
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130302e302f32322d3232203d3e203137373735.roa
File: 3231312e3134342e3130302e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier: Ie+hb5AoUpvVjjgoB3vmoyU8q0AVxOD9G5r+WWmTJFE=
Subject key identifier: 8A:95:D5:CF:ED:99:E0:57:4F:8F:2E:EC:5C:B9:8C:ED:DD:1F:A3:9B
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 0146E953C6D205A743ECB1E3CCD5993EED807B0D
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130302e302f32322d3232203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 06:58:48 +0000
ROA not before: Wed 10 Jun 2026 06:53:48 +0000
ROA not after: Wed 09 Jun 2027 06:58:48 +0000
asID: 17775
IP address blocks: 211.144.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:46:e9:53:c6:d2:05:a7:43:ec:b1:e3:cc:d5:99:3e:ed:80:7b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:53:48 2026 GMT
Not After : Jun 9 06:58:48 2027 GMT
Subject: CN=8A95D5CFED99E0574F8F2EEC5CB98CEDDD1FA39B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:c3:85:86:9c:47:9a:21:96:fa:ec:38:bc:
6e:c8:79:67:0d:7d:0a:e7:ef:a2:34:46:22:14:71:
93:d5:3e:5b:06:79:94:c1:67:51:17:96:11:5e:e5:
2e:0c:41:3c:6d:9a:c7:32:e1:51:c2:a1:c8:a2:d4:
de:67:ae:d5:d4:89:ef:49:e6:ce:d2:4c:a8:01:39:
19:6e:b9:f1:e2:fe:24:0a:ae:17:c4:8f:4b:e3:36:
61:fc:6b:a0:8e:a1:d0:62:3b:9c:47:67:82:bc:19:
d7:bb:8c:20:e3:81:26:12:f2:38:61:4c:b9:b9:bc:
2e:9e:aa:1d:c9:0b:ec:94:20:e5:9c:53:5d:f2:bc:
7f:f9:54:1b:77:a8:bd:e0:26:c7:79:2b:eb:95:b5:
1b:f7:0f:5c:83:e2:1d:c6:08:c5:47:77:be:f7:f0:
e7:55:90:24:7c:d7:aa:cf:8c:41:2a:57:1a:bb:5e:
66:90:f5:f8:f5:da:f9:53:59:1a:ac:34:f3:75:d0:
3a:b4:d3:23:40:93:d0:c0:75:d8:ea:2a:40:d9:ff:
7d:9c:6c:9c:79:54:7d:1f:a2:f8:3a:bd:b8:c7:61:
15:50:9b:c6:2b:bc:c5:47:c7:b2:16:1f:79:3d:04:
a8:4c:b3:74:f0:c3:bf:ac:8d:8e:23:63:1f:f2:b4:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:D5:CF:ED:99:E0:57:4F:8F:2E:EC:5C:B9:8C:ED:DD:1F:A3:9B
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130302e302f32322d3232203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.100.0/22
Signature Algorithm: sha256WithRSAEncryption
14:9e:b7:be:3e:68:fb:68:be:40:11:85:22:66:2f:02:24:9e:
77:5c:e8:6e:e4:ba:78:64:39:b2:51:d4:ab:60:4d:62:6f:3c:
ce:d4:46:f4:f8:56:d4:a0:82:9b:eb:b6:b0:b4:25:74:51:bc:
6b:42:39:20:25:c9:54:d1:59:c9:86:6f:a4:52:a4:ff:a5:58:
4a:7f:54:d2:bb:1e:6a:73:b1:d1:60:c6:0c:0c:32:52:7f:44:
6b:bc:3b:97:af:51:8f:aa:04:15:ae:da:f5:cd:a7:cc:7e:34:
01:7c:27:ca:c1:6b:ac:e7:08:55:fb:65:bd:a0:60:b5:2e:0f:
39:0b:33:9a:a1:84:c5:37:a6:13:8f:1c:ae:58:b2:cd:19:7c:
91:9a:8e:37:68:de:bb:24:99:c1:50:f8:cb:e1:f3:5b:08:73:
8a:d5:48:6e:37:e4:b1:92:bf:ce:6d:49:dc:e3:9b:cd:14:99:
81:6b:d6:0c:9c:a6:30:d3:b3:e2:6c:8b:ec:04:72:9f:5d:16:
62:7f:87:38:be:ad:79:85:63:21:2d:29:a2:bb:a7:38:17:10:
ff:d5:40:69:93:66:ee:95:8f:0a:18:df:06:91:24:b6:ad:8e:
73:ad:91:73:19:af:00:5c:24:16:45:64:fa:71:eb:c9:aa:bf:
75:41:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:51 2026 by rpki-client