
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37342e302f32342d3234203d3e2039383131.roa
File: 3231312e3136372e37342e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier: zvdfNdkGjrujJCN2x79XGZSq+DoBSts1fgPU30DJFAo=
Subject key identifier: 91:32:BB:3B:17:32:37:82:41:86:96:96:0F:96:DC:8A:CE:65:BE:58
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 0F39D6A508094EC8BDBFEEC2E3C804BCDE43E1BC
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37342e302f32342d3234203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:17:08 +0000
ROA not before: Wed 03 Jun 2026 08:12:08 +0000
ROA not after: Wed 02 Jun 2027 08:17:08 +0000
asID: 9811
IP address blocks: 211.167.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:39:d6:a5:08:09:4e:c8:bd:bf:ee:c2:e3:c8:04:bc:de:43:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:12:08 2026 GMT
Not After : Jun 2 08:17:08 2027 GMT
Subject: CN=9132BB3B17323782418696960F96DC8ACE65BE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:f4:f3:e0:b1:0f:e5:db:90:05:b8:53:de:
5f:fd:6f:e4:e9:dd:36:a1:b9:b3:5c:8e:39:6d:80:
25:a8:19:bd:48:3d:9b:2c:b7:76:72:14:42:92:bb:
ce:4c:64:88:bb:43:43:63:7e:42:5e:13:10:c9:80:
96:38:d6:7b:03:fb:42:ad:9b:14:80:7a:c8:0b:9c:
c2:6d:b6:d6:2e:b1:41:f1:df:8e:e7:92:55:a5:5d:
3a:1e:58:71:b2:7b:32:98:b8:50:97:bd:33:35:c1:
e0:ec:98:f4:dc:71:5c:d6:70:26:af:d8:f3:c0:11:
58:80:f3:65:65:08:d3:89:a8:b0:74:7c:20:6b:7a:
ae:41:e5:ef:2e:32:c8:5e:f2:8f:63:31:eb:af:5a:
12:91:58:45:5d:16:0c:9c:02:a9:65:cf:1d:6d:07:
25:31:42:53:b6:83:9b:55:98:2e:50:67:e3:27:a3:
20:2e:7e:4e:41:83:6e:20:15:30:5e:fe:59:b6:ed:
ce:a0:6e:0f:40:48:66:9b:d9:0c:5a:e6:07:6a:be:
a3:c4:45:16:d6:b1:53:96:20:7e:10:d0:be:8c:b5:
39:b0:78:57:07:45:91:a2:fa:82:8f:3c:4c:27:ae:
94:5e:55:03:6b:28:33:0e:c6:8b:5d:3a:d3:03:aa:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:BB:3B:17:32:37:82:41:86:96:96:0F:96:DC:8A:CE:65:BE:58
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e37342e302f32342d3234203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.167.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ef:a4:98:78:b6:83:3f:c6:b1:4e:0a:7a:39:2f:3f:95:42:5c:
bc:f4:a7:16:2d:60:68:73:d9:44:0c:e3:56:63:1f:24:1d:82:
4b:0c:5a:f3:51:3c:4c:dd:ec:a0:ad:32:df:50:27:f3:64:4c:
a4:62:fe:14:86:6a:e4:d5:7b:4c:3a:b5:b9:ce:02:ad:ad:a8:
1b:22:ab:4b:de:34:d7:a1:0f:a1:7d:01:35:1a:b4:d8:1c:d6:
37:7e:f9:b0:1e:ba:b0:e6:ad:d9:6a:c9:c4:1a:30:94:1a:5f:
83:bf:83:5b:1a:4b:32:3b:2a:60:b4:bc:55:ec:3b:a0:15:d6:
ec:3f:1f:62:24:d0:37:9e:a5:d7:00:2e:6e:e1:57:8d:ad:9c:
cb:43:5d:ac:db:a7:ab:a7:be:fe:80:38:2a:09:a1:0d:a2:aa:
15:14:03:92:cb:c2:d1:0f:a5:aa:d7:c0:c7:01:48:79:c4:73:
f1:d3:0e:bd:6b:63:63:e8:3a:08:27:0a:17:39:5c:96:ae:cd:
83:91:ab:97:eb:1c:50:4f:ae:f0:98:a6:59:1b:59:2e:d1:29:
88:55:38:d2:c8:02:4f:c8:10:29:d8:ff:9a:4b:00:52:5a:3d:
fe:92:7f:bb:74:91:92:5c:b9:d2:88:be:d0:dc:79:ff:91:46:
ca:af:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:39 2026 by rpki-client