
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32322e302f32342d3234203d3e2039383131.roa
File: 3231382e3234362e32322e302f32342d3234203d3e2039383131.roa (raw, json)
Hash identifier: +efbssfhzlyiWu9GuEDcfUTHVP3Xt1gYsGV068/Nbgo=
Subject key identifier: 82:65:FA:6F:05:FA:01:01:31:81:55:98:06:FE:11:12:80:DF:CE:47
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 13905BB7BF0FB0F7BF407EBBA6648CB619977738
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32322e302f32342d3234203d3e2039383131.roa
Signing time: Wed 03 Jun 2026 08:21:42 +0000
ROA not before: Wed 03 Jun 2026 08:16:42 +0000
ROA not after: Wed 02 Jun 2027 08:21:42 +0000
asID: 9811
IP address blocks: 218.246.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:90:5b:b7:bf:0f:b0:f7:bf:40:7e:bb:a6:64:8c:b6:19:97:77:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 3 08:16:42 2026 GMT
Not After : Jun 2 08:21:42 2027 GMT
Subject: CN=8265FA6F05FA01013181559806FE111280DFCE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:44:d3:20:ac:75:0e:12:9f:e6:1f:3c:fe:
01:91:5d:c1:a3:6c:a5:0d:41:89:6a:35:36:ca:aa:
0e:56:da:54:d3:ea:65:c9:50:58:2d:f3:8d:30:b4:
b2:26:da:c0:3e:3d:1e:91:f8:97:6b:38:d5:6d:0c:
30:e3:5c:7a:47:dc:b8:3a:8a:2e:3d:b0:4a:c2:80:
51:0e:c9:30:ac:60:60:e9:54:2d:68:cf:9a:79:33:
64:3e:ff:f9:2a:8e:6e:48:c8:7f:41:1c:78:4d:b2:
a6:12:17:75:c0:c6:e2:9d:b5:d5:68:4f:0c:99:81:
cc:d5:2d:19:50:97:0c:6a:e9:28:1f:20:62:61:31:
03:6c:4a:48:b7:15:f6:5a:14:20:da:f2:48:5a:aa:
a8:0a:85:e5:43:de:10:dd:eb:3c:68:83:5d:d1:f5:
81:b4:27:35:be:ec:16:06:91:98:bc:8c:4c:83:96:
af:b2:a0:54:8d:5d:d1:7b:5c:d0:88:1f:72:90:64:
e7:fe:f4:2d:1c:d9:08:25:c7:69:0d:22:de:19:89:
66:eb:1a:ab:62:b1:85:d2:4c:cd:98:fe:8b:0d:02:
f1:4e:cc:b7:13:82:80:86:76:e7:dd:c5:3b:3d:e3:
6d:c5:ea:44:5c:df:22:75:81:7b:4a:2a:04:f3:9c:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:FA:6F:05:FA:01:01:31:81:55:98:06:FE:11:12:80:DF:CE:47
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e32322e302f32342d3234203d3e2039383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.246.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d2:88:64:fb:a8:ce:32:81:34:3d:15:40:49:cb:aa:e4:46:
b0:55:ad:06:95:59:70:0a:6c:6f:f8:50:46:4a:6f:7b:14:bb:
2a:95:ad:af:17:1d:e4:bb:d5:0d:46:0c:7d:dd:53:2a:e3:01:
6e:21:9b:8c:18:12:ab:ba:dc:2a:f2:ff:cf:3d:4e:87:c5:6f:
4d:81:40:e6:23:d6:c2:90:26:b7:27:0c:02:6a:d9:5d:5d:a0:
37:b8:38:2b:19:58:36:e3:5a:71:c2:b0:5d:f6:e4:a2:f8:d6:
8e:33:59:0f:8b:f4:fe:30:8c:24:b5:75:97:f2:f8:06:9b:2e:
9c:7f:fc:ce:8b:b7:bf:a7:fc:ea:24:09:01:27:c0:72:ff:de:
40:b2:72:3c:dc:e2:99:1e:c1:0b:2c:5d:52:83:06:80:8a:93:
9c:5f:0a:f5:ca:78:45:b8:af:f6:80:61:de:6c:b9:ed:11:d3:
b5:8d:6b:bd:5a:ca:e4:f7:80:6a:62:d8:df:1d:7d:27:0f:bb:
8f:09:95:b8:e7:f0:a1:26:1f:a0:c9:37:90:54:98:3e:6d:bb:
37:bc:0b:aa:7f:a9:78:e1:28:54:c1:51:a1:29:92:e8:59:96:
47:83:7f:77:fa:4e:c0:36:ae:14:4b:df:84:35:ce:0a:6e:15:
7f:45:a6:54
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUE5Bbt78PsPe/QH67pmSMthmXdzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2
Q0YxQzVBODAeFw0yNjA2MDMwODE2NDJaFw0yNzA2MDIwODIxNDJaMDMxMTAvBgNV
BAMTKDgyNjVGQTZGMDVGQTAxMDEzMTgxNTU5ODA2RkUxMTEyODBERkNFNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1UTTIKx1DhKf5h88/gGRXcGj
bKUNQYlqNTbKqg5W2lTT6mXJUFgt840wtLIm2sA+PR6R+JdrONVtDDDjXHpH3Lg6
ii49sErCgFEOyTCsYGDpVC1oz5p5M2Q+//kqjm5IyH9BHHhNsqYSF3XAxuKdtdVo
TwyZgczVLRlQlwxq6SgfIGJhMQNsSki3FfZaFCDa8khaqqgKheVD3hDd6zxog13R
9YG0JzW+7BYGkZi8jEyDlq+yoFSNXdF7XNCIH3KQZOf+9C0c2Qglx2kNIt4ZiWbr
GqtisYXSTM2Y/osNAvFOzLcTgoCGdufdxTs9423F6kRc3yJ1gXtKKgTznAp7AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUgmX6bwX6AQExgVWYBv4REoDfzkcwHwYDVR0j
BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz
Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNjY5OTA0Mjg2MjUzMDc1LzAvMzIzMTM4MmUzMjM0
MzYyZTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANr2FjANBgkqhkiG9w0BAQsFAAOCAQEAjNKIZPuozjKBND0VQEnLquRGsFWt
BpVZcApsb/hQRkpvexS7KpWtrxcd5LvVDUYMfd1TKuMBbiGbjBgSq7rcKvL/zz1O
h8VvTYFA5iPWwpAmtycMAmrZXV2gN7g4KxlYNuNaccKwXfbkovjWjjNZD4v0/jCM
JLV1l/L4BpsunH/8zou3v6f86iQJASfAcv/eQLJyPNzimR7BCyxdUoMGgIqTnF8K
9cp4Rbiv9oBh3my57RHTtY1rvVrK5PeAamLY3x19Jw+7jwmVuOfwoSYfoMk3kFSY
Pm27N7wLqn+peOEoVMFRoSmS6FmWR4N/d/pOwDauFEvfhDXOCm4Vf0WmVA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:25 2026 by rpki-client