
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34382e302f32342d3234203d3e203137373735.roa
File: 3132352e3231352e34382e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: P/OMtiX7o5Y238i3kWAexT0UIdFrJ+MbgXeLSP/qlpk=
Subject key identifier: 63:3F:69:F7:31:B5:4D:EE:18:9A:B7:ED:C0:6A:D5:27:60:B4:D3:AE
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 172B95D2166C97D6025FAF189199E29AB99F6E34
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34382e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:06:10 +0000
ROA not before: Wed 10 Jun 2026 07:01:10 +0000
ROA not after: Wed 09 Jun 2027 07:06:10 +0000
asID: 17775
IP address blocks: 125.215.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2b:95:d2:16:6c:97:d6:02:5f:af:18:91:99:e2:9a:b9:9f:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 07:01:10 2026 GMT
Not After : Jun 9 07:06:10 2027 GMT
Subject: CN=633F69F731B54DEE189AB7EDC06AD52760B4D3AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:4e:c5:77:c9:3e:1c:8c:ea:cf:69:5b:0b:
d4:08:8c:f2:85:63:3f:5c:6e:d3:cb:21:2b:c7:cb:
0c:d7:94:4c:42:a6:ca:79:1b:78:6a:94:97:5e:34:
13:d2:d4:cb:b1:53:0f:6e:d9:2f:47:fc:25:cf:6e:
cd:e2:ed:61:a9:bd:b1:fd:94:bc:6e:37:1f:5b:dc:
8b:80:34:36:c1:a7:37:4e:b5:81:b8:2a:d9:2d:29:
53:29:a0:4a:02:2a:c6:ca:0f:43:c2:e4:6d:ae:f7:
7d:16:05:59:d3:df:16:a1:60:c2:01:03:5b:a1:3e:
13:2c:84:b7:92:55:6b:cf:eb:ad:93:58:61:8d:05:
de:b1:e5:5e:b8:bc:44:d0:91:17:98:36:33:35:34:
7e:07:37:05:62:4b:d0:26:71:40:05:02:1e:73:26:
0e:97:7b:2a:f1:d9:10:cb:30:51:0f:cb:61:9d:43:
b3:64:0b:d9:66:9d:44:34:06:c6:04:2e:53:1e:cd:
da:ef:4f:50:66:e9:b0:ca:a1:fd:e0:47:cc:6b:fa:
76:ef:f5:e1:1a:95:be:f5:fe:20:76:2f:1e:c6:81:
45:8b:50:46:4e:ef:23:c2:24:77:84:55:01:fc:eb:
6c:c0:94:d2:b5:c7:74:19:fe:5f:24:bc:fa:d9:dc:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:69:F7:31:B5:4D:EE:18:9A:B7:ED:C0:6A:D5:27:60:B4:D3:AE
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e34382e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.215.48.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2c:33:f9:16:4f:02:17:83:9d:7a:57:a8:97:75:f8:17:dc:
a8:0f:aa:d2:1f:17:03:f7:11:2b:58:73:4a:db:15:cd:af:64:
99:87:ee:ee:78:31:66:54:1d:a0:44:96:f3:e7:f5:36:ef:c1:
78:d9:fd:10:b8:7d:80:19:39:c8:9d:2a:6e:ba:73:8d:5f:a3:
6d:e9:ea:01:1e:6f:8a:5d:3b:13:26:f5:88:cc:51:a0:dc:27:
40:d9:22:b0:e5:9f:f3:1b:4e:1c:50:fc:a3:8f:e5:e3:d3:1c:
7c:76:24:65:96:ed:01:49:d5:b2:e0:30:d8:22:cb:87:bb:b6:
56:47:04:7b:95:a8:68:cb:cc:eb:e6:35:fa:79:23:30:8b:6f:
d7:b1:b2:c6:d5:65:07:a6:85:fd:3f:cd:53:56:25:54:e4:f8:
b2:d1:e3:7c:dc:d3:54:ee:ee:f2:16:3e:75:7c:1a:cd:e1:73:
43:c7:21:98:87:b3:c2:5a:8c:73:26:25:22:c1:d8:e4:a7:ee:
7e:56:7a:9f:3b:d4:d4:4a:dd:6d:f4:2e:19:d7:a9:cf:fa:0f:
d8:96:97:26:61:67:51:c4:6b:69:d3:93:8e:29:42:9e:dc:f3:
02:c6:b0:47:31:3e:6a:77:74:5f:9a:02:bf:72:1a:98:d1:11:
ca:17:78:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:47 2026 by rpki-client