
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa
File: 3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa (raw, json)
Hash identifier: hXDWCjbLVVqt8bSMD0oaMGd4+uooI7uisOe4g5DdpcA=
Subject key identifier: 28:FF:78:92:9B:4F:13:3A:F2:A4:79:BA:44:1D:41:9E:BA:C7:37:5E
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 7C83687E19A340E37DBF7D41B91FCFC4B724E523
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:55:56 +0000
ROA not before: Fri 18 Sep 2026 02:50:56 +0000
ROA not after: Fri 17 Sep 2027 02:55:56 +0000
asID: 56048
IP address blocks: 211.144.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:83:68:7e:19:a3:40:e3:7d:bf:7d:41:b9:1f:cf:c4:b7:24:e5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:50:56 2026 GMT
Not After : Sep 17 02:55:56 2027 GMT
Subject: CN=28FF78929B4F133AF2A479BA441D419EBAC7375E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:cd:3a:a9:11:6c:1d:02:5e:6c:7c:0a:64:
04:c4:1b:de:95:d2:84:a1:0b:6a:36:93:54:2a:dd:
6f:00:a9:4d:fe:9d:bf:dc:1b:3d:c2:96:4f:8a:be:
08:af:30:8b:08:ef:ca:ae:47:82:e5:02:dc:30:bf:
8a:ec:f9:bd:26:a6:fd:ff:2f:09:7f:bd:6e:3c:0e:
fc:9b:5b:24:ed:18:5a:03:97:38:6f:f0:55:95:4d:
0f:d8:17:98:45:92:9f:89:9c:1a:78:c2:3d:0a:76:
b4:52:c9:c5:72:3e:2b:34:e3:d5:a2:28:68:5f:09:
39:c7:b7:f6:2d:59:f5:5f:10:c1:81:3e:28:c4:98:
78:cf:3e:21:74:c9:10:15:d1:15:38:c4:c6:32:21:
0b:5b:6c:fa:77:06:8f:c3:9e:a0:ea:5c:ec:21:2d:
9d:24:db:e3:bf:11:22:d0:3e:d6:1c:32:17:59:48:
38:a5:8a:ac:e8:f1:1e:00:a3:0d:c8:f9:56:2c:f4:
21:ba:05:2d:be:51:a6:8f:15:d0:a8:23:2b:91:a6:
97:1c:bb:a7:cc:d1:0a:43:68:cc:44:b9:eb:76:7a:
0e:2e:cf:e9:65:b0:2c:f2:6b:b4:9d:72:99:62:5b:
d8:bc:82:d3:c2:78:2d:11:22:06:b2:54:ca:04:72:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:78:92:9B:4F:13:3A:F2:A4:79:BA:44:1D:41:9E:BA:C7:37:5E
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135312e302f32342d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7e:8b:61:87:a1:25:fe:9c:2d:33:81:c2:d2:8d:a2:0e:b3:
95:51:7d:90:b2:7c:5c:f5:de:ba:7c:2c:16:a0:e4:de:86:7f:
76:1f:0d:6b:91:7e:89:a1:04:a0:55:6e:a4:cd:a7:74:a7:08:
08:a3:85:57:62:11:a8:9c:2f:68:ad:fa:34:8d:15:ee:12:8e:
b3:ec:66:14:07:d4:de:d5:fc:c6:76:da:14:ee:8c:23:cf:cd:
43:6f:06:da:7e:49:32:fd:4a:36:b5:64:21:95:fe:1f:21:06:
ef:7d:d6:84:10:f5:34:de:dc:02:e6:b8:b6:77:f5:ee:70:44:
ec:81:84:29:63:60:45:0f:91:e1:f1:29:aa:eb:fc:a7:08:d1:
95:a9:a0:57:c2:db:29:9b:b8:5d:46:32:81:7b:a3:0a:b8:e9:
71:dc:22:e6:36:01:a5:c2:26:d7:d8:89:f8:72:f9:a1:3d:5d:
58:03:11:fe:42:3f:c0:5d:9e:df:57:42:29:88:3f:5c:d2:2c:
6d:37:51:4b:48:f7:b4:4a:25:d5:fa:23:26:d7:75:c2:c2:82:
65:09:f8:0c:77:be:53:53:dd:f0:02:7f:59:18:6e:38:09:96:
ac:fc:64:32:6d:09:5b:92:e8:79:55:d7:3f:4e:c1:81:6f:03:
39:d4:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:55:48 2026 by rpki-client