd:
3a:ad:09:10:9e:20:ea:e8:b1:7c:e7:83:f9:0a:6c:aa:8c:f2:
b2:f1:a3:8a:76:45:f0:1f:b0:0a:34:13:5c:72:7b:da:17:dc:
9e:d9:b9:ae:1f:da:ba:6d:c8:77:cb:c1:0a:b8:e3:42:47:f6:
18:95:77:ab:3a:30:17:cd:e8:72:13:e0:6c:ed:cb:48:4f:23:
ec:6c:5b:50
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMsaPrBhmC3s8iZXt3FQ/u3GKyVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2
Q0YxQzVBODAeFw0yNjA2MDMwODExMzFaFw0yNzA2MDIwODE2MzFaMDMxMTAvBgNV
BAMTKEEyOTFERkYwMzdEOTIxQ0JGNDE2RDRCOUZBMTlDQTUxQjQwQUU3MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXSABMkciZ1bq/NhcM3zbRgzK
JcIuaDxFUNq+ymTmTRvD9I7yJQHpuKaOeIiUQZfYnHtBSoUrRGSSNq8zuElzqHxo
3+H3Co5FbAd+0YGNB/Jdo/6MNkiHYWecILQX2BBeAoZDHUKtp9UI5Qy7EfwSFm8w
ujXdykDIk0S1kT9gSL7daAX5r/KWVcg7kxEtMwjpYa6nYEp29MMylxSQ3uGuP254
GT0UvpahvOUu1smYuq2YOABw0jEHyXZ76jzQXvDiuRgNLUTfFF4TSiPmBbvXeVOx
9S6XScy9aPJMakKDEGvEv8hmVODTzdyLGw+eFlv3YiZb/hwgzNpQ6axuJvPfAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUopHf8DfZIcv0FtS5+hnKUbQK5y4wHwYDVR0j
BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz
Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNjY5OTA0Mjg2MjUzMDc1LzAvMzIzMTMxMmUzMTM2
MzcyZTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzOTM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAdOnQjANBgkqhkiG9w0BAQsFAAOCAQEAts77yrEfvZ9n5yXHwQK5UQcWJa6G
FoRHZZyayyy/dGOJMFws6Z3v87yngI9cB9U0tYIHBAKp4qY/24QOi8SeKimWwnvh
iIHs/NNGIHblMceUu5w4UZUs9GY9XAcEaouXbkQnOpXwS4RUrnGz9cQhPxjOmLHT
7wVfBE0BaDhdMeYTS1eUIyqoa4fbI/gyYK6MHHsboKyl7f1G28KzRmQc0HD04Lj7
8IbluF9w2Sqp4vYiiL69Oq0JEJ4g6uixfOeD+QpsqozysvGjinZF8B+wCjQTXHJ7
2hfcntm5rh/aum3Id8vBCrjjQkf2GJV3qzowF83ochPgbO3LSE8j7GxbUA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:44 2026 by rpki-client