
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32312e302f32342d3234203d3e2039383131.roa
File: 3231382e3234362e32312e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier: 81pc+ytXFSHEFd7AkWF+xgLYQXxx7PS/gN1i7aFPlvo=
Subject key identifier: E8:63:B7:4B:A2:E0:0C:CD:84:86:88:0D:BB:64:65:44:62:6C:B5:6B
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 2D79768715B521001E2B86856A7F857D663A40D9
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32312e302f32342d3234203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:21:34 +0000
ROA not before: Wed 03 Jun 2026 08:16:34 +0000
ROA not after: Wed 02 Jun 2027 08:21:34 +0000
asID: 9811
IP address blocks: 218.246.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:79:76:87:15:b5:21:00:1e:2b:86:85:6a:7f:85:7d:66:3a:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:16:34 2026 GMT
Not After : Jun 2 08:21:34 2027 GMT
Subject: CN=E863B74BA2E00CCD8486880DBB646544626CB56B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:9c:42:8d:f6:9f:0f:ee:37:02:bc:a7:19:
b8:4c:7e:13:96:76:0f:80:63:5e:bf:45:a7:f5:0c:
c8:5f:8c:9f:6d:c8:a6:03:cd:6b:61:7e:78:c2:96:
b4:96:aa:10:67:f4:9e:7e:15:f1:64:1e:28:08:8d:
01:09:58:00:01:4a:d0:93:66:7c:af:39:3f:cd:01:
f3:2a:e5:39:22:c2:66:d2:cf:52:02:d8:48:6f:06:
63:b1:4e:eb:98:2e:10:5b:6c:e9:37:ad:9e:00:e7:
d2:df:c3:44:aa:f0:89:f4:bd:c6:2e:14:e3:0d:19:
98:be:df:7e:be:70:04:34:18:03:e6:7e:18:dc:fc:
d7:77:ac:af:94:e4:bf:af:f1:3f:78:64:61:44:b3:
bb:33:76:8f:f1:21:31:53:1a:d4:08:9a:59:9c:42:
62:f1:42:42:1d:34:9c:29:d6:6a:25:69:80:f7:24:
bd:fa:a9:85:8d:8e:46:f2:25:c5:f8:0e:8d:e4:ed:
85:02:2d:40:f1:0f:9b:d6:c9:4f:3c:a3:5b:9d:e9:
e7:a2:6e:c9:27:35:ad:6b:da:d1:c5:c6:ac:08:8e:
8b:e3:70:6b:6f:80:90:a1:d2:71:bd:51:89:47:c5:
e9:58:66:5d:fe:94:4f:79:fb:32:f6:67:d5:95:8e:
c5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:B7:4B:A2:E0:0C:CD:84:86:88:0D:BB:64:65:44:62:6C:B5:6B
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32312e302f32342d3234203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.246.21.0/24
Signature Algorithm: sha256WithRSAEncryption
72:16:c5:d0:dc:c4:d7:58:38:c5:e6:45:8a:5c:de:0c:93:de:
9b:a9:2e:77:b7:f7:9f:e6:f3:84:3a:ad:62:03:29:2f:56:68:
87:50:7b:8b:94:a9:5e:47:8b:9d:92:89:f9:9d:ba:10:e0:b1:
2d:d6:ab:07:14:b8:de:31:dd:19:43:b4:8f:9c:5a:cf:a1:c5:
7e:fa:80:6f:bb:e3:ed:bd:23:d8:b7:78:13:04:e5:46:48:8a:
5a:43:d2:59:ab:09:ad:64:5c:3f:50:26:69:20:f1:e5:15:98:
d1:7c:e6:b3:c2:df:c5:e3:a6:b8:98:b4:15:38:16:23:83:25:
9b:ad:14:3c:bc:c2:47:52:ce:81:86:30:44:44:83:39:f4:44:
12:7e:1c:20:c2:92:d5:57:5e:da:8e:82:e2:7e:80:1c:c3:e8:
f4:15:92:44:46:3e:da:10:f8:6f:49:08:24:64:b5:fe:09:75:
82:57:cb:40:cd:68:1c:5b:00:c0:48:c7:aa:74:a5:11:78:d5:
8e:df:c3:da:f5:af:db:a7:42:db:a2:8e:6e:99:5a:57:32:72:
c5:70:58:92:89:b9:a7:d2:41:18:ad:86:d5:41:a0:b9:05:eb:
5b:2d:3a:8b:6e:2a:dc:82:79:60:93:ad:7e:fd:8c:e9:ea:55:
c7:e8:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:31 2026 by rpki-client