
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e203536303438.roa
File: 3231312e3136372e38382e302f32322d3232203d3e203536303438.roa (raw, json)
Hash identifier: ssOo4tF9svPfeqdeCxDM9A7gdFtChW1YDpGUbTeDtXA=
Subject key identifier: 0C:95:AF:46:2D:B0:B6:3F:5F:7D:F3:FA:23:0B:ED:10:B6:5B:12:67
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 4D6735A00A2217935E3D5A1C9E99A0DC8DDE38B8
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:40:52 +0000
ROA not before: Fri 18 Sep 2026 02:35:52 +0000
ROA not after: Fri 17 Sep 2027 02:40:52 +0000
asID: 56048
IP address blocks: 211.167.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:67:35:a0:0a:22:17:93:5e:3d:5a:1c:9e:99:a0:dc:8d:de:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:35:52 2026 GMT
Not After : Sep 17 02:40:52 2027 GMT
Subject: CN=0C95AF462DB0B63F5F7DF3FA230BED10B65B1267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:5d:06:26:bf:c2:f3:e7:ef:6a:9c:8a:9e:
f2:59:1f:63:f5:e9:63:18:0e:a2:47:13:96:fe:e1:
2e:6f:6b:e8:0a:35:c0:cf:1c:d4:58:74:53:35:72:
6a:c5:5c:ff:7d:d0:5d:54:68:48:03:c3:5e:8a:9d:
72:88:69:67:ef:0d:be:a8:90:1f:c4:89:1a:cc:e8:
55:f7:63:09:df:12:1c:0a:c0:4f:2e:07:47:67:e0:
e2:1a:83:da:c6:f2:f7:c8:87:0e:72:d7:0c:e8:b0:
d3:94:6e:0c:11:56:0b:ca:e2:f9:07:f4:58:74:69:
7c:47:b0:2d:02:d5:5e:09:ec:c3:6d:c6:b3:a2:0d:
9e:98:ee:4b:b5:0c:5e:3b:6c:5a:a2:89:62:af:78:
3b:ba:91:e5:8c:7d:a4:6b:eb:f9:24:a6:73:45:8e:
04:86:18:8b:5a:8c:67:0f:13:c4:df:ed:d7:46:d5:
c0:6a:30:82:2d:e9:5d:d4:21:0b:0d:22:ab:d4:5d:
ca:43:11:94:82:d1:c3:16:70:b3:d5:de:42:0a:69:
71:40:f9:02:5c:19:0f:6d:26:39:63:64:7a:a5:4b:
9d:06:cb:13:2b:f4:1c:65:3e:b8:ed:55:3f:8e:34:
9e:25:c3:5a:81:c9:70:a1:83:81:e2:a8:ee:7b:23:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:AF:46:2D:B0:B6:3F:5F:7D:F3:FA:23:0B:ED:10:B6:5B:12:67
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3136372e38382e302f32322d3232203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.167.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:58:d3:99:68:00:47:cd:ec:d5:5b:eb:ae:22:c0:e8:e1:a4:
ef:fa:2b:c4:af:98:4d:9a:d8:bd:d3:fd:9c:55:a4:78:ea:ff:
d9:03:bd:37:40:09:6e:12:ae:89:0c:85:ba:2a:63:bc:4f:0d:
1d:24:fd:36:1e:9c:b2:6f:a3:ed:65:23:02:c7:c0:12:0e:f8:
31:8e:2c:6b:5c:de:b9:eb:03:46:24:83:74:67:a3:74:3f:fe:
fa:d1:70:69:15:7d:c6:69:2f:dc:e6:da:1f:7c:19:82:96:ae:
b8:83:49:ae:c2:6a:b1:cf:fb:2c:e9:2a:ed:01:c6:52:66:70:
b3:6a:bc:bc:51:e5:9c:ee:96:45:c9:a5:38:c2:b8:bf:c4:61:
a1:e5:35:c5:fb:9b:c4:3f:4b:fc:38:f1:49:c0:36:79:ad:75:
92:c4:a5:4b:0d:b8:d4:9e:81:13:0b:1c:42:9b:41:d6:17:81:
9b:05:49:ae:ff:be:6d:45:ec:45:18:41:19:89:55:ca:10:c1:
29:6b:58:65:48:9e:f2:04:80:6a:80:22:66:82:f1:ed:b2:78:
d6:be:8d:3f:13:7b:97:f7:52:b5:ae:f5:00:9d:9a:32:49:d6:
ac:8a:1a:51:73:46:8c:ae:81:8d:d9:6c:6a:95:ce:88:1a:9f:
3f:21:a6:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:31:39 2026 by rpki-client