
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa
File: 3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: tk4fXPbsq7r7OBiy6iajcCoCo4As3f45Fy5trTnqenA=
Subject key identifier: 31:20:35:20:33:52:B1:54:9D:D0:A8:84:C5:C7:D6:F6:40:8C:2B:75
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 46BEE93532D6C409B228214F0DEA546A9DDD9986
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:03:02 +0000
ROA not before: Wed 10 Jun 2026 06:58:02 +0000
ROA not after: Wed 09 Jun 2027 07:03:02 +0000
asID: 17775
IP address blocks: 211.144.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 23:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:be:e9:35:32:d6:c4:09:b2:28:21:4f:0d:ea:54:6a:9d:dd:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:58:02 2026 GMT
Not After : Jun 9 07:03:02 2027 GMT
Subject: CN=312035203352B1549DD0A884C5C7D6F6408C2B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:d3:55:02:16:8e:fc:a5:52:f5:03:88:14:
ad:d3:29:04:aa:76:52:05:fd:8b:d4:e0:3c:4f:a2:
4d:78:d1:79:3d:93:0a:ba:d4:c7:c4:5e:48:2d:73:
5c:5d:a5:4e:e2:5d:e2:f3:c7:66:45:54:fe:41:45:
14:af:79:c2:b4:17:eb:08:d0:b3:09:01:ad:c0:0a:
18:7c:84:f5:41:5c:ba:2e:41:4a:da:3b:c5:8c:c2:
9c:dd:9f:e9:54:b7:69:33:23:a7:8d:24:3b:98:4d:
58:54:0b:8c:59:8c:1c:36:43:28:6d:e6:3e:96:af:
ff:cc:0f:50:69:b8:03:51:bf:d9:e8:41:b0:fd:ec:
38:54:c5:b0:c9:39:78:ab:91:fb:4a:4d:8d:3e:79:
77:89:f3:a8:85:a8:9b:5b:a5:89:41:ea:2a:de:d2:
a1:73:91:eb:c4:86:e0:2d:65:6e:91:66:1d:4b:bf:
fa:5f:9a:8c:4c:20:e5:c6:85:bd:4e:86:c7:a0:7b:
10:8c:8f:04:54:41:cd:bf:53:4a:c6:ae:32:23:70:
7e:37:87:23:f0:40:c6:84:57:a3:4a:0f:1f:4e:dd:
b6:34:38:c0:9b:f3:3d:86:c0:7a:69:7e:05:39:4b:
4c:b8:3f:8d:4c:e5:07:20:a2:41:b4:48:e6:5c:6c:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:20:35:20:33:52:B1:54:9D:D0:A8:84:C5:C7:D6:F6:40:8C:2B:75
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131382e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.118.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f3:ed:ed:86:f4:9f:26:75:bb:b0:5d:b7:dc:80:ae:39:fd:
de:d8:24:b0:91:57:af:de:e0:9b:12:40:a5:0e:9e:28:57:60:
94:94:13:bc:ad:a1:ee:30:93:e0:c5:23:fc:9c:ca:8a:2f:cf:
01:0e:a6:b6:24:63:1c:4e:01:d4:4a:7e:15:a9:3b:77:0b:96:
48:56:46:df:0c:95:1f:52:c1:4c:b3:f5:bb:ef:ad:af:bf:0c:
24:b4:71:bd:95:68:10:0e:7b:91:72:94:e8:86:23:d8:01:f1:
96:e2:60:7f:28:2a:a9:70:8f:ba:45:a7:b8:8f:08:58:35:9e:
86:02:40:f6:9b:65:97:fe:f5:89:26:e8:c1:c4:56:2a:d1:07:
1c:b3:87:97:bc:7f:cf:f5:e5:be:27:e7:2b:d9:3c:90:15:7b:
94:20:13:c8:50:e7:6b:19:1c:07:83:0d:9d:9a:37:3f:60:21:
fa:86:cc:5c:d5:c2:55:5a:7f:54:4b:77:a1:13:39:cb:e4:b9:
fd:4d:95:76:66:3e:bc:89:ec:4c:93:98:c8:c9:9f:52:22:f6:
5a:10:f0:96:5b:5a:96:a0:09:5b:7b:18:bc:85:ca:0f:7a:c9:
10:95:5b:1c:50:bb:cd:57:ef:7a:0a:65:7e:ab:7b:fd:1a:43:
bb:d0:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:05:58 2026 by rpki-client