
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36372e302f32342d3234203d3e2039383131.roa
File: 3231312e3136372e36372e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier: PJM1jTZ3ROqjnDAYuyA5HmGK47ByNu+VHrcVyLu+WXk=
Subject key identifier: 14:60:C8:11:7A:3F:BB:23:F9:45:5D:A2:6A:74:7A:15:09:D8:64:C6
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 65B84F6B70196FB120D1783BC0A054DA5A43AE9B
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36372e302f32342d3234203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:16:14 +0000
ROA not before: Wed 03 Jun 2026 08:11:14 +0000
ROA not after: Wed 02 Jun 2027 08:16:14 +0000
asID: 9811
IP address blocks: 211.167.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b8:4f:6b:70:19:6f:b1:20:d1:78:3b:c0:a0:54:da:5a:43:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:11:14 2026 GMT
Not After : Jun 2 08:16:14 2027 GMT
Subject: CN=1460C8117A3FBB23F9455DA26A747A1509D864C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:c2:18:9a:c6:5b:d9:e0:3e:fe:ed:49:18:
68:ee:40:4f:aa:d7:29:1d:cd:96:76:63:44:fe:8e:
9d:43:89:a1:0c:be:06:eb:2e:d6:9d:2b:49:dd:d7:
7a:f6:c7:0b:db:2a:3c:67:07:d8:0e:12:2a:df:00:
52:c2:9b:d6:f0:98:a5:d9:a8:d1:a1:f9:9a:5f:a4:
da:e9:7f:1f:de:49:c5:93:ac:ae:38:73:74:8d:e8:
0a:b3:72:ac:80:6e:2d:90:2c:9a:2d:78:44:5f:e6:
37:31:84:b9:84:74:5d:bd:36:46:61:29:23:b9:b6:
5d:fb:49:eb:d3:0d:25:5a:48:94:bc:f2:d4:80:f1:
70:68:8c:ab:4c:d7:1c:45:5d:05:7e:8c:22:03:48:
98:01:a9:4d:42:fd:97:94:94:d8:6d:b9:28:d5:81:
a4:3e:6e:63:23:e7:8b:89:18:53:a4:01:fc:45:02:
27:5d:ba:e9:d6:30:11:92:5f:2a:12:cc:2b:94:1a:
72:f1:03:36:d4:50:8a:c7:dd:8d:65:1d:76:4f:ed:
0b:25:36:e2:09:ff:7b:7c:db:dd:69:f3:67:83:61:
2c:51:44:ab:b3:45:11:c2:49:46:dd:d8:d2:3f:bf:
b7:4b:68:00:46:57:61:c3:92:e1:72:53:5f:c6:17:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:C8:11:7A:3F:BB:23:F9:45:5D:A2:6A:74:7A:15:09:D8:64:C6
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e36372e302f32342d3234203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.167.67.0/24
Signature Algorithm: sha256WithRSAEncryption
48:66:b6:55:01:d0:03:83:73:76:a3:d0:34:11:83:86:7e:16:
69:87:b6:60:4f:21:bb:f4:c5:8a:d1:83:e3:d9:d9:36:de:da:
8f:2e:d0:31:40:3e:58:e8:a0:97:71:0c:56:b4:8b:97:47:c4:
a3:ff:83:59:5a:5c:31:c4:a1:4f:04:71:b3:5b:ec:9c:aa:5b:
c9:ae:21:16:62:c2:6e:66:13:b4:f2:2c:5e:bf:20:9e:0e:ac:
cf:51:c9:cb:3b:23:c6:b1:ce:d4:bb:60:72:d2:75:d5:06:38:
d8:42:32:69:4b:09:64:89:89:76:71:3a:4f:9e:57:f0:0b:fb:
71:91:ec:e3:54:9b:45:1f:5f:44:09:90:5b:39:5a:1c:2a:25:
7f:50:22:cd:15:3c:b9:a4:6b:7f:13:94:59:c5:27:45:fa:e6:
07:c2:30:68:83:f7:39:02:89:5e:2f:d8:23:f2:5b:f2:86:5d:
f6:50:4c:e1:a3:2f:b4:5a:e2:e9:02:3f:1c:4a:86:41:48:54:
1f:dc:73:5e:68:5a:8d:a0:5f:b3:32:09:3b:37:56:a8:42:d3:
6e:b1:6c:99:b7:0c:f6:bb:57:84:fb:80:ea:ea:33:2f:64:10:
a8:a1:79:09:59:67:e5:f5:b7:80:a3:ec:eb:96:34:33:df:44:
3d:05:16:6f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUZbhPa3AZb7Eg0Xg7wKBU2lpDrpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2
Q0YxQzVBODAeFw0yNjA2MDMwODExMTRaFw0yNzA2MDIwODE2MTRaMDMxMTAvBgNV
BAMTKDE0NjBDODExN0EzRkJCMjNGOTQ1NURBMjZBNzQ3QTE1MDlEODY0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3MIYmsZb2eA+/u1JGGjuQE+q
1ykdzZZ2Y0T+jp1DiaEMvgbrLtadK0nd13r2xwvbKjxnB9gOEirfAFLCm9bwmKXZ
qNGh+ZpfpNrpfx/eScWTrK44c3SN6AqzcqyAbi2QLJoteERf5jcxhLmEdF29NkZh
KSO5tl37SevTDSVaSJS88tSA8XBojKtM1xxFXQV+jCIDSJgBqU1C/ZeUlNhtuSjV
gaQ+bmMj54uJGFOkAfxFAidduunWMBGSXyoSzCuUGnLxAzbUUIrH3Y1lHXZP7Qsl
NuIJ/3t8291p82eDYSxRRKuzRRHCSUbd2NI/v7dLaABGV2HDkuFyU1/GF8wTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUFGDIEXo/uyP5RV2ianR6FQnYZMYwHwYDVR0j
BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz
Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNjY5OTA0Mjg2MjUzMDc1LzAvMzIzMTMxMmUzMTM2
MzcyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANOnQzANBgkqhkiG9w0BAQsFAAOCAQEASGa2VQHQA4NzdqPQNBGDhn4WaYe2
YE8hu/TFitGD49nZNt7ajy7QMUA+WOigl3EMVrSLl0fEo/+DWVpcMcShTwRxs1vs
nKpbya4hFmLCbmYTtPIsXr8gng6sz1HJyzsjxrHO1LtgctJ11QY42EIyaUsJZImJ
dnE6T55X8Av7cZHs41SbRR9fRAmQWzlaHColf1AizRU8uaRrfxOUWcUnRfrmB8Iw
aIP3OQKJXi/YI/Jb8oZd9lBM4aMvtFri6QI/HEqGQUhUH9xzXmhajaBfszIJOzdW
qELTbrFsmbcM9rtXhPuA6uozL2QQqKF5CVln5fW3gKPs65Y0M99EPQUWbw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:41 2026 by rpki-client