
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32342d3234203d3e203137373735.roa
File: 3231312e3134342e3130382e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: sfmaXwCJNIKQ8FE8MGrMHdE+U/tf/zJWfosXZteLFkk=
Subject key identifier: 6F:E0:90:42:38:9E:97:1A:04:92:C5:84:4C:37:8F:1A:A1:79:C5:92
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 4FBA78E8FD950793D095C045DC26D5CCDBAA92DD
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:00:09 +0000
ROA not before: Wed 10 Jun 2026 06:55:09 +0000
ROA not after: Wed 09 Jun 2027 07:00:09 +0000
asID: 17775
IP address blocks: 211.144.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 23:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ba:78:e8:fd:95:07:93:d0:95:c0:45:dc:26:d5:cc:db:aa:92:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:55:09 2026 GMT
Not After : Jun 9 07:00:09 2027 GMT
Subject: CN=6FE09042389E971A0492C5844C378F1AA179C592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:36:b7:43:15:83:21:af:57:65:de:08:19:
54:89:89:bc:9c:f2:c5:0e:1e:cf:c9:35:86:46:ff:
64:3c:4f:de:30:7e:35:fb:55:3b:91:b7:9a:b4:28:
5e:11:0e:8f:63:ad:32:3d:39:50:62:66:8e:9d:b4:
d3:10:92:19:18:34:95:01:45:cb:2b:e1:ac:ec:2c:
70:a1:47:38:2f:f5:2c:ff:8c:37:12:e1:e7:44:52:
e9:1a:45:cb:33:40:bc:7b:dc:56:6a:b0:cd:ee:04:
26:87:a1:d5:fc:53:35:2e:6c:49:f4:d6:64:3d:5e:
61:7b:50:33:d9:3f:83:a0:38:5a:e5:99:24:2c:8d:
d5:c8:72:8b:49:a1:4d:55:6a:b3:9a:d7:b1:a4:d2:
c3:90:c6:1b:10:df:62:82:d5:99:ce:09:63:3e:cf:
6b:88:44:b6:18:88:8f:7c:97:e3:c5:57:ee:99:ac:
fa:38:d2:bc:32:19:b3:e6:ac:ab:3e:95:95:1a:bd:
91:d4:36:56:70:c4:da:0f:71:25:ed:e7:42:dd:85:
d7:65:b0:e6:19:32:eb:5c:47:8d:6c:06:57:4c:bd:
5c:5a:7e:ab:10:18:1c:92:f8:bc:bc:5f:99:cb:77:
bd:b5:19:6b:01:58:8c:85:3a:fe:d3:7a:03:fa:cf:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:90:42:38:9E:97:1A:04:92:C5:84:4C:37:8F:1A:A1:79:C5:92
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130382e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.108.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b3:fb:b1:1c:f3:0e:cf:61:de:c5:3b:ef:bc:a3:bb:70:bf:
0e:be:5a:25:30:1c:df:48:c2:79:77:db:48:35:1c:26:77:9f:
36:22:22:39:57:ac:29:7a:78:83:b2:e1:1c:df:e3:78:cf:4f:
73:83:3b:cb:c6:d1:e0:97:f9:ee:7a:e0:0b:33:16:98:11:eb:
a4:88:80:0b:6d:f6:6f:a7:ed:c8:c9:20:9b:8c:ee:5d:ef:a7:
c4:30:3c:e2:f7:49:43:ff:1c:87:7b:e5:f3:5d:1a:9d:36:a7:
f6:bd:14:dd:48:f9:40:b7:28:5e:7e:2b:bc:f7:98:8b:a4:71:
b4:94:36:4b:c4:16:56:60:c6:34:5c:dd:a4:66:d5:dc:65:88:
db:03:2e:ca:a0:5d:ac:76:87:1a:73:4e:8d:f8:b7:ff:8f:84:
23:f8:dc:9e:92:30:c2:10:0a:61:d8:9e:54:52:fb:18:27:e8:
d7:2b:80:f8:6c:9c:19:3b:36:af:d4:99:ff:ec:17:48:e5:a5:
2e:f2:83:99:b9:c2:a9:2d:c8:74:26:de:78:f6:03:10:5e:fc:
b8:aa:e1:88:9b:2e:e5:3b:e3:22:6c:4b:71:fc:7d:b6:1f:0e:
4b:1a:37:73:c0:2d:25:9a:a4:3b:5d:5c:53:bd:f8:21:7e:11:
e5:f0:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:06:28 2026 by rpki-client