
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e31362e302f32302d3230203d3e203536303438.roa
File: 3231382e3234362e31362e302f32302d3230203d3e203536303438.roa (raw, json)
Hash identifier: Hi+F+5MMIB/eEr1MaBYhRyuwvB43+PK66twPhPvReDI=
Subject key identifier: 0E:CE:61:35:EE:66:A7:63:F2:02:45:EC:E8:C1:DE:12:89:0E:F5:94
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 2A6F1064DF6862DAD94A9AB599075CCB85E7537E
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e31362e302f32302d3230203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:41:36 +0000
ROA not before: Fri 18 Sep 2026 02:36:36 +0000
ROA not after: Fri 17 Sep 2027 02:41:36 +0000
asID: 56048
IP address blocks: 218.246.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6f:10:64:df:68:62:da:d9:4a:9a:b5:99:07:5c:cb:85:e7:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:36:36 2026 GMT
Not After : Sep 17 02:41:36 2027 GMT
Subject: CN=0ECE6135EE66A763F20245ECE8C1DE12890EF594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:0d:ef:55:0a:e6:49:1f:4f:5c:3b:d5:a8:
e0:7e:b1:94:8b:7a:97:cb:7b:54:cd:49:88:5d:f2:
51:9b:78:d7:a4:a5:26:95:8d:91:fb:7d:a1:01:78:
b3:74:2e:21:c4:25:71:32:e6:fb:95:f4:8a:03:3c:
73:52:6d:27:99:35:a1:12:6a:cd:73:ef:39:be:c9:
51:b3:a7:97:cc:62:cf:ca:37:f1:48:8d:65:9b:37:
25:4e:aa:20:07:2f:bf:9a:f9:5e:46:ec:16:90:68:
b6:8c:33:8f:f2:2c:ab:6b:f7:ad:47:2a:40:be:2a:
7f:f2:84:c7:ab:a5:a6:7b:d4:5c:a7:e9:b7:a3:11:
1a:37:06:39:21:1d:33:f9:92:0b:74:6a:84:ff:ca:
81:bf:ab:b4:94:28:bf:3a:11:7e:4b:0a:84:98:4a:
49:a0:a5:d3:41:d1:86:d5:72:40:65:8d:26:d7:24:
d8:64:7d:f9:82:fe:d1:da:c6:fa:26:aa:16:8a:91:
bf:18:f6:14:ac:9b:e8:6b:bb:79:1b:5f:3c:4e:7f:
9a:1f:3b:4f:17:37:f0:9d:7d:99:ad:14:17:a3:31:
06:4c:a7:3c:6f:e8:b1:c4:d0:0d:97:6b:eb:30:bb:
03:22:ad:9e:57:ab:3a:db:4f:c5:a1:3e:46:46:ea:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CE:61:35:EE:66:A7:63:F2:02:45:EC:E8:C1:DE:12:89:0E:F5:94
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e31362e302f32302d3230203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.246.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:b0:b9:e1:3d:70:33:28:4a:52:9b:79:de:d6:ac:bb:61:ab:
1e:29:a2:d2:ea:4f:aa:05:fb:38:f8:66:a6:33:20:ec:38:6b:
9b:4f:36:b2:60:b0:bc:13:50:18:96:c7:50:ce:c2:fe:b2:3c:
26:95:22:a4:83:a9:a3:31:e9:00:73:de:6e:a9:98:bb:1a:bd:
18:df:d1:6d:09:3b:08:57:d1:77:2c:18:97:e6:1b:38:ea:83:
df:79:37:71:c2:9c:a1:cf:a7:4f:c2:1d:10:d8:9a:a5:83:31:
fc:e6:e0:f7:03:2a:ce:49:81:96:7d:5b:73:cf:12:3c:8c:d1:
ce:2d:aa:e9:ec:05:19:eb:8d:26:45:67:f6:2c:3d:30:b2:ad:
f3:96:e2:4b:d6:84:92:98:cb:5c:48:aa:ae:36:d8:e8:86:d4:
5e:5f:65:d3:c9:e5:a5:67:9a:7d:da:ab:d6:48:27:81:23:a5:
9e:e1:41:64:2a:bd:69:89:d6:4d:65:a6:89:4f:8c:3c:df:5b:
db:22:5c:31:5a:4a:5e:75:ae:15:f6:e2:5d:07:fe:32:7e:e3:
3a:31:4f:d1:e6:c8:e5:b7:fc:3c:a9:a4:e0:7a:99:84:f5:48:
38:0e:11:3f:78:aa:79:24:41:2e:42:8d:25:c6:33:31:8f:95:
7b:9a:d9:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:16:10 2026 by rpki-client