
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/323430323a656634303a666666663a3a2f34382d3438203d3e2034383038.roa
File: 323430323a656634303a666666663a3a2f34382d3438203d3e2034383038.roa (raw, json)
Hash identifier: HrpRIpfraumgoL0vUs8+FRSJkoMJMLutrxQ+HKLHPwI=
Subject key identifier: 92:A6:B1:FE:45:60:37:B8:B6:E4:7A:A0:77:FB:28:D4:A3:A4:36:B3
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 41D79ACF9332EFA1D0A9DE6B2D7F4E14A7371B3E
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/323430323a656634303a666666663a3a2f34382d3438203d3e2034383038.roa
Signing time: Mon 22 Jun 2026 01:49:25 +0000
ROA not before: Mon 22 Jun 2026 01:44:25 +0000
ROA not after: Mon 21 Jun 2027 01:49:25 +0000
asID: 4808
IP address blocks: 2402:ef40:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 16:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d7:9a:cf:93:32:ef:a1:d0:a9:de:6b:2d:7f:4e:14:a7:37:1b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Jun 22 01:44:25 2026 GMT
Not After : Jun 21 01:49:25 2027 GMT
Subject: CN=92A6B1FE456037B8B6E47AA077FB28D4A3A436B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:fc:0a:bf:c1:77:94:2b:40:2e:8b:04:90:
38:24:a4:01:eb:86:1c:f7:be:b9:03:cd:51:48:fa:
91:c0:98:15:0e:89:55:f3:8f:bd:56:8d:03:f2:f4:
e2:10:0a:b5:c1:2a:de:07:c3:ff:ea:26:9c:a4:d2:
ac:7c:dc:6e:42:cc:71:e9:56:95:f3:02:69:af:ac:
d8:c4:8f:c4:4e:6e:ce:01:47:dc:8b:3e:db:9c:b6:
c4:d0:96:65:3a:c2:01:17:22:a7:80:dd:79:eb:31:
59:c7:3b:53:58:10:e9:25:ef:2a:00:fe:45:6f:36:
83:e0:e9:1d:5e:6a:db:79:43:c9:66:1b:2b:1c:53:
8a:7b:e2:75:b4:b0:2f:bc:c9:c6:6a:7c:8e:75:92:
c1:60:3e:88:54:d1:26:ac:54:95:19:1d:7a:d4:b1:
49:02:9d:70:d3:de:fb:de:39:1f:38:02:be:5a:ed:
e5:a5:50:e8:bc:54:e0:94:59:8e:51:8d:0e:77:12:
17:57:39:7a:94:5f:74:60:9f:cb:7f:de:8a:c7:83:
4f:40:7c:84:b0:fb:e3:c7:13:97:78:59:34:dc:b7:
de:3c:bf:05:8b:1a:0b:47:7e:8b:40:41:89:7c:75:
18:00:93:13:d0:5e:24:4e:d9:c2:70:64:dc:a3:b9:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:B1:FE:45:60:37:B8:B6:E4:7A:A0:77:FB:28:D4:A3:A4:36:B3
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/323430323a656634303a666666663a3a2f34382d3438203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:ef40:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
3d:19:7c:e2:f4:e6:c8:a9:e8:fb:d5:e9:5d:af:e8:2e:40:7b:
11:dc:ed:d4:a9:e0:a6:35:36:59:38:06:0a:65:a0:ca:24:dd:
59:8a:f9:31:2e:1b:28:8e:d2:f0:d7:47:3b:ba:aa:c7:e3:5e:
ff:5a:2c:93:0a:06:10:fb:d6:fb:1e:1f:3a:a8:ee:2c:3f:fd:
80:39:df:66:33:e2:6c:60:ca:c3:f5:80:bf:18:91:93:63:6d:
0d:e2:fb:14:80:f3:2d:5d:ff:22:0c:22:b5:9e:50:ec:67:c9:
50:93:ad:bb:79:74:00:5a:f0:8f:5f:52:1d:ce:c4:94:6d:88:
ac:f1:5a:55:52:a1:76:b6:92:8d:91:70:25:de:6f:ee:59:cc:
6c:c7:2d:2a:96:55:bf:89:de:63:42:19:14:d4:24:27:34:44:
b3:fb:62:30:69:9f:b8:b1:11:91:f5:2f:3f:5d:88:3b:30:63:
84:81:f3:01:19:8b:fb:c4:a3:1c:ce:ab:9f:c8:dd:06:83:b9:
64:08:3b:7a:32:d6:36:4d:60:73:ab:41:59:41:9d:42:c0:97:
94:27:20:d2:51:45:c5:eb:53:4a:54:f0:08:74:fd:20:82:08:
b6:21:42:04:c6:71:39:10:d8:8d:45:56:4e:6a:3b:6a:aa:f3:
12:63:7a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:21 2026 by rpki-client