
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135302e302f32342d3234203d3e203536303438.roa
File: 3231312e3134342e3135302e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: SMyauoCr3A9BBBI8ed1xcelyM6WmXx8LGs6+N8ruOV0=
Subject key identifier: A6:27:F0:E9:75:2B:A9:F1:D5:A8:23:CC:0D:7A:5B:7D:1E:17:5A:37
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 2353654638E324BC4364109EBDADD4EEB50E9626
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135302e302f32342d3234203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:55:49 +0000
ROA not before: Fri 18 Sep 2026 02:50:49 +0000
ROA not after: Fri 17 Sep 2027 02:55:49 +0000
asID: 56048
IP address blocks: 211.144.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:53:65:46:38:e3:24:bc:43:64:10:9e:bd:ad:d4:ee:b5:0e:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:50:49 2026 GMT
Not After : Sep 17 02:55:49 2027 GMT
Subject: CN=A627F0E9752BA9F1D5A823CC0D7A5B7D1E175A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:4f:2c:1b:80:66:87:1d:03:5a:be:c4:80:
03:aa:13:84:8c:34:0b:3b:38:a4:ef:76:44:14:6a:
80:3d:4c:c4:36:29:5b:e1:a2:93:31:a0:96:a3:a1:
f5:da:71:f8:fb:b4:ad:32:ce:12:13:37:9f:b5:d5:
aa:b3:ac:fa:bb:1f:55:63:4a:3e:ed:82:50:f1:ff:
a9:cf:1a:c2:14:d1:a2:90:43:b2:62:2c:2e:79:c2:
9e:82:b9:1d:29:b9:bd:5f:69:44:ac:2c:a7:7d:34:
f9:4b:38:77:26:2d:b9:de:fd:b3:4e:e8:37:97:c8:
5b:85:c5:ad:ba:41:0b:04:e9:0c:e1:85:aa:02:bb:
a6:5f:6e:53:78:73:25:e6:87:e6:56:e8:b3:d2:58:
3c:b3:99:5b:f7:d2:fd:4b:80:6f:85:3f:7a:57:89:
88:27:3b:d6:11:8e:1b:73:8f:d5:98:9a:96:36:0c:
f1:29:4a:d7:3e:82:5d:04:19:b8:db:94:ab:b6:e5:
8b:44:ba:ad:b6:dd:14:99:68:3d:f0:c9:fe:82:d9:
0c:c5:3c:ed:0b:a9:0a:bd:f1:3e:cd:73:43:bc:98:
58:78:a9:21:62:98:92:51:78:cf:0b:22:a7:4a:4e:
4b:59:8a:44:e6:cd:13:a1:00:fa:aa:9f:2e:b5:67:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:27:F0:E9:75:2B:A9:F1:D5:A8:23:CC:0D:7A:5B:7D:1E:17:5A:37
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135302e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:cd:29:1a:a5:13:a8:51:2f:7a:20:06:c0:5e:4e:3d:ac:c7:
5a:ac:d5:54:a5:64:fd:16:75:5a:08:17:c0:b5:c5:37:46:f2:
95:d8:b5:dc:3f:c0:1c:83:2d:b6:ce:54:2b:76:aa:83:aa:87:
88:05:4f:03:76:5f:86:36:4c:8e:bd:ba:1a:46:87:63:0c:92:
c2:8f:9f:be:85:a4:35:c8:63:98:e8:68:29:27:68:94:6b:dd:
8e:6d:1c:6a:5f:a0:81:5f:20:2b:35:31:40:c6:94:76:38:aa:
f2:9c:e2:16:42:a0:ac:86:56:c1:40:fb:a1:fb:e1:e0:83:99:
1a:5d:d5:9f:47:cc:18:2c:f2:04:df:51:ec:a7:52:b4:31:73:
d1:43:c6:98:87:94:29:c2:56:24:52:25:db:f2:e7:c1:57:1e:
44:53:21:62:b6:a2:1b:0a:7c:f1:ce:1a:9c:03:54:4c:a8:fb:
0c:46:c7:59:fd:fa:98:ff:fb:ef:5f:e2:a9:91:45:b8:21:38:
e3:9e:64:9c:0a:ce:df:65:f9:b7:2d:db:b2:3b:6e:9b:ec:be:
b5:9e:18:f3:0d:e0:05:c8:48:c3:00:9b:e4:34:8c:38:94:1e:
f5:df:90:f6:ab:0e:68:c8:9f:95:c9:77:c9:c2:1a:d8:39:40:
90:9f:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:29:41 2026 by rpki-client