
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e203536303438.roa
File: 3231312e3134342e33322e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier: X44rJcH5LHmL7MhDML5SRolNl+RFOlgqWFik/uYhZkU=
Subject key identifier: 01:C6:E8:3C:84:B0:00:E2:25:33:61:20:21:B3:EA:19:A9:2C:2B:92
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 3C4ABEAF7924D48FA100CBC60160C3F044EDA997
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:34:36 +0000
ROA not before: Fri 18 Sep 2026 02:29:36 +0000
ROA not after: Fri 17 Sep 2027 02:34:36 +0000
asID: 56048
IP address blocks: 211.144.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4a:be:af:79:24:d4:8f:a1:00:cb:c6:01:60:c3:f0:44:ed:a9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:29:36 2026 GMT
Not After : Sep 17 02:34:36 2027 GMT
Subject: CN=01C6E83C84B000E22533612021B3EA19A92C2B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:36:56:4b:89:2b:eb:66:58:c2:5d:69:e9:
ce:de:40:37:9f:c2:5c:0b:b2:54:10:e4:80:4e:a1:
ff:3d:ef:f3:84:cd:1b:ce:3f:4c:22:1e:65:25:0b:
0e:fb:e8:69:27:97:fb:11:a0:ef:f7:ca:dc:6d:ed:
b0:1d:07:9c:9d:15:6d:b9:94:62:fb:89:d6:63:c0:
3c:38:6b:f6:35:6c:c9:53:34:4d:b8:21:02:82:68:
f7:a2:8b:87:6a:d0:e2:55:c5:35:8f:4f:d0:51:3e:
c1:e7:f6:a3:4a:04:49:1a:85:20:fb:99:52:8d:ec:
fe:8c:f4:3a:66:b4:e4:8d:17:07:9a:be:1a:d7:ec:
fb:fb:23:91:c4:ac:5e:59:87:cf:ed:dc:c8:60:64:
6c:0c:d5:1f:bf:1f:8b:fc:a3:51:55:f1:6e:29:51:
3d:49:95:c0:59:6c:c1:cf:71:2b:bf:45:f5:8a:9e:
c0:33:80:ef:95:96:38:7e:89:36:06:ff:b9:9d:80:
ba:65:b8:c4:88:ca:30:42:d3:5e:b6:ac:0c:f6:d4:
fb:d1:66:d0:2e:7d:66:45:cc:ac:e1:30:49:71:c5:
4e:0b:d2:47:9b:6d:65:2d:be:60:7c:16:d3:a5:a5:
ea:fa:80:ec:0f:30:8a:f6:31:96:96:03:c7:d8:26:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C6:E8:3C:84:B0:00:E2:25:33:61:20:21:B3:EA:19:A9:2C:2B:92
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e33322e302f32312d3231203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:95:ed:db:24:4c:b7:89:f5:03:db:00:8c:aa:20:8f:99:50:
e9:89:ac:39:26:01:e6:72:ee:39:56:ad:ed:47:63:11:56:f2:
e1:c3:f7:cd:ae:ca:99:f7:64:f7:9f:81:03:f7:bb:92:89:08:
8a:f0:12:b8:7d:70:f0:9b:a2:68:b1:a0:91:31:e2:8d:a7:b9:
30:fc:93:f1:f4:a4:02:5c:6f:fe:fd:ee:e1:b9:10:c8:4c:93:
80:82:30:4e:0a:cb:75:03:fa:08:84:56:f4:d8:00:0c:fe:bd:
8c:d2:b4:58:12:06:41:87:e0:f3:82:a5:eb:b7:4d:ec:05:18:
8f:b6:b7:fc:37:49:3e:c4:ff:86:75:35:a9:fa:de:c1:23:5f:
bb:92:91:0d:33:b3:67:63:0b:77:de:bf:0e:6a:ae:eb:8c:15:
1d:10:21:81:a3:e5:e2:bc:d0:0b:e6:ae:1e:40:4e:bd:cb:85:
3c:03:4c:5d:63:d9:f0:5c:21:2a:df:de:f5:2a:52:45:6b:91:
9d:50:b9:42:38:2a:fa:62:ab:81:e5:3f:78:db:31:81:76:a8:
17:07:05:97:84:74:af:5c:6f:3b:4e:91:0a:d7:fa:ff:b6:76:
64:fd:27:a5:6c:29:c7:f9:c5:e6:05:66:d4:61:8e:62:fa:d6:
6e:7c:2c:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:06:05 2026 by rpki-client