
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e203536303438.roa
File: 3231382e3234362e302e302f31392d3139203d3e203536303438.roa (raw, json)
Hash identifier: ok3qcjqm8VbtfwWVQbmaecNF8i8zEzG42F0gQj4RCYs=
Subject key identifier: 8F:DF:33:F1:F3:08:99:11:81:E8:E1:84:CD:E3:69:B1:52:96:1F:B8
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 4BC5B52334BD3A9D5C65BA685880B885437DBB98
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:41:54 +0000
ROA not before: Fri 18 Sep 2026 02:36:54 +0000
ROA not after: Fri 17 Sep 2027 02:41:54 +0000
asID: 56048
IP address blocks: 218.246.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c5:b5:23:34:bd:3a:9d:5c:65:ba:68:58:80:b8:85:43:7d:bb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:36:54 2026 GMT
Not After : Sep 17 02:41:54 2027 GMT
Subject: CN=8FDF33F1F308991181E8E184CDE369B152961FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:a6:1c:ca:36:22:a0:20:df:a0:e7:2c:05:
03:ec:3d:22:75:1b:92:23:10:c3:d5:75:43:8f:77:
aa:4a:6e:cd:6e:a3:10:28:a8:17:18:94:38:5d:8b:
32:4a:2f:4c:dc:6d:b6:8d:89:a6:2b:cd:00:48:68:
9c:2f:da:48:89:f5:ab:f9:32:8c:3f:f7:d6:8c:bd:
8b:f6:fd:08:67:27:4d:2c:46:96:1e:ac:df:dc:46:
cb:1f:4d:23:98:93:95:ec:0f:82:21:a1:ee:1d:35:
20:5f:3c:2c:29:16:a0:61:41:41:a5:8e:35:96:1d:
a2:e7:24:29:04:b2:0f:5c:99:64:09:5a:be:4d:b1:
b2:46:5d:69:50:42:7c:46:86:ab:59:ca:92:f0:4d:
79:31:a5:11:9f:21:c4:9c:16:e6:e3:4e:c2:67:d4:
d4:51:16:ae:2a:31:19:12:ac:bc:c9:b1:ca:4c:5f:
b3:41:e1:76:3d:53:4d:4c:44:b4:bd:cf:7e:e2:d7:
29:c4:f1:a4:19:63:14:0f:39:54:2a:0c:8d:db:8e:
62:61:39:28:1b:06:1a:26:42:fd:95:15:2d:13:49:
da:94:9d:76:96:38:cc:68:45:ef:07:e5:7d:f4:8b:
fb:7d:73:3f:20:d0:f1:ea:75:48:0d:c7:fc:dc:c0:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:33:F1:F3:08:99:11:81:E8:E1:84:CD:E3:69:B1:52:96:1F:B8
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231382e3234362e302e302f31392d3139203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.246.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:80:49:38:68:00:d1:40:f0:90:d0:a8:17:0b:91:cd:44:0f:
d4:23:88:e0:03:8c:4e:2b:83:36:8a:99:6c:39:dc:f5:0e:fc:
98:57:0b:ce:d0:6a:bc:53:5c:86:e2:62:c2:ab:79:34:94:4a:
12:39:cb:2f:08:f4:73:c2:a2:12:e1:96:14:4f:d8:79:3c:da:
9b:c3:4e:8b:df:df:cd:e6:a6:4b:3f:c3:25:7d:07:01:16:be:
49:16:15:c8:0d:90:48:fc:19:33:b9:b4:d8:20:36:7f:20:ab:
6d:e6:10:c7:90:cf:3e:29:68:62:f8:18:78:c5:01:58:cb:90:
3d:5f:f4:32:f0:ec:a6:b7:19:bf:a8:fd:68:c4:78:e6:9f:79:
50:55:b2:78:1b:68:90:24:00:e8:e2:64:40:49:28:b7:11:c7:
b9:c9:44:b2:69:fe:3d:13:b9:a8:43:1e:c3:48:6c:60:a8:50:
c9:81:bc:cd:0f:72:a7:f5:ff:72:44:67:cf:05:f5:97:df:21:
63:ea:55:93:aa:72:58:b6:8a:9e:6c:ea:ac:37:8f:8e:f7:b3:
cc:10:3e:18:57:63:e2:d2:fe:4e:9c:68:ec:99:1d:92:61:f2:
27:d5:91:fd:32:b1:ae:53:5a:7b:66:b9:49:04:e2:4d:77:49:
c7:0e:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:02:47 2026 by rpki-client