
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32332d3233203d3e203137373735.roa
File: 3231312e3134342e3131382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: 1YphHzokspKF6IVwC9hql1zJwHvbah3EJKe4hUxizyc=
Subject key identifier: F0:B2:82:F3:DD:F4:A6:5B:77:D2:CC:AB:BD:61:76:0B:25:66:80:7A
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 1F439AD23B7F2D82E6942CEF87F1D0038889319E
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32332d3233203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:03:16 +0000
ROA not before: Wed 10 Jun 2026 06:58:16 +0000
ROA not after: Wed 09 Jun 2027 07:03:16 +0000
asID: 17775
IP address blocks: 211.144.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:43:9a:d2:3b:7f:2d:82:e6:94:2c:ef:87:f1:d0:03:88:89:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:58:16 2026 GMT
Not After : Jun 9 07:03:16 2027 GMT
Subject: CN=F0B282F3DDF4A65B77D2CCABBD61760B2566807A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:9f:da:96:1c:e1:cb:6d:1a:7a:cc:ea:22:
72:59:0b:6a:be:f1:be:9e:64:62:63:39:08:3c:14:
79:20:7d:a1:70:56:22:28:ff:c1:4d:22:db:ee:2a:
b2:0d:a8:8c:0d:ab:75:33:ac:e9:2e:2e:fe:d6:36:
ed:18:8f:4e:9a:b3:76:7f:cb:fa:dd:9c:de:6e:cb:
1a:1f:08:5c:57:39:9d:ed:00:fb:6d:1c:1a:5b:3b:
ae:99:80:20:33:7f:d9:86:f3:e8:ee:e7:f8:7c:ba:
33:cc:94:c2:00:f2:2d:d0:f0:36:08:9e:9b:d8:f0:
05:d6:25:e0:9b:ba:e3:59:d2:49:da:fe:4e:52:d1:
7b:7d:2e:76:b8:20:45:6d:fc:08:af:b7:d6:76:48:
a2:76:ff:53:d7:e0:bc:aa:36:ff:59:0d:b7:87:87:
07:21:88:d6:93:51:39:25:e8:dd:e6:c5:cb:c3:a6:
46:c4:3d:27:75:b3:39:3b:dd:17:f2:00:b6:5f:cd:
98:65:76:c6:ad:18:6a:d8:da:51:7f:4f:eb:7c:dd:
4a:9e:ea:1e:5d:c8:55:d4:90:3d:0e:6c:ca:09:38:
f2:7f:8e:5d:d6:25:01:ff:58:c2:26:2a:1e:e1:7e:
19:1b:80:0c:17:80:45:23:19:94:18:bc:03:ff:57:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:82:F3:DD:F4:A6:5B:77:D2:CC:AB:BD:61:76:0B:25:66:80:7A
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.118.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:39:06:b8:f9:c4:62:b8:5a:0b:ba:07:ae:96:a3:4b:04:e6:
f1:59:68:b7:de:4e:a2:78:08:0b:ee:33:38:0f:bf:81:21:09:
61:cf:b7:a8:b9:60:ec:d6:6a:96:6d:cf:59:02:bb:2c:e6:a1:
24:70:55:9f:54:c9:f9:79:86:e9:1e:74:33:df:15:b0:98:d0:
ee:f7:57:36:5f:ac:c6:9a:98:18:a1:28:00:4f:5d:7e:d1:d2:
42:30:e4:44:b7:0d:b8:8f:82:02:ac:59:18:e6:fb:ac:d6:a6:
e3:51:f4:cd:62:63:82:bb:bc:7a:19:e9:d0:d8:d0:c3:93:f5:
87:1a:ec:34:a6:f9:0d:c9:61:3c:78:9f:6b:87:c1:27:7a:f9:
6e:67:1f:87:71:bf:ca:cc:d5:6a:6e:5e:bb:79:a3:39:fb:61:
71:56:16:a4:96:3b:b8:4a:c3:10:17:e0:ad:f0:4e:5a:63:2e:
6a:26:08:51:f6:c6:27:f0:8b:37:3d:b9:e6:b8:db:4e:89:54:
86:29:fe:7d:c9:e8:e0:33:2d:7e:e2:a6:77:e9:65:89:a6:2f:
ba:1e:96:44:28:c9:bd:5a:88:77:80:7f:94:63:27:99:2e:e4:
6a:a4:81:ee:f8:96:24:d5:1f:bc:d3:03:7a:ee:5f:80:c8:4d:
9f:e0:87:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:09 2026 by rpki-client