
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32342d3234203d3e203137373735.roa
File: 3132352e3231352e35322e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: OLSgc8WRO/ZYswtcJi991HS2DJ/UYr7+RzMtfw5WRyw=
Subject key identifier: 57:66:5F:D7:EE:C8:59:10:9B:7E:27:67:20:E2:69:42:AC:D2:B8:71
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 759991ED0A75D4C4C1035819897A928B007D17E5
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:06:42 +0000
ROA not before: Wed 10 Jun 2026 07:01:42 +0000
ROA not after: Wed 09 Jun 2027 07:06:42 +0000
asID: 17775
IP address blocks: 125.215.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 23:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:99:91:ed:0a:75:d4:c4:c1:03:58:19:89:7a:92:8b:00:7d:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 07:01:42 2026 GMT
Not After : Jun 9 07:06:42 2027 GMT
Subject: CN=57665FD7EEC859109B7E276720E26942ACD2B871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:4d:59:d7:09:84:36:3a:66:62:78:9a:de:
65:9d:91:03:f6:03:d0:fb:92:ab:48:81:d4:68:73:
a6:3c:95:8c:13:f1:d3:7c:dc:e1:10:df:1e:5b:13:
14:ed:55:b6:fd:86:1f:eb:2c:99:3e:f2:76:f0:ca:
39:42:fc:d0:52:2f:18:14:e4:83:90:0f:67:0d:7a:
9f:b4:dd:6e:52:cf:ea:62:07:d8:eb:2b:47:6c:9e:
5d:fc:c8:fe:cf:10:94:eb:61:c0:9e:83:c3:8d:93:
34:5b:52:18:20:b7:ef:a6:9d:e0:98:dc:bd:c0:b5:
4f:15:77:8f:d6:50:0f:80:46:4b:8f:e4:26:62:71:
4b:8a:8d:82:9e:f4:13:63:8f:a6:fb:d7:e5:e0:70:
c8:67:1c:32:f4:80:0f:9a:b6:11:c0:09:58:3b:ba:
a3:65:b6:b2:e6:4b:b6:21:82:ad:5f:e3:89:0a:3a:
65:cc:36:03:33:c0:81:ce:f7:a4:f2:51:39:c3:a8:
b1:44:56:a8:b3:5e:ca:13:bd:c8:28:28:5c:87:09:
34:cf:15:ec:50:1b:f4:9e:06:ce:91:7c:38:ad:5b:
df:5b:e5:25:c9:c7:e8:77:4e:41:31:a2:58:98:dc:
1c:ee:02:7a:4c:d8:70:d7:00:a9:f6:3a:bd:7c:8b:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:5F:D7:EE:C8:59:10:9B:7E:27:67:20:E2:69:42:AC:D2:B8:71
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132352e3231352e35322e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.215.52.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e7:86:57:ee:83:38:87:b1:0a:dc:46:e0:6b:76:08:05:c1:
b6:c7:c5:29:75:49:a1:a5:8c:e6:4e:5a:3c:ce:f5:90:64:45:
19:10:10:89:9b:57:69:8a:4a:96:97:72:c5:06:dd:7c:3f:c8:
fa:4a:b7:12:e8:03:95:3a:90:55:d9:71:fa:92:9e:6a:26:42:
d0:31:1a:8a:cb:ab:01:8f:1f:d0:67:0e:9c:93:90:a4:7e:4a:
9b:74:cc:e4:3d:47:6d:08:29:33:7d:70:36:fc:16:bc:dd:6c:
85:74:77:75:06:d8:fc:cd:db:28:bd:55:f8:07:5c:3d:79:0d:
8a:e6:6f:9e:55:92:89:42:27:c2:33:90:93:19:ae:c3:9b:b6:
32:4f:56:e8:28:20:03:7d:e5:56:8b:bb:6d:6e:6e:b4:7a:5f:
77:6b:6d:8b:41:a9:74:c4:ae:06:e0:20:2f:8f:7b:4d:59:bf:
f1:ec:37:2a:c1:02:fa:42:44:e6:82:92:28:94:60:83:d7:46:
93:9e:4a:3c:91:eb:bc:53:54:93:fb:c0:af:ae:56:7a:27:db:
9d:3c:25:ec:95:a3:83:fd:4d:d1:1e:1b:49:7c:a4:40:da:e6:
a2:9f:77:56:f3:37:83:fb:8d:e5:9f:48:e1:f7:14:81:34:7b:
85:42:07:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:05:51 2026 by rpki-client