
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e38342e302f32342d3234203d3e203137373735.roa
File: 3231302e31342e38342e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: zoBmxsTK3+lJzXU+bbsDveWxQSMSJ8/kvSm16HNT22o=
Subject key identifier: C0:4B:6A:97:9F:1F:6D:F9:34:ED:C5:62:75:13:73:CD:FA:81:7C:23
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 65925900DE73898A135DE23A6BBD07FFA45CBEB8
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e38342e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 06:53:25 +0000
ROA not before: Wed 10 Jun 2026 06:48:25 +0000
ROA not after: Wed 09 Jun 2027 06:53:25 +0000
asID: 17775
IP address blocks: 210.14.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:92:59:00:de:73:89:8a:13:5d:e2:3a:6b:bd:07:ff:a4:5c:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:48:25 2026 GMT
Not After : Jun 9 06:53:25 2027 GMT
Subject: CN=C04B6A979F1F6DF934EDC562751373CDFA817C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:83:9a:8f:c8:5a:d5:32:16:1b:5e:cf:00:
7b:ec:eb:48:2b:b1:f3:42:65:4e:74:cb:5f:a3:8a:
9b:80:5a:d3:ea:e0:a0:38:5c:a5:4f:82:6d:7d:1b:
ca:8f:8e:73:a0:4d:d0:29:d9:65:a4:d1:a9:df:ed:
4b:b8:0d:59:4b:61:44:a9:1d:fe:3b:2e:c9:a7:14:
8b:65:5e:b6:e2:62:6f:21:0c:43:c4:bd:d1:40:50:
e3:99:67:c2:6c:91:84:68:41:21:cc:c6:08:b7:3c:
18:59:b0:92:4a:b4:df:97:0e:f2:a1:4b:39:c7:54:
0e:3b:24:f7:ae:92:7f:be:f4:54:85:37:36:f4:0a:
ce:81:ca:fe:ef:f4:fc:45:f6:b6:7c:b8:82:7a:ea:
a9:7f:41:2d:e5:c1:53:f9:d1:fb:f2:0c:9b:64:db:
a7:5f:8a:c3:08:2f:6f:d9:f2:cb:b4:6d:36:8a:b7:
13:16:8f:e5:95:4e:6e:97:72:f9:d7:3c:d2:3e:f9:
05:7a:06:91:50:f2:cc:eb:90:57:05:a2:51:92:f5:
02:72:46:85:bc:96:86:9a:87:8a:ec:e2:6b:f4:ce:
47:65:5f:cc:8e:25:92:78:fd:48:07:38:f3:4e:92:
5b:c1:d0:11:c6:a7:a6:1e:b2:17:07:8c:47:4c:68:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4B:6A:97:9F:1F:6D:F9:34:ED:C5:62:75:13:73:CD:FA:81:7C:23
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e38342e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.14.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:89:fa:88:f8:4b:5f:fe:38:c5:5b:79:7e:b6:60:3d:d2:bb:
2d:51:b5:f8:88:84:00:89:45:89:61:c2:a9:fd:a6:d5:1e:62:
a8:ab:54:c1:42:c8:ae:eb:f4:8f:ee:3c:4f:f9:37:71:f8:05:
ff:bc:5c:04:e7:7c:ae:00:dd:95:30:1c:d8:0b:4d:ce:93:b1:
72:be:ee:06:20:a4:5b:7a:9b:fb:4a:d4:1c:8c:e2:36:e7:b1:
ea:c7:e3:79:a3:cf:cb:bd:61:3f:99:3c:a4:43:e1:72:fa:2e:
98:f4:50:07:70:a3:e0:f1:74:f9:d6:11:db:40:13:35:4d:c7:
e8:75:5a:0d:1b:7b:9e:e6:a5:a9:7e:f6:82:dd:2d:8a:bb:11:
fb:90:d2:a2:13:74:fd:68:43:c1:15:f4:1f:f0:76:74:c2:2b:
3c:d1:1b:b2:38:52:11:91:a7:c7:a7:93:5e:0a:9f:68:f9:bc:
03:21:a1:8f:0e:41:05:91:25:35:dc:01:07:1d:c7:42:0f:d7:
50:cb:3e:86:af:88:92:85:65:39:c2:0c:f9:ca:17:87:86:34:
23:28:22:b3:a0:7f:a7:e1:fa:80:cf:ff:49:e6:71:a1:55:de:
6c:0e:80:46:b4:12:7e:5e:8b:42:8e:eb:7c:fd:60:6d:86:a1:
45:cb:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:02 2026 by rpki-client