
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa
File: 3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: Uv4XcgOZCRFkd+N/8Ej39F6bXxovW7c7BY0XAYGUrI4=
Subject key identifier: B3:66:C7:F2:45:1F:0C:26:CD:59:55:2C:01:27:5C:27:C7:8F:C2:DC
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 3C2F4A58806B18306043ECE77859E56FA72C40D9
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:02:31 +0000
ROA not before: Wed 10 Jun 2026 06:57:31 +0000
ROA not after: Wed 09 Jun 2027 07:02:31 +0000
asID: 17775
IP address blocks: 211.144.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2f:4a:58:80:6b:18:30:60:43:ec:e7:78:59:e5:6f:a7:2c:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:57:31 2026 GMT
Not After : Jun 9 07:02:31 2027 GMT
Subject: CN=B366C7F2451F0C26CD59552C01275C27C78FC2DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:c4:0a:f9:fe:79:3e:61:42:00:2a:f0:e0:
38:cd:07:dc:64:2c:d3:55:5d:e2:c4:4a:ab:d9:f1:
d7:b4:51:b7:56:01:d0:68:a8:a8:de:b2:b4:5c:0d:
9f:c4:a9:22:cb:57:9d:99:48:e5:4e:af:e9:8e:37:
bd:c8:5d:46:03:aa:f3:c6:2c:4b:06:30:82:fc:15:
03:d9:19:44:d3:ed:d8:54:87:92:2f:5c:58:68:b4:
d6:02:32:ec:54:86:2d:75:49:10:b3:24:11:31:60:
a6:72:a3:cb:6b:b9:73:09:78:ea:d4:d9:10:ce:de:
ae:52:05:7e:7a:75:54:75:d0:1d:a5:eb:dc:2f:d0:
35:0a:f6:34:b0:59:8a:88:af:98:4d:ac:d9:d0:19:
ba:a7:59:71:af:05:45:f2:eb:9c:3a:77:e8:2b:76:
99:b1:3d:8e:02:fb:6b:e3:57:51:08:a3:b0:a2:1f:
2d:55:60:14:0e:46:08:ad:95:c9:97:b7:38:91:9d:
cc:cf:46:ef:55:0c:64:24:f6:83:18:b3:c0:05:b9:
99:05:fc:ba:9f:4d:c6:dc:2d:a7:85:34:4a:64:cb:
10:5a:c2:dd:5b:57:fd:a6:c8:fc:e6:75:fd:4c:ad:
a1:23:8d:1b:21:bb:5c:06:82:36:07:db:3a:f2:97:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:66:C7:F2:45:1F:0C:26:CD:59:55:2C:01:27:5C:27:C7:8F:C2:DC
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.114.0/23
Signature Algorithm: sha256WithRSAEncryption
37:62:6e:a1:e7:86:76:65:90:56:e5:dd:25:59:56:85:2f:90:
3f:94:37:7e:4d:50:1c:41:29:12:65:b5:b4:f3:37:98:b7:e9:
a9:52:18:cc:c2:42:d9:91:ff:8a:93:e8:52:5f:ec:cd:53:70:
ad:7b:52:78:d5:38:a7:37:d3:ff:4c:5b:b4:c2:2c:78:15:50:
e5:b6:a0:d2:d6:a6:e7:51:ee:33:b0:a0:fa:24:79:02:c1:44:
4d:3a:8c:9c:53:83:12:c9:08:f4:8e:67:6a:38:29:42:13:d1:
f6:2e:ee:1d:39:83:fa:63:89:8b:21:b7:b8:fe:70:8e:bd:7a:
fe:c4:8c:35:4e:95:d3:9d:d7:60:9f:ae:42:58:c2:82:36:05:
29:cc:31:74:46:22:ad:99:d4:61:f1:67:28:e5:94:13:02:12:
e8:25:27:94:b5:05:27:52:1d:fc:87:f2:59:f9:9b:93:78:78:
a0:88:36:3e:c0:ad:6b:11:d1:33:1c:a8:9d:3c:52:1e:d5:62:
89:5e:51:1a:3d:55:93:23:21:06:d1:52:9d:20:7b:51:14:44:
49:d5:0b:31:79:72:da:66:b0:c4:a7:83:f6:7e:63:a7:bb:e9:
78:5b:aa:e8:84:27:65:1c:5f:aa:ec:12:80:fc:ad:27:68:35:
8d:b7:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:31:59 2026 by rpki-client