
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e302e302f32332d3233203d3e203137373735.roa
File: 3230332e39352e302e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: 2IEQXDtO8gLNMVz3qPZmtzRgh9V4IkjQWxPIOLaGZCg=
Subject key identifier: 5A:61:1F:6A:17:AB:99:58:B2:71:F9:40:42:AD:5A:C6:C8:FF:F1:15
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 360E8FB3D083E893B35C0F8A740DE4657E4C6DD7
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e302e302f32332d3233203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:07:54 +0000
ROA not before: Wed 10 Jun 2026 07:02:54 +0000
ROA not after: Wed 09 Jun 2027 07:07:54 +0000
asID: 17775
IP address blocks: 203.95.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0e:8f:b3:d0:83:e8:93:b3:5c:0f:8a:74:0d:e4:65:7e:4c:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 07:02:54 2026 GMT
Not After : Jun 9 07:07:54 2027 GMT
Subject: CN=5A611F6A17AB9958B271F94042AD5AC6C8FFF115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:49:9d:f2:02:65:df:33:2a:6e:37:08:d9:
33:4b:5d:95:ca:eb:ac:f4:96:ba:1d:70:7b:39:7a:
a4:87:d9:84:ac:cc:d5:b3:7a:95:ed:77:1b:a5:69:
df:8b:95:90:ed:6a:99:1e:79:57:26:b7:ab:ea:66:
5b:50:85:7b:88:de:38:4a:77:65:f1:a3:dc:0d:29:
22:9d:11:89:56:f8:19:34:a6:fe:f3:94:59:18:df:
62:53:ee:98:e3:cf:1b:1b:60:d6:b2:2f:82:26:97:
c2:85:42:dc:7a:b4:10:ce:e0:f5:ad:8a:71:70:2f:
9f:24:db:4d:eb:60:26:02:87:79:35:c8:5d:a8:81:
82:19:e5:8a:d3:16:72:8f:03:e0:54:5a:91:a6:d0:
92:84:92:a1:f8:4c:f6:b7:15:2c:09:42:ed:f1:1d:
6f:ac:48:16:43:63:d7:e6:f5:ff:bd:56:d8:3c:4b:
c6:d8:c5:e1:f8:b7:81:fc:d6:75:d3:a5:e1:d5:3c:
ca:b3:25:35:59:f5:c9:96:ad:eb:97:6b:f8:f3:5e:
a0:0e:15:8b:96:c3:42:22:eb:ff:7d:9e:f0:64:ce:
9e:f3:ae:4f:3c:86:09:f6:d8:21:cc:0d:8d:54:8b:
2f:77:49:f8:64:60:75:10:82:d8:18:86:04:fc:c8:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:1F:6A:17:AB:99:58:B2:71:F9:40:42:AD:5A:C6:C8:FF:F1:15
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e302e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.95.0.0/23
Signature Algorithm: sha256WithRSAEncryption
23:44:91:73:6c:ac:78:7e:4f:b7:69:cb:5d:7d:dc:96:51:53:
a6:f5:5e:e0:2e:31:55:11:db:ef:63:c1:12:42:96:b6:f8:b2:
c9:2f:6c:d4:b0:3a:ff:71:97:b5:28:9f:f2:c1:76:b3:4b:24:
a6:da:c5:61:ff:78:80:ec:25:88:8e:11:57:f8:10:24:19:6b:
0e:c1:00:37:2d:a1:b2:b0:f3:3d:c4:f4:6b:a9:8b:94:f2:ed:
28:28:08:c9:8a:ba:e9:4f:fd:47:66:a4:32:50:30:da:b7:66:
b0:38:3e:6d:e4:25:dd:f8:c4:97:7f:3f:f2:42:f9:58:ad:3d:
9b:c7:f9:f8:15:ea:c1:9b:81:7d:2b:81:82:51:bf:4d:84:b3:
5c:a7:a9:59:4f:24:a1:d2:00:40:e7:d6:dd:1c:e6:23:6e:3e:
6f:9c:eb:0b:63:49:47:4e:ee:2d:99:04:76:d1:31:4a:5e:48:
ed:ba:35:b8:5d:00:45:a0:fd:f4:4d:9e:f0:4b:e0:ae:78:99:
47:70:77:f9:9e:82:46:fc:f7:e9:5e:56:75:84:84:6d:c7:cc:
e7:ff:ff:42:5a:35:ba:1d:96:70:33:0a:9a:a8:6c:24:61:93:
80:18:f6:bc:fd:3f:e3:06:58:82:5a:53:50:24:49:cc:de:f0:
0f:42:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:02 2026 by rpki-client