
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32342d3234203d3e203137373735.roa
File: 3231312e3134342e3131342e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: P5Sd67VsZbHP6w4SZREzy8CE8u6Kq0Gfhi7iO+KYcds=
Subject key identifier: 57:C3:64:D5:F0:AD:86:21:B5:64:90:3F:14:34:15:86:10:52:1F:D9
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 46A3F31FB066599D5905AD10E6717CAA76459762
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:02:25 +0000
ROA not before: Wed 10 Jun 2026 06:57:25 +0000
ROA not after: Wed 09 Jun 2027 07:02:25 +0000
asID: 17775
IP address blocks: 211.144.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a3:f3:1f:b0:66:59:9d:59:05:ad:10:e6:71:7c:aa:76:45:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:57:25 2026 GMT
Not After : Jun 9 07:02:25 2027 GMT
Subject: CN=57C364D5F0AD8621B564903F1434158610521FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:d6:d1:48:bb:ce:35:ac:9b:70:82:f2:c3:
f4:f5:01:18:b1:83:31:08:4c:c4:d8:0a:93:77:fd:
d0:37:2c:5a:10:d6:6c:fd:b1:7b:74:07:0a:d5:de:
58:4f:de:25:cd:5b:bd:90:10:84:f0:b9:12:c4:ed:
0a:b4:2c:06:14:8c:43:a2:aa:ca:f7:5b:47:c3:6d:
71:bd:a5:4b:c4:e7:a5:96:a3:38:07:a7:a0:7a:16:
3d:f3:1a:66:26:42:43:58:0f:69:e2:2a:b3:1c:4f:
a3:26:08:12:54:94:b2:c7:5b:41:e1:df:3f:79:6a:
a0:8c:53:29:10:8a:8a:17:7c:09:2c:6f:a7:71:32:
32:e7:cd:c0:1e:8a:c5:e8:5d:8f:f8:ce:0b:ec:0c:
69:e2:07:3c:ad:fc:08:17:c2:7c:49:bb:b2:c6:20:
6a:06:a0:5d:28:c4:ba:45:99:6d:42:4f:81:96:23:
87:3c:89:bb:94:a3:7a:c5:c7:a8:fb:f2:ac:90:24:
ff:70:9f:62:97:c5:42:5c:cf:84:3c:c5:e9:db:1e:
86:ab:ba:02:d2:62:50:07:5d:c6:c1:db:88:75:a5:
98:39:10:ba:8a:ca:8d:f7:bf:3e:ec:5a:79:dc:eb:
cf:98:cd:1d:63:ec:30:3c:8d:0f:de:76:72:ed:fd:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:64:D5:F0:AD:86:21:B5:64:90:3F:14:34:15:86:10:52:1F:D9
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131342e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.114.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1c:f6:c5:22:1e:8c:d9:ee:26:12:4f:ac:60:3a:13:c3:0f:
6c:25:a4:92:d8:93:c6:0a:1c:a1:79:45:62:28:cb:4b:c9:72:
f9:b0:54:33:63:30:2f:6c:63:0c:bd:22:49:e7:08:32:15:7a:
71:31:5c:da:03:5d:08:6b:11:19:6f:31:18:45:4a:e0:b9:79:
79:bf:13:63:78:d3:85:a7:2c:6a:ff:24:1e:57:ff:17:dd:46:
43:9b:6a:aa:4c:f2:fd:a3:43:5b:ae:18:f0:fb:d4:35:57:77:
e8:8c:9e:e4:68:52:c4:f5:d5:43:fd:12:ec:28:48:5e:20:fd:
60:6f:ca:9f:7d:66:0f:9e:cb:90:d0:39:8b:60:ef:20:e2:f4:
2a:21:39:81:af:bb:74:1f:16:7a:fd:0f:05:8c:17:8c:e0:6f:
6e:39:21:47:5b:de:d2:34:7f:42:f3:fd:9c:41:0d:76:fd:1f:
dc:dc:2b:ed:41:20:6a:ae:a0:16:bc:10:de:a7:0c:8a:8f:cf:
a2:92:ea:89:c1:40:45:53:d7:25:b8:05:ad:2a:0e:27:0a:92:
60:d9:56:c5:d9:d2:97:fa:61:8a:e5:3a:ba:15:de:c2:24:30:
57:f2:22:0b:d5:bf:f8:4a:80:b7:e8:e5:5d:71:e8:64:8f:7f:
46:c7:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:29 2026 by rpki-client