$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135392e302f32342d3234203d3e203536303438.roa File: 3231312e3134342e3135392e302f32342d3234203d3e203536303438.roa (raw, json) Hash identifier: Dcpwe71I1+xXAW42Pp8FMBkKbMxAAszvWWQYr5qL8sI= Subject key identifier: C3:E2:A2:18:A7:86:81:08:69:FF:3A:22:AC:1F:A4:26:E6:06:81:1A Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8 Certificate serial: 31E54F109042837A5CE402B800A2760DC983FC07 Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135392e302f32342d3234203d3e203536303438.roa Signing time: Fri 18 Sep 2026 02:58:18 +0000 ROA not before: Fri 18 Sep 2026 02:53:18 +0000 ROA not after: Fri 17 Sep 2027 02:58:18 +0000 asID: 56048 IP address blocks: 211.144.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e5:4f:10:90:42:83:7a:5c:e4:02:b8:00:a2:76:0d:c9:83:fc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8 Validity Not Before: Sep 18 02:53:18 2026 GMT Not After : Sep 17 02:58:18 2027 GMT Subject: CN=C3E2A218A786810869FF3A22AC1FA426E606811A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:84:80:4a:42:88:fd:17:31:1d:88:91:7f: 1d:50:c7:7b:f8:dd:8a:07:11:d4:09:6d:c8:53:15: ee:b8:b7:f2:bc:92:95:e1:e2:4d:f2:e1:1a:50:6b: 1e:bf:02:9f:ab:38:ea:c5:a6:9f:f9:66:b1:0d:32: 0e:3f:17:60:e1:bd:fc:9a:5f:7b:32:0b:a0:2e:8e: 48:e4:19:01:bb:7f:a3:62:db:30:e0:31:eb:67:be: a9:6d:4c:cd:e2:31:b0:ef:b8:ea:b3:5d:c0:02:0d: ae:f0:7a:3f:32:92:1a:83:34:cb:54:e4:75:95:51: ab:c3:7a:41:00:dd:90:f6:6b:20:4e:84:be:8f:39: d6:a9:08:88:86:76:c9:e0:ed:2b:3c:1c:e0:8b:44: 03:c0:fb:d2:68:17:8f:08:0b:3d:97:98:45:2b:ac: 94:d8:8f:0e:69:6e:8f:0d:8c:63:8c:be:cf:40:9c: 3a:b6:a1:6d:dd:fd:7e:29:9d:59:fb:ba:35:50:66: e0:7a:fb:cb:e4:8c:e0:7a:5c:a2:ba:20:13:99:cf: a1:84:02:c1:1a:be:dc:1d:e8:ad:8f:88:7f:f5:3c: 38:e8:cc:c3:a7:30:99:e7:ad:94:d2:54:03:d0:32: bc:55:14:a2:28:ab:30:b4:3d:b6:b7:75:ca:8d:09: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E2:A2:18:A7:86:81:08:69:FF:3A:22:AC:1F:A4:26:E6:06:81:1A X509v3 Authority Key Identifier: keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3135392e302f32342d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.144.159.0/24 Signature Algorithm: sha256WithRSAEncryption 48:57:36:c4:1b:9d:17:4c:66:4e:43:0f:2d:eb:44:14:ef:a0: 97:47:82:7a:a5:09:82:da:a7:a6:53:a8:6d:00:b5:7c:14:64: 14:0b:84:04:25:6d:5b:f9:9d:0f:73:90:c7:4b:f9:dd:dc:49: f9:db:c4:e2:d4:71:f3:04:d7:9f:1e:5f:be:7e:9f:0b:09:4d: 5d:07:a8:d6:47:21:ec:03:12:a5:0f:52:cf:38:cf:86:95:4a: 3b:33:d9:c2:b0:9a:a0:7f:f5:8f:94:6b:06:b5:77:78:63:8e: ed:96:74:b9:78:39:7a:15:c6:18:f2:a8:5f:70:d4:f1:30:d2: a9:bc:c5:4c:15:b7:93:22:cb:73:39:f0:1a:f3:52:1d:cb:49: a8:18:1d:db:e8:91:a2:b7:22:a7:1c:70:46:b6:fe:64:9b:ec: c9:39:15:eb:32:bf:01:b3:04:32:32:67:e1:35:63:dd:de:bf: 44:a4:d6:73:b9:f1:12:c0:73:13:a5:12:19:64:1d:f3:fa:4e: e2:22:16:0a:a1:b0:4a:ff:22:c0:ce:3c:8d:48:fc:fe:0f:92: 0f:24:f8:ee:50:f1:f6:b9:d6:ef:ec:f2:0e:52:16:75:25:17: 19:1b:c9:c9:51:4d:d7:a4:35:9f:c1:94:94:e1:67:ae:ff:36: e9:00:60:e9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMeVPEJBCg3pc5AK4AKJ2DcmD/AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2 Q0YxQzVBODAeFw0yNjA5MTgwMjUzMThaFw0yNzA5MTcwMjU4MThaMDMxMTAvBgNV BAMTKEMzRTJBMjE4QTc4NjgxMDg2OUZGM0EyMkFDMUZBNDI2RTYwNjgxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMoSASkKI/RcxHYiRfx1Qx3v4 3YoHEdQJbchTFe64t/K8kpXh4k3y4RpQax6/Ap+rOOrFpp/5ZrENMg4/F2Dhvfya X3syC6AujkjkGQG7f6Ni2zDgMetnvqltTM3iMbDvuOqzXcACDa7wej8ykhqDNMtU 5HWVUavDekEA3ZD2ayBOhL6POdapCIiGdsng7Ss8HOCLRAPA+9JoF48ICz2XmEUr rJTYjw5pbo8NjGOMvs9AnDq2oW3d/X4pnVn7ujVQZuB6+8vkjOB6XKK6IBOZz6GE AsEavtwd6K2PiH/1PDjozMOnMJnnrZTSVAPQMrxVFKIoqzC0Pba3dcqNCb/jAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUw+KiGKeGgQhp/zoirB+kJuYGgRowHwYDVR0j BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTI2Njk5MDQyODYyNTMwNzUvMC8zMjMxMzEyZTMx MzQzNDJlMzEzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEANOQnzANBgkqhkiG9w0BAQsFAAOCAQEASFc2xBudF0xmTkMPLetE FO+gl0eCeqUJgtqnplOobQC1fBRkFAuEBCVtW/mdD3OQx0v53dxJ+dvE4tRx8wTX nx5fvn6fCwlNXQeo1kch7AMSpQ9SzzjPhpVKOzPZwrCaoH/1j5RrBrV3eGOO7ZZ0 uXg5ehXGGPKoX3DU8TDSqbzFTBW3kyLLcznwGvNSHctJqBgd2+iRorcipxxwRrb+ ZJvsyTkV6zK/AbMEMjJn4TVj3d6/RKTWc7nxEsBzE6USGWQd8/pO4iIWCqGwSv8i wM48jUj8/g+SDyT47lDx9rnW7+zyDlIWdSUXGRvJyVFN16Q1n8GUlOFnrv826QBg 6Q== -----END CERTIFICATE-----Generated at Sat Oct 10 16:56:41 2026 by rpki-client