
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa
File: 3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: qiAQ1PNZcDmxTdTdg7L6tMzjMscAo/AFT5JaRMeK5qA=
Subject key identifier: 9B:48:1B:2C:07:62:D7:6B:70:87:06:56:EC:58:9D:CA:CA:F7:A9:47
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 2DF28B84C66B8AD1B152D2CF2537A1CC3B9942B4
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:00:57 +0000
ROA not before: Wed 10 Jun 2026 06:55:57 +0000
ROA not after: Wed 09 Jun 2027 07:00:57 +0000
asID: 17775
IP address blocks: 211.144.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f2:8b:84:c6:6b:8a:d1:b1:52:d2:cf:25:37:a1:cc:3b:99:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:55:57 2026 GMT
Not After : Jun 9 07:00:57 2027 GMT
Subject: CN=9B481B2C0762D76B70870656EC589DCACAF7A947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:99:d0:48:57:0a:40:db:5f:94:6e:e0:f5:
3b:d3:9d:1d:51:c0:a6:5a:ce:90:e2:09:24:db:d0:
21:3f:b3:68:56:6a:af:73:d4:d9:80:a7:e3:21:7c:
5c:87:b8:1a:d1:ba:f1:33:df:8e:cc:9c:36:bc:2e:
63:3d:db:e8:20:1f:0f:da:4a:86:a7:0c:58:01:e4:
6f:a3:cf:4d:10:6b:3a:a1:9e:d9:c5:9e:2a:ed:ed:
2e:71:20:6a:9b:66:c9:5c:9e:f0:fc:97:2e:21:94:
58:63:83:47:91:a2:46:b8:5a:86:a9:ca:51:25:a3:
e3:fa:c6:7f:e6:f3:e8:26:22:22:7d:96:22:66:65:
98:c3:f8:cd:a1:ad:44:40:8d:5e:40:d8:92:9a:d6:
3d:81:9c:7c:36:ff:e5:43:22:c1:75:bb:82:62:e7:
da:0a:03:c9:43:3c:26:12:dd:8a:53:41:4c:2a:bb:
5f:86:3d:19:d9:de:43:67:0c:41:81:8a:92:af:c9:
0c:0b:1e:30:31:62:b2:b1:ed:c9:d4:61:34:57:ec:
77:76:f3:12:e0:21:dd:c6:ce:fa:fe:b3:5e:37:29:
4f:e6:cb:c8:04:e4:83:5a:72:24:c7:61:44:13:41:
aa:cc:2d:e7:75:c9:82:e7:9d:73:29:69:45:db:b2:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:1B:2C:07:62:D7:6B:70:87:06:56:EC:58:9D:CA:CA:F7:A9:47
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.108.0/23
Signature Algorithm: sha256WithRSAEncryption
56:60:ea:c7:9a:3a:d3:83:6a:99:68:11:e7:56:b9:16:59:cd:
70:d9:8c:c3:53:3d:30:f4:ff:1f:f4:d8:c3:5e:fd:c4:19:c4:
9f:fb:67:0c:27:16:04:c0:9e:bb:e7:f6:d4:2c:d7:82:bc:05:
c9:02:4b:37:b3:43:13:30:7b:db:0d:bf:8e:4b:66:98:5e:36:
24:2e:79:a6:a8:47:d3:f5:41:db:0a:ba:cb:2b:a2:58:f3:32:
64:8c:e6:7a:59:00:b6:74:0d:66:90:2c:52:bb:72:3c:55:96:
39:27:23:34:6d:e6:1b:c0:03:5e:96:f0:21:67:26:e6:d4:88:
55:cf:90:08:32:43:22:0e:c4:a7:72:6b:24:cc:44:bd:05:51:
48:9c:f2:e6:23:d4:67:73:f5:ee:77:79:97:42:ec:75:70:ad:
7f:f6:4d:6c:d3:a1:1e:4f:b1:b8:af:76:63:a1:07:7b:9b:a8:
91:26:08:aa:de:36:9a:1b:c1:90:da:4e:d6:5f:57:81:14:b2:
4b:ae:eb:df:92:85:9f:f8:42:ae:33:d9:77:a7:5e:c7:f8:e7:
fe:a1:de:7b:76:0e:17:85:81:6e:f8:88:b1:0c:4d:ea:6b:70:
68:80:5a:2e:4e:a7:90:96:76:e2:51:65:e3:78:f5:f0:d4:16:
e7:7a:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:07 2026 by rpki-client