
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33372e302f32342d3234203d3e203137373735.roa
File: 3132352e3231352e33372e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: SMs8eVcYfXmZBnDRs7ScW2qudTPsMoaomg+p/qMEHNs=
Subject key identifier: FF:AB:0C:32:B2:3C:54:C4:B9:1E:3A:4D:0B:50:1C:3F:ED:23:5F:C7
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 4A7A58CA246B9706C4ABBBBAB0291E466F1AD1D7
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33372e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:04:44 +0000
ROA not before: Wed 10 Jun 2026 06:59:44 +0000
ROA not after: Wed 09 Jun 2027 07:04:44 +0000
asID: 17775
IP address blocks: 125.215.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7a:58:ca:24:6b:97:06:c4:ab:bb:ba:b0:29:1e:46:6f:1a:d1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:59:44 2026 GMT
Not After : Jun 9 07:04:44 2027 GMT
Subject: CN=FFAB0C32B23C54C4B91E3A4D0B501C3FED235FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:3d:e8:29:d7:3e:41:c3:04:9c:8e:68:f2:
f9:59:bb:84:88:f5:b6:f0:d4:49:5a:d2:f6:e6:90:
f0:8a:37:e8:51:7c:22:e6:4c:5f:9b:9d:28:81:18:
43:0a:6b:1b:99:47:d0:1c:75:d9:d1:0f:f6:dc:c8:
d0:b3:9e:a6:7c:65:1b:f0:13:db:3f:23:9d:52:2e:
3d:01:f5:65:94:ee:41:b0:cd:03:f5:48:d7:45:08:
da:01:bf:a7:d6:4d:7b:bc:bb:05:43:3e:5f:1c:ea:
a3:f0:44:4c:08:af:80:2b:bf:0a:64:35:d7:13:8f:
b0:8d:ff:48:bf:b2:75:ba:d7:40:fc:a0:76:02:13:
71:1b:57:99:50:2d:86:98:68:32:ce:ab:59:0a:f7:
e8:71:3d:77:12:00:44:f6:21:a0:8d:6e:d3:0c:99:
99:73:52:af:27:0e:d6:3a:77:cb:92:3b:e8:da:44:
88:dd:3e:53:28:2d:76:f7:b2:f5:a4:df:a9:4b:35:
17:87:75:73:cc:90:b9:b8:f2:11:05:ec:9e:a5:e7:
7d:de:d5:b6:d4:94:2a:b0:cd:d0:68:9a:62:8d:13:
a2:84:4c:d4:80:73:51:09:a2:65:52:69:f8:53:ea:
e0:6b:91:30:47:4a:46:86:58:a1:55:91:a4:63:5a:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:0C:32:B2:3C:54:C4:B9:1E:3A:4D:0B:50:1C:3F:ED:23:5F:C7
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e33372e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.215.37.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e1:0b:68:a9:84:04:ac:06:c3:e9:bd:68:2d:d5:5d:80:53:
6b:47:d7:f9:43:b2:c3:b6:2d:bb:eb:00:b0:c4:0e:f0:c8:61:
55:14:aa:87:2b:fa:5a:2a:74:a1:57:4a:c7:35:1b:40:73:fe:
65:86:30:98:db:d9:c2:ec:bf:57:ef:c1:74:96:4c:94:bb:2a:
dd:fe:3c:20:7b:85:04:e5:45:85:83:ad:a8:69:02:b8:66:c5:
1f:f6:1f:51:76:9e:97:57:13:a1:0f:8a:54:19:4b:20:f0:66:
18:b8:c7:08:d8:8b:63:69:8b:fc:69:f6:0a:90:85:00:7e:ee:
54:d5:a3:d8:ac:40:ae:6b:e1:18:1d:19:2f:fe:2f:47:e1:40:
e2:45:d3:8b:9a:6b:0d:45:c1:f4:a7:a5:d7:35:2d:f2:14:ea:
96:ae:75:df:c8:29:9e:f4:65:65:85:ae:59:4f:ab:cd:9f:7a:
fb:57:3f:a0:ad:d6:8b:e1:97:ea:0b:c9:5c:76:74:f5:45:df:
78:a6:46:3f:85:7e:6e:6e:a8:09:ce:35:32:1d:9d:21:f8:82:
e4:41:9f:e6:c1:0a:75:1e:97:e4:2a:ec:e5:64:1b:8a:fb:f2:
22:0e:cc:15:d2:0d:1f:ee:9b:f5:77:d4:7a:93:d8:3c:56:40:
18:78:23:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:07 2026 by rpki-client