
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32332d3233203d3e203137373735.roa
File: 3231312e3134342e3130342e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: 7CbS/huFGCcvtHCYauoyhFo7upjcMy6u1vmx+ghaph8=
Subject key identifier: A7:75:D6:49:E2:C5:68:BE:3F:C3:15:4A:C2:37:62:47:C4:47:27:EE
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 61D3A3A606DE9A5426C7B86A18FD90EBF4A5FFA8
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32332d3233203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 06:59:12 +0000
ROA not before: Wed 10 Jun 2026 06:54:12 +0000
ROA not after: Wed 09 Jun 2027 06:59:12 +0000
asID: 17775
IP address blocks: 211.144.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d3:a3:a6:06:de:9a:54:26:c7:b8:6a:18:fd:90:eb:f4:a5:ff:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:54:12 2026 GMT
Not After : Jun 9 06:59:12 2027 GMT
Subject: CN=A775D649E2C568BE3FC3154AC2376247C44727EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:ce:c5:ae:b8:1b:8d:7b:63:dd:50:2f:69:
b0:09:cf:39:5a:7e:ea:ed:18:15:bd:b1:d4:91:71:
db:b3:45:ca:68:02:37:d1:20:9d:6b:4b:26:f9:5e:
64:b4:37:ae:3a:a5:75:56:0b:6e:0f:c5:22:8e:29:
b3:fd:f9:08:9f:5c:d7:3b:4b:05:44:9e:77:da:5b:
dd:f3:63:0e:90:30:86:18:99:6b:7b:af:08:56:4c:
76:91:e1:cf:ed:99:65:68:91:e5:79:4c:2d:d9:13:
f8:cc:03:b6:de:30:ed:ae:a1:c5:f7:63:38:4d:99:
3e:ea:fe:d7:c7:93:39:f6:72:6e:00:ab:6d:c6:c2:
79:c5:16:96:2a:0e:fd:7f:57:89:81:d8:aa:cb:45:
48:2f:d1:fd:b4:17:d8:6b:a8:79:2b:b2:a1:df:8b:
88:7e:fb:ef:3b:65:07:53:8e:2f:59:bb:41:cd:76:
23:39:db:9e:93:ed:82:ee:7e:42:6c:e9:d3:d6:4b:
8f:0f:b2:28:1f:b2:46:b9:e1:87:5a:35:df:d6:49:
84:ec:96:4e:ab:ad:26:35:64:a5:4e:6e:56:b0:06:
0c:6d:ab:a2:53:4c:0e:31:b4:5d:57:81:8b:10:38:
bd:e7:94:4d:c0:6f:1d:96:57:a8:d0:f4:cb:7b:da:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:D6:49:E2:C5:68:BE:3F:C3:15:4A:C2:37:62:47:C4:47:27:EE
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130342e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:9b:b5:88:b3:35:90:40:63:25:03:c9:46:66:84:79:d2:bf:
b9:58:29:8f:34:18:00:45:88:c4:14:94:e0:07:42:04:35:19:
9f:a8:e7:a8:b2:63:7a:1b:58:1f:47:66:9d:59:d0:88:52:80:
3e:9f:d3:48:47:06:f8:82:09:8d:70:3d:b8:4e:fc:48:c8:0b:
b1:7c:79:43:55:c4:b6:79:bf:f3:14:0d:30:76:c7:fa:9a:a7:
b8:2e:45:3f:af:9b:28:d9:4e:45:dd:ca:fd:43:94:8f:4e:c7:
49:92:15:05:fa:a6:7d:14:4c:eb:f1:45:c1:4d:18:e3:c4:d3:
84:15:dd:47:80:3b:40:c5:a8:6e:0f:3f:4c:99:99:1f:80:26:
e0:d0:b7:e1:3c:22:53:22:f7:12:44:22:16:6f:4f:0d:aa:70:
ec:72:6b:5d:10:75:45:6f:36:02:a1:4c:24:e1:58:0b:61:da:
f5:79:cc:11:39:8d:c4:85:1c:04:62:13:a4:39:ba:ff:c0:ba:
78:37:1b:58:92:5a:47:51:1d:12:a6:b1:24:ea:4e:d9:e1:dd:
f8:c7:41:a4:9b:70:8b:22:7f:0b:b2:ad:09:65:2b:81:89:b6:
db:0a:dd:ec:1a:c6:59:bd:00:d5:bf:6c:eb:7f:de:c4:6f:12:
84:99:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:11 2026 by rpki-client