
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS216047.roa
File: AS216047.roa (raw, json)
Hash identifier: yuC5z/UqPJetMxdKF3rCNfuTYRjwlBMxNc3zqbEnFJg=
Subject key identifier: AF:68:00:63:2D:3D:1F:74:8A:82:29:CC:89:AA:48:22:D8:7E:1D:43
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 6651BC3843D9A9E117136D61A531E6CC2E6ACCB4
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS216047.roa
Signing time: Tue 19 May 2026 02:36:40 +0000
ROA not before: Tue 19 May 2026 02:31:40 +0000
ROA not after: Tue 18 May 2027 02:36:40 +0000
asID: 216047
IP address blocks: 45.248.88.0/22 maxlen: 24
45.248.89.0/24 maxlen: 24
45.248.90.0/24 maxlen: 24
103.216.228.0/24 maxlen: 24
103.216.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 10:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:51:bc:38:43:d9:a9:e1:17:13:6d:61:a5:31:e6:cc:2e:6a:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: May 19 02:31:40 2026 GMT
Not After : May 18 02:36:40 2027 GMT
Subject: CN=AF6800632D3D1F748A8229CC89AA4822D87E1D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:c9:47:eb:58:88:86:7d:13:e3:8d:65:79:
bb:68:40:90:37:bd:98:18:ac:c7:21:d6:f0:a5:1e:
b2:29:8b:28:9d:f2:bf:4f:67:82:2d:ae:38:9f:f3:
b0:d9:e9:66:6f:2f:8a:ad:08:3e:bd:64:fe:83:1a:
e1:3f:af:11:7f:68:8f:11:8f:0e:fe:3b:83:11:3c:
76:be:d3:3d:f0:0b:b0:dd:5d:0d:d5:87:e2:46:27:
42:3b:b2:48:0d:4d:b1:65:be:65:c5:ae:7f:8c:e4:
94:f1:99:37:ec:37:08:f3:56:4d:75:7e:56:4b:f8:
5f:fd:bb:ba:3f:e3:13:6d:75:b4:00:88:d5:ef:5c:
a0:90:fb:45:36:78:0a:ee:a7:d7:4e:58:bf:ca:00:
72:8e:cc:ae:a6:5b:c2:50:41:b3:9f:42:97:a0:99:
d1:d9:5e:1c:59:4d:f9:fa:ea:34:54:c2:df:5f:fe:
e7:f8:de:b5:75:b9:47:55:f6:59:b0:69:54:62:55:
44:86:72:01:c9:cf:f8:5d:4d:26:13:d0:5d:b7:71:
73:1c:0d:97:3e:87:10:3d:5a:7e:07:64:31:7a:a5:
4a:fb:a3:8f:3c:c0:97:66:4f:c9:e5:88:50:e1:86:
50:17:0b:dc:e2:a4:70:4d:77:e3:a9:bd:c2:92:15:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:68:00:63:2D:3D:1F:74:8A:82:29:CC:89:AA:48:22:D8:7E:1D:43
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS216047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.88.0/22
103.216.228.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:9f:f6:bc:74:0a:bf:e1:3a:f0:f5:6b:41:80:29:1f:1c:b6:
4f:4a:b1:c2:d0:7d:18:48:d2:9d:ff:08:3f:31:6b:9a:60:41:
a8:44:6b:4c:b3:a6:42:54:29:2c:44:c7:5f:17:4c:48:6d:f1:
41:66:f5:9b:26:2a:10:f7:46:1b:37:fc:19:63:4d:b3:c1:d0:
ff:68:1e:fb:e6:1c:c5:47:c5:d4:d1:53:85:2e:0b:42:38:61:
ce:f4:0b:f3:86:20:6b:b3:e8:2b:00:79:3d:5c:66:02:de:43:
c6:1b:a5:48:ae:07:a0:88:00:ad:2b:7c:12:e5:f2:0d:88:4e:
0a:37:59:a9:48:07:97:5e:08:eb:3f:31:8d:32:73:87:ec:e0:
85:d8:55:1b:02:99:84:c4:56:6e:6e:17:91:b8:db:f0:46:c5:
47:db:d2:9d:e6:4d:62:53:00:7a:04:a1:a4:5a:1b:83:cb:bd:
84:28:5c:f0:70:a5:58:d4:b1:bb:70:a0:1b:29:34:2f:8c:48:
48:19:51:ed:1d:f4:59:00:36:c4:33:cc:d8:22:73:53:ad:ef:
8e:ee:d0:88:44:9c:3b:c6:22:65:21:21:d4:66:89:71:99:20:
1d:d1:e1:70:db:ff:47:f6:ad:27:9e:46:b7:90:e5:17:6f:bd:
d9:75:0b:4e
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUZlG8OEPZqeEXE21hpTHmzC5qzLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjA1MTkwMjMxNDBaFw0yNzA1MTgwMjM2NDBaMDMxMTAvBgNV
BAMTKEFGNjgwMDYzMkQzRDFGNzQ4QTgyMjlDQzg5QUE0ODIyRDg3RTFENDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWE8lH61iIhn0T441lebtoQJA3
vZgYrMch1vClHrIpiyid8r9PZ4Itrjif87DZ6WZvL4qtCD69ZP6DGuE/rxF/aI8R
jw7+O4MRPHa+0z3wC7DdXQ3Vh+JGJ0I7skgNTbFlvmXFrn+M5JTxmTfsNwjzVk11
flZL+F/9u7o/4xNtdbQAiNXvXKCQ+0U2eArup9dOWL/KAHKOzK6mW8JQQbOfQpeg
mdHZXhxZTfn66jRUwt9f/uf43rV1uUdV9lmwaVRiVUSGcgHJz/hdTSYT0F23cXMc
DZc+hxA9Wn4HZDF6pUr7o488wJdmT8nliFDhhlAXC9zipHBNd+OpvcKSFdJRAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUr2gAYy09H3SKginMiapIIth+HUMwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzIxNjA0Ny5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC
AAEwDAMEAi34WAMEAWfY5DANBgkqhkiG9w0BAQsFAAOCAQEA1p/2vHQKv+E68PVr
QYApHxy2T0qxwtB9GEjSnf8IPzFrmmBBqERrTLOmQlQpLETHXxdMSG3xQWb1myYq
EPdGGzf8GWNNs8HQ/2ge++YcxUfF1NFThS4LQjhhzvQL84Yga7PoKwB5PVxmAt5D
xhulSK4HoIgArSt8EuXyDYhOCjdZqUgHl14I6z8xjTJzh+zghdhVGwKZhMRWbm4X
kbjb8EbFR9vSneZNYlMAegShpFobg8u9hChc8HClWNSxu3CgGyk0L4xISBlR7R30
WQA2xDPM2CJzU63vju7QiEScO8YiZSEh1GaJcZkgHdHhcNv/R/atJ55Gt5DlF2+9
2XULTg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:37 2026 by rpki-client