
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34302e302f32342d3234203d3e203137373735.roa
File: 3132352e3231352e34302e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: 7nrxPThdT2QC7YYNBoVdJ6IwBazPg89BrRXOnbd0Tbg=
Subject key identifier: EA:D5:05:CD:8C:8D:68:BC:0A:D1:10:4F:D0:BA:5C:D5:44:D8:C8:7F
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 519F24892322255E7DF79EB65A2E22FFF82899EE
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34302e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:05:13 +0000
ROA not before: Wed 10 Jun 2026 07:00:13 +0000
ROA not after: Wed 09 Jun 2027 07:05:13 +0000
asID: 17775
IP address blocks: 125.215.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9f:24:89:23:22:25:5e:7d:f7:9e:b6:5a:2e:22:ff:f8:28:99:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 07:00:13 2026 GMT
Not After : Jun 9 07:05:13 2027 GMT
Subject: CN=EAD505CD8C8D68BC0AD1104FD0BA5CD544D8C87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:44:08:7d:a3:17:3e:9a:c6:20:a2:46:73:
01:c2:55:fa:fe:b9:08:37:6e:15:ca:b7:ff:47:ff:
c7:2d:47:27:fa:d5:4c:17:11:66:8d:39:26:f9:db:
ed:32:c6:43:58:ba:6c:73:1d:e9:a6:0a:b4:af:19:
b4:1f:05:6d:96:32:65:59:97:11:8d:c0:e5:69:61:
3d:66:8d:b2:0e:8e:a3:58:61:7a:a5:a2:da:03:35:
64:da:a1:76:6d:3e:d4:de:9b:1a:7d:9d:bb:6d:52:
bf:ff:90:61:4f:02:13:ed:05:38:90:37:66:3e:e5:
b7:a3:30:c0:7d:dc:ec:7b:ab:34:6b:30:51:f0:7c:
6c:4a:80:a7:cd:69:fe:54:b5:1f:61:15:32:19:36:
d5:e0:fa:b7:f1:61:23:46:3a:1e:52:0c:5c:17:5f:
17:de:01:bf:90:52:ee:ff:c3:7b:1a:8d:9e:7e:b8:
04:b1:06:b7:71:23:a1:45:22:fa:fc:a7:ce:e8:f1:
ca:aa:6b:45:a3:e7:fc:5a:90:d4:28:4d:89:a0:e8:
c4:a4:09:0e:27:39:1c:ee:f1:35:b9:0d:c5:d5:12:
40:8d:7f:76:ca:e5:06:2c:ec:76:9b:18:5f:da:7e:
7e:fa:66:46:55:04:50:5f:c5:7f:7a:f8:25:0b:39:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:05:CD:8C:8D:68:BC:0A:D1:10:4F:D0:BA:5C:D5:44:D8:C8:7F
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34302e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.215.40.0/24
Signature Algorithm: sha256WithRSAEncryption
24:61:17:24:e6:d2:29:08:91:1f:00:f3:3e:42:be:09:b0:31:
30:c7:d7:49:d6:a5:28:4c:48:72:8a:88:28:12:84:ea:d6:ed:
bf:36:c0:07:d9:69:b1:ac:1a:e9:1d:ee:f3:86:17:6d:a1:8f:
5d:12:af:22:73:b7:6c:cc:86:12:00:ef:95:7c:1b:60:7c:c3:
fe:42:f7:8c:47:31:a6:c7:3c:fb:83:f1:a9:aa:be:fd:cc:97:
62:ac:3b:60:c1:91:f0:06:88:5f:f3:f8:11:cb:68:79:bb:6a:
c9:ba:4e:60:5a:db:14:e6:c8:3d:05:b9:cc:61:6d:69:0e:61:
05:8a:53:42:55:de:f7:bd:fd:55:3f:b6:95:d7:f7:cb:0e:9a:
3f:54:31:79:96:76:a7:86:78:df:8a:21:49:cb:d0:45:73:f5:
d9:43:0c:34:a6:24:bb:b1:5e:c6:1e:8c:2e:10:7b:e0:ac:f5:
2a:7c:c9:f3:b8:76:8a:ec:73:16:77:26:8b:8f:1f:bf:ac:e9:
63:23:70:d5:bc:8d:83:f1:42:38:4d:0a:fc:1b:fc:81:73:79:
1b:9d:80:92:9f:bc:5b:a3:14:29:04:97:37:28:c0:6b:8f:21:
8a:7b:12:65:3b:0f:1d:81:e0:5a:a3:5d:97:4f:6a:84:d9:53:
94:61:1a:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:58 2026 by rpki-client