
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa
File: 3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier: sm+qf/Sr55bjXxOheFJSGgmtihhEPKNQdVBGrfZjOqg=
Subject key identifier: 00:E0:05:36:C2:11:E0:63:1B:89:FA:20:45:79:19:14:5C:A1:83:CF
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 586D04A710A972638406E81421001CDDFFB44B95
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 06:59:35 +0000
ROA not before: Wed 10 Jun 2026 06:54:35 +0000
ROA not after: Wed 09 Jun 2027 06:59:35 +0000
asID: 17775
IP address blocks: 211.144.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6d:04:a7:10:a9:72:63:84:06:e8:14:21:00:1c:dd:ff:b4:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:54:35 2026 GMT
Not After : Jun 9 06:59:35 2027 GMT
Subject: CN=00E00536C211E0631B89FA20457919145CA183CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:0f:b5:8d:7e:d1:c7:0a:d5:21:6b:19:98:
12:a5:33:71:7a:bc:72:2b:b6:80:2b:9d:2a:3d:c0:
88:63:ff:c5:a9:a7:0c:4f:d6:0c:bb:c7:3e:52:f7:
ea:20:08:11:ac:7e:c5:aa:10:6f:0a:4a:7b:71:69:
09:8d:03:bd:cf:09:4a:22:41:49:73:7a:0a:91:e0:
e7:95:85:e0:1c:75:fc:8a:5d:92:67:41:1d:8e:d2:
6f:36:e4:a5:13:53:9b:ce:41:fc:54:d8:08:5e:39:
6f:fd:76:f7:67:11:26:f4:b5:4d:74:5f:ac:9d:b9:
00:8c:3c:bc:3f:bb:50:04:f0:9c:a9:4b:ea:83:51:
f7:53:15:ab:41:74:9a:6b:38:df:62:5a:1c:b9:25:
f4:a5:df:6b:07:2c:bf:27:4e:02:c1:e3:a5:52:ca:
c5:99:90:ce:67:f6:62:da:bd:ce:a8:46:89:18:94:
4e:e5:d2:ae:97:05:4b:cf:ca:20:95:5a:01:c6:61:
4a:13:e9:01:9b:37:c9:bb:92:7e:fc:1f:45:41:dc:
81:e0:03:32:57:f0:1b:47:ef:be:0e:89:b1:40:1d:
f1:57:b7:a6:08:7c:38:cb:54:20:87:2f:99:b0:7e:
98:d8:d3:00:79:bc:fa:ff:87:a4:44:4a:2b:f4:bb:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E0:05:36:C2:11:E0:63:1B:89:FA:20:45:79:19:14:5C:A1:83:CF
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32322d3232203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:1e:67:9e:e7:4f:8c:5c:1a:a6:b1:68:77:48:e2:32:05:41:
39:4d:1c:49:c9:7b:ee:99:00:c5:8b:4d:0b:05:68:55:d2:57:
43:fc:e3:16:fe:12:23:1d:6c:9d:98:7d:5e:df:a3:61:8b:4a:
a6:9b:c6:b0:06:f8:d2:9c:fe:b5:c7:e2:af:4e:c3:01:57:ed:
25:22:30:27:6e:79:f9:10:7e:e8:ca:3a:1a:6b:e7:ea:aa:5f:
79:67:6d:0e:f5:49:75:79:db:ba:36:cd:00:87:06:06:64:b5:
30:b1:ae:46:38:a2:48:6b:ca:68:01:58:71:85:25:ca:95:e3:
13:97:fa:0a:96:7c:bf:7d:d5:6a:25:ff:66:2f:d2:91:1c:b1:
3f:c2:03:7f:41:73:ff:35:93:ed:6a:c1:8f:0b:f4:aa:d1:55:
6f:c4:9b:de:80:66:be:aa:c8:09:2c:7c:b0:d6:22:88:87:40:
a9:45:e8:62:10:5e:f9:a5:fa:ba:8c:01:67:07:eb:9f:b3:21:
09:89:91:2d:60:c0:d3:3a:3d:cd:9a:fa:ae:9a:07:b3:b1:4d:
fd:49:a4:4b:2a:9f:fd:7e:e3:49:96:41:6e:d6:90:a5:56:e8:
88:d1:d3:3a:4a:0f:4c:5f:34:a8:4e:95:53:88:55:b2:6b:82:
6f:a7:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:53 2026 by rpki-client