
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f32302d3230203d3e2039383131.roa
File: 3231382e3234362e302e302f32302d3230203d3e2039383131.roa (raw, json)
Hash identifier: Xw1FEvkpfjUQF3/B1ZOVqeeG+lcr/Je7Ik5QGXiyKQQ=
Subject key identifier: 4C:8B:04:C9:29:B6:F7:1F:3C:2F:71:48:8D:9A:91:E8:06:02:4B:65
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 3BF88783C84FDBECD464FDD48470746A57638747
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f32302d3230203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:22:09 +0000
ROA not before: Wed 03 Jun 2026 08:17:09 +0000
ROA not after: Wed 02 Jun 2027 08:22:09 +0000
asID: 9811
IP address blocks: 218.246.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f8:87:83:c8:4f:db:ec:d4:64:fd:d4:84:70:74:6a:57:63:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:17:09 2026 GMT
Not After : Jun 2 08:22:09 2027 GMT
Subject: CN=4C8B04C929B6F71F3C2F71488D9A91E806024B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:de:50:5e:6f:ad:b0:b1:df:8e:f0:42:fb:
1f:29:01:40:75:95:94:f7:58:6e:51:e2:c5:5b:81:
84:2d:cc:de:4e:8d:0b:44:05:f3:e6:d4:ef:0c:05:
b2:8f:2f:95:0b:99:61:1c:00:ab:f5:fa:1c:81:e1:
6d:4c:42:99:50:48:a8:fa:a2:2d:ff:46:15:8b:a2:
91:32:f5:50:4b:50:91:fe:d2:6d:1f:4c:a0:e3:e2:
8e:d8:ad:05:ee:e8:b5:04:89:e3:fe:4b:f5:c6:a2:
09:25:64:e7:b4:33:21:6a:86:19:3b:bc:56:f7:fe:
c1:d0:57:9a:3e:d8:65:ff:b2:46:f9:70:ac:87:30:
c5:05:d2:7d:c2:20:99:35:86:96:ee:75:4f:d2:bb:
b4:f9:3f:f4:05:60:a0:25:88:c8:78:e0:3f:97:a8:
d2:3e:ea:56:06:a8:bf:60:58:cb:88:53:8d:1b:41:
fb:3e:89:57:90:c3:8d:83:ba:bf:57:2e:48:18:31:
cf:69:c8:57:14:43:29:9e:c0:e0:77:17:65:ab:d2:
4d:d9:23:aa:d0:91:fd:9f:6d:64:c7:26:b5:6a:16:
7a:2c:bf:0e:27:3f:a0:74:d0:a8:28:32:56:13:1c:
f8:b0:3e:e5:89:c8:23:e9:b8:4d:9d:aa:be:a2:47:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:04:C9:29:B6:F7:1F:3C:2F:71:48:8D:9A:91:E8:06:02:4B:65
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f32302d3230203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:86:f4:77:78:89:c9:e5:de:71:93:b3:93:91:fc:9b:9c:1e:
0b:ff:0f:3a:d7:27:9d:55:53:69:23:af:9c:81:2c:ee:35:5d:
cd:7d:f0:0d:63:d4:b5:ed:54:fb:6f:88:45:cc:aa:f9:2e:3e:
9f:ce:76:50:73:ec:6a:ba:e2:c2:89:54:50:8d:b5:f8:c7:71:
a9:15:03:6d:78:f7:52:db:db:c8:12:85:dc:12:b7:12:32:6c:
2c:e5:d4:bc:6c:66:73:b4:23:91:b1:56:5f:5e:e1:4e:35:5a:
f4:64:f1:59:0a:02:95:ef:7e:c2:6b:f9:38:a4:80:0f:62:8b:
92:c5:0e:09:11:f1:cb:2c:f1:f3:4b:d1:e3:93:d0:81:13:de:
5a:85:f0:88:b7:0f:55:01:e5:2e:d6:1f:18:b2:62:85:ee:8c:
39:c2:aa:85:60:4b:96:2f:7e:7b:9e:88:01:d9:c3:61:49:98:
68:84:a0:0e:e8:b2:47:02:93:41:7f:25:76:1a:90:69:3d:b2:
34:4e:cd:a4:c5:d2:d3:4d:e1:0a:3b:cc:09:b5:2b:67:9b:c8:
ec:fd:3d:b9:53:6c:12:cf:b6:d6:0d:2f:42:53:f4:6f:91:e2:
47:5a:f8:9f:49:2c:ac:74:fc:48:ec:f5:39:62:be:5d:77:de:
a8:bf:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:46 2026 by rpki-client