
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa
File: 3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: hS62HmlmwgxYrCx+3I+UOVKADuxfDcUaVeRWMSjNjl0=
Subject key identifier: C6:9E:01:CD:74:6A:BA:7F:CB:46:C1:F0:AF:C9:AA:C0:C2:90:13:1C
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 23E74A506356427EAD8C5BBE797818E9529A66E6
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa
Signing time: Tue 02 Jun 2026 12:24:31 +0000
ROA not before: Tue 02 Jun 2026 12:19:31 +0000
ROA not after: Tue 01 Jun 2027 12:24:31 +0000
asID: 17775
IP address blocks: 122.144.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e7:4a:50:63:56:42:7e:ad:8c:5b:be:79:78:18:e9:52:9a:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 2 12:19:31 2026 GMT
Not After : Jun 1 12:24:31 2027 GMT
Subject: CN=C69E01CD746ABA7FCB46C1F0AFC9AAC0C290131C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:38:59:03:7a:5e:91:43:1f:e9:fb:c1:6b:
b4:c3:0d:39:ec:1a:d7:3c:78:57:a9:98:eb:dc:5b:
ac:78:8c:f1:52:65:31:76:bf:2f:ba:8b:ee:fb:cb:
bc:61:32:83:bc:09:c5:36:87:b1:a1:eb:15:e3:38:
26:07:db:4d:8e:4b:bb:5a:9e:55:29:f2:3c:fe:fb:
03:ed:48:11:a5:3c:3d:5b:81:63:af:78:c6:3a:ab:
42:b4:d2:85:d7:57:6b:30:c3:4d:47:17:d9:ac:07:
17:8c:a0:6c:76:be:a6:32:0c:4a:e0:18:ea:60:fb:
67:cf:64:bd:b8:c7:f4:ec:56:01:80:e6:84:9b:7d:
a8:a8:cd:55:8c:22:64:ae:97:1a:5a:fe:8e:04:3a:
0b:73:43:4c:0a:c7:84:8e:c5:c9:7e:7c:db:5e:57:
ca:f7:5b:62:24:bc:3c:ce:1b:e2:87:c6:31:7e:4d:
1e:54:bc:2b:2f:82:21:93:a8:16:01:4f:ac:14:88:
46:68:2c:ec:91:44:41:ad:a6:b1:b1:32:e4:25:7d:
a3:dc:2f:ec:21:35:d2:50:9c:28:ad:d9:ec:58:ff:
ab:e4:aa:ce:82:3c:b3:8f:c0:b1:01:1c:8e:05:b3:
66:f0:5b:4b:5e:55:d8:1b:b2:22:25:69:bb:6d:8c:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:01:CD:74:6A:BA:7F:CB:46:C1:F0:AF:C9:AA:C0:C2:90:13:1C
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233362e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.236.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:ec:be:11:29:43:5c:08:7b:c2:c8:4d:7f:6c:14:76:2f:01:
da:00:de:88:a0:7d:0e:6b:13:32:de:60:be:de:27:72:21:5a:
ec:82:01:12:d3:1f:92:aa:48:7a:91:5d:aa:72:d9:f3:86:8b:
89:0c:6f:8c:e5:0e:e6:c3:d9:6e:d2:e0:2b:e9:2f:29:85:cc:
43:d0:2b:f1:da:09:77:db:09:be:2a:68:22:92:76:d4:63:d3:
d0:51:db:5d:77:08:8d:96:ef:2f:ca:9b:0a:67:be:56:a6:c0:
44:26:e7:ad:71:2d:4b:b2:07:60:43:87:f4:2d:e1:5d:ad:00:
f6:fe:64:e4:6c:70:bf:bb:05:cb:e1:bc:fe:d9:ca:71:d9:8d:
11:10:b8:d6:25:48:63:cc:65:79:87:a3:5a:0e:32:34:8c:dd:
47:f2:f9:97:c0:30:53:af:ae:8a:a4:65:a3:77:8c:75:d5:67:
f7:7d:bd:96:38:af:6f:8f:5f:d5:f5:4c:e8:90:9d:25:08:00:
4a:7f:28:b2:de:f4:56:e4:b1:8d:c4:11:e9:29:ab:6c:c0:9f:
ff:a8:a6:ef:84:e5:73:06:db:ed:2f:a3:07:b0:0c:31:3c:c2:
f5:22:75:fc:d8:0e:c9:e1:d5:4a:01:de:d5:22:8e:ff:12:a3:
a2:21:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:06 2026 by rpki-client