
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33362e302f32332d3233203d3e203137373735.roa
File: 3132352e3231352e33362e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: V1G2gJL4KYvPQHiXj/b1JUvjNYKKoYcFsL6bBrHZ5jA=
Subject key identifier: 60:0E:53:14:F8:1A:6D:3A:E8:72:03:9B:E4:D6:57:53:FF:2F:5D:87
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 177B151FF34DD12E782A0D756E64589B8133F809
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33362e302f32332d3233203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:04:56 +0000
ROA not before: Wed 10 Jun 2026 06:59:56 +0000
ROA not after: Wed 09 Jun 2027 07:04:56 +0000
asID: 17775
IP address blocks: 125.215.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7b:15:1f:f3:4d:d1:2e:78:2a:0d:75:6e:64:58:9b:81:33:f8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:59:56 2026 GMT
Not After : Jun 9 07:04:56 2027 GMT
Subject: CN=600E5314F81A6D3AE872039BE4D65753FF2F5D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:c1:0c:fe:95:b0:d0:dc:24:e6:81:19:d9:
c4:1f:e2:6a:67:f2:3f:5b:27:4f:bf:71:53:cb:74:
32:0f:2d:83:fb:bd:1d:2e:0e:14:96:68:a4:b9:5a:
4d:62:ad:9d:cf:de:83:3b:45:60:ba:aa:5a:5f:d8:
32:e8:47:a6:85:6e:83:5d:d6:e9:00:73:ac:9e:c8:
4f:32:58:4a:ea:93:ce:c7:cc:c9:73:5d:95:f3:d5:
a0:33:19:50:f5:9a:ca:ff:30:c1:66:22:41:e9:10:
9d:ed:b0:ee:be:02:90:fd:58:a0:a2:2d:6d:e1:e8:
d5:de:fb:c4:7b:71:c2:a1:94:25:76:7f:03:ab:1a:
29:61:06:20:3b:f6:b2:3a:3e:50:95:46:55:da:bc:
c1:0e:d1:eb:f0:9d:ab:4f:0b:5d:fe:b4:b4:0a:ca:
86:13:07:d3:cf:11:da:ca:cd:85:32:50:61:52:18:
f7:c1:0e:8a:00:8d:21:1f:1b:06:36:93:b5:b6:0d:
28:b3:79:5b:82:66:0e:e9:b1:d3:b8:eb:c8:ef:37:
93:bf:c4:61:07:90:07:3c:02:6e:ee:7a:d0:e4:7c:
d1:47:81:5c:96:84:82:3b:40:6d:82:6b:76:80:b7:
21:02:21:c3:47:fa:28:15:85:62:69:23:dd:db:1b:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0E:53:14:F8:1A:6D:3A:E8:72:03:9B:E4:D6:57:53:FF:2F:5D:87
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33362e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.215.36.0/23
Signature Algorithm: sha256WithRSAEncryption
39:58:e5:0e:64:f9:23:e2:ce:23:07:2a:b0:3d:63:50:c6:f0:
5d:b2:d0:e6:d0:af:88:54:7b:9a:26:79:21:f8:76:96:93:0b:
62:5a:cb:e4:c1:7e:a9:90:cf:f4:f4:e9:6d:e3:61:aa:85:7a:
c0:72:7c:fd:c5:d9:bd:f1:1e:00:47:0f:36:da:00:90:5b:99:
79:68:0e:4f:aa:94:5c:18:30:cb:16:22:5a:a3:3f:ef:7c:4d:
91:44:d2:cd:ae:3b:e3:ab:73:93:d0:f3:9d:58:3e:f3:f6:26:
c8:b8:77:f9:dd:40:ef:28:e1:15:4c:99:2d:d0:a5:e9:62:47:
d3:07:d7:02:2e:a6:fa:93:52:27:16:c6:eb:f3:ca:4f:77:91:
e4:56:61:09:bd:3b:6c:88:76:cf:33:27:9e:55:39:fb:97:c6:
31:a0:85:72:fe:04:c8:3c:f9:41:4d:e8:51:3b:86:65:5e:d4:
f5:08:ed:88:0a:c0:70:ae:7c:19:43:6c:da:7c:e8:e1:47:83:
fc:05:05:39:ad:c1:9c:8a:af:b9:6c:6d:ef:c5:0c:15:2d:c5:
73:f1:4e:d6:28:d1:9c:6e:da:67:88:9f:31:91:b0:12:e9:cb:
ae:ad:ca:e9:dd:36:24:a5:90:70:8c:8e:c2:28:3b:fd:0f:71:
ca:77:f7:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:52:01 2026 by rpki-client