
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32332d3233203d3e203137373735.roa
File: 3132352e3231352e35322e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: qahxPq5Q9PVBOKWF76MpS86wEGw6lOmYSh88KpiQ1N4=
Subject key identifier: BE:AA:57:50:9D:B4:17:13:D4:8E:1A:72:A3:96:53:BB:CE:92:29:06
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 71AB7457BCBCC128A8BBB473B19DAB04451F2601
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32332d3233203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:06:56 +0000
ROA not before: Wed 10 Jun 2026 07:01:56 +0000
ROA not after: Wed 09 Jun 2027 07:06:56 +0000
asID: 17775
IP address blocks: 125.215.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ab:74:57:bc:bc:c1:28:a8:bb:b4:73:b1:9d:ab:04:45:1f:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 07:01:56 2026 GMT
Not After : Jun 9 07:06:56 2027 GMT
Subject: CN=BEAA57509DB41713D48E1A72A39653BBCE922906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:79:85:24:9a:1e:65:da:01:36:92:76:87:
4f:c5:2b:7b:5a:a4:55:4c:31:76:66:1e:5d:3f:58:
14:8c:01:c0:ff:c9:92:b3:36:c1:23:f8:7d:f6:5c:
98:53:82:e1:30:ba:1f:3f:0a:dc:13:7d:e1:8e:2d:
73:7b:da:5f:f9:fc:8c:e3:de:b9:ba:43:7e:eb:d0:
e6:36:3f:0e:ca:2e:a6:76:55:f3:85:21:87:9c:d5:
88:b9:54:d2:ec:00:26:e6:7a:b8:ed:97:33:62:d7:
58:9d:d5:2d:0b:ea:78:3b:ed:cc:c7:98:4c:91:9b:
3f:28:41:f5:1f:43:0e:c2:8d:38:a5:6b:54:ad:42:
53:b6:6b:37:d1:cb:8c:b7:62:d6:2d:43:a5:6b:3a:
30:2b:47:f5:0f:75:c4:75:71:97:23:82:50:38:2b:
5a:2f:26:3f:c9:c5:99:ad:4f:07:25:f5:8a:3f:e9:
53:55:86:a2:cb:7a:58:28:58:eb:f6:a5:d2:cf:3d:
60:e1:1b:f3:8f:12:95:a1:1e:c7:23:5f:a0:6b:cb:
27:a8:52:ee:a7:6b:61:83:4f:3e:ec:c5:e0:16:85:
65:6d:66:6d:1a:a8:83:1e:61:cd:41:4c:36:68:f2:
3c:c1:69:a1:1d:ab:f4:54:e2:8e:79:96:9e:f1:ed:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AA:57:50:9D:B4:17:13:D4:8E:1A:72:A3:96:53:BB:CE:92:29:06
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.215.52.0/23
Signature Algorithm: sha256WithRSAEncryption
61:79:54:3b:73:88:32:7d:02:a8:5b:d7:bc:d6:d9:58:bc:53:
37:04:93:d8:54:1c:52:99:41:62:fa:a1:49:78:7d:cf:34:ec:
6b:bd:de:6a:03:fb:53:8e:38:63:b1:32:9f:d4:ee:2b:61:d2:
e4:a9:fb:85:fe:5f:3f:8c:9b:0b:ed:01:81:b9:05:2a:4e:17:
d8:bd:93:15:b8:ed:e2:01:a5:14:1b:9b:45:f7:30:1f:ba:3f:
5f:ef:53:f7:ca:ee:cc:cc:6a:15:13:6c:77:ea:97:65:d2:f1:
05:ca:cd:39:13:a1:b0:de:c5:91:8c:3b:9e:1a:17:7d:53:e1:
3b:c6:ae:19:95:7f:aa:2b:17:16:f8:7d:02:23:b1:ff:48:e8:
34:af:2e:19:87:80:2a:cb:f7:6d:b0:84:03:9e:db:bf:fb:81:
76:d0:23:04:04:37:2f:9f:48:77:18:64:93:33:0c:99:fd:34:
d5:0a:9a:0f:9f:66:08:a2:20:b9:0a:ff:b4:51:43:b4:69:07:
fd:40:80:22:ed:44:4e:73:40:80:1d:40:25:a3:3d:3a:d4:b2:
16:c8:af:5f:14:5b:13:32:14:4b:fb:bf:29:6d:85:33:04:6b:
44:ec:e4:02:37:5c:9c:c5:6c:3d:4d:96:39:dd:31:08:db:c4:
df:ae:87:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:10 2026 by rpki-client