
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131392e302f32342d3234203d3e203137373735.roa
File: 3231312e3134342e3131392e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: vuA2bQZj00tqX9285/k38Xkhirz66JX+W+jHsIpAw9Q=
Subject key identifier: 33:FF:73:7B:3A:B5:6A:A1:21:E1:A7:B7:0B:CF:4A:27:73:CF:26:8F
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 714E30A5D476E658C7C4240F483FDEADA7A2FD05
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131392e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:03:02 +0000
ROA not before: Wed 10 Jun 2026 06:58:02 +0000
ROA not after: Wed 09 Jun 2027 07:03:02 +0000
asID: 17775
IP address blocks: 211.144.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 23:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4e:30:a5:d4:76:e6:58:c7:c4:24:0f:48:3f:de:ad:a7:a2:fd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:58:02 2026 GMT
Not After : Jun 9 07:03:02 2027 GMT
Subject: CN=33FF737B3AB56AA121E1A7B70BCF4A2773CF268F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4c:49:fd:f1:ac:b1:d9:b1:a6:0b:88:ef:45:
2b:48:e2:cf:88:03:7e:40:13:be:c0:0b:87:69:b0:
80:d6:5f:13:e5:7e:c3:01:15:db:73:4f:d7:9d:9c:
bc:e9:32:44:42:f4:91:2f:57:22:7e:b1:bd:80:81:
7e:12:50:28:b0:5a:47:1d:bd:24:c4:a2:2a:1f:fc:
d8:cb:46:54:9e:9e:b9:05:89:7b:12:d6:7a:9f:ba:
ff:d8:ee:71:19:1c:c9:16:db:c4:f1:37:47:7a:59:
52:26:86:7e:3d:38:39:3e:61:52:5a:e0:17:d3:da:
22:01:26:6e:78:b1:62:d4:50:fc:90:c8:db:af:0e:
f2:96:75:da:2e:0b:fb:49:a4:21:ee:5f:51:f6:b4:
30:78:47:b5:21:a8:44:12:6c:7e:f1:d5:b5:c7:a0:
55:2b:7d:e9:c9:c7:68:98:cc:66:75:30:ac:cc:24:
a1:0e:bc:b6:6b:ba:b3:e4:e5:3d:ec:ca:b8:33:60:
0a:36:5c:7e:08:97:1b:91:63:26:55:dc:2e:5a:be:
54:ba:78:f6:ed:9b:de:47:01:c9:d7:cd:2b:d8:c2:
8a:6c:2a:d1:cc:32:46:7c:a0:67:a8:e8:1e:a9:41:
11:e7:b6:77:fb:b5:02:d5:63:63:c4:47:26:f6:72:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:73:7B:3A:B5:6A:A1:21:E1:A7:B7:0B:CF:4A:27:73:CF:26:8F
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3131392e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:79:24:cc:03:92:56:3e:b3:0b:f1:06:20:22:91:53:3f:3c:
d9:d2:78:33:e4:1f:d7:9b:31:0e:b7:cd:e4:6c:c4:3a:fe:e8:
7f:b9:1d:29:56:9b:9e:b6:59:05:8b:4a:2b:fa:31:eb:1e:02:
8a:a5:86:ca:64:09:3b:ab:b8:e4:10:30:ba:5f:8d:e8:f7:d4:
1d:42:b3:3c:24:87:29:25:65:14:d3:31:8b:b4:ac:a4:5a:21:
80:35:18:16:3b:82:07:07:fe:9a:fe:76:2d:66:dc:50:46:d7:
d0:7e:e9:f6:a3:b6:8c:7e:82:ab:82:04:44:c9:5c:71:c0:f2:
b7:17:1d:1c:a2:97:d1:23:32:ee:ac:77:24:b3:08:a0:70:22:
14:a9:89:a4:93:02:b6:9b:c8:1b:ec:8c:3f:3c:31:d2:55:83:
55:0a:04:5a:bc:ef:cd:6e:48:9d:9d:d4:2e:0d:c6:0a:35:d9:
7f:88:3e:73:f9:f6:98:98:41:fe:86:d1:71:c2:7f:39:f7:21:
66:77:bc:47:ff:c9:e2:00:e1:c3:87:c4:8f:77:af:cd:7a:0a:
03:2a:c1:74:5c:10:19:60:96:27:5c:00:b6:7b:a3:09:a9:46:
77:55:09:7e:2e:8f:4b:61:43:03:7a:ba:e2:ae:01:f9:4a:76:
37:8e:dc:67
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUcU4wpdR25ljHxCQPSD/eraei/QUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTAwNjU4MDJaFw0yNzA2MDkwNzAzMDJaMDMxMTAvBgNV
BAMTKDMzRkY3MzdCM0FCNTZBQTEyMUUxQTdCNzBCQ0Y0QTI3NzNDRjI2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwTEn98ayx2bGmC4jvRStI4s+I
A35AE77AC4dpsIDWXxPlfsMBFdtzT9ednLzpMkRC9JEvVyJ+sb2AgX4SUCiwWkcd
vSTEoiof/NjLRlSenrkFiXsS1nqfuv/Y7nEZHMkW28TxN0d6WVImhn49ODk+YVJa
4BfT2iIBJm54sWLUUPyQyNuvDvKWddouC/tJpCHuX1H2tDB4R7UhqEQSbH7x1bXH
oFUrfenJx2iYzGZ1MKzMJKEOvLZrurPk5T3syrgzYAo2XH4IlxuRYyZV3C5avlS6
ePbtm95HAcnXzSvYwopsKtHMMkZ8oGeo6B6pQRHntnf7tQLVY2PERyb2cpxzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUM/9zezq1aqEh4ae3C89KJ3PPJo8wHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMjMxMzEyZTMx
MzQzNDJlMzEzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANOQdzANBgkqhkiG9w0BAQsFAAOCAQEAW3kkzAOSVj6zC/EGICKR
Uz882dJ4M+Qf15sxDrfN5GzEOv7of7kdKVabnrZZBYtKK/ox6x4CiqWGymQJO6u4
5BAwul+N6PfUHUKzPCSHKSVlFNMxi7SspFohgDUYFjuCBwf+mv52LWbcUEbX0H7p
9qO2jH6Cq4IERMlcccDytxcdHKKX0SMy7qx3JLMIoHAiFKmJpJMCtpvIG+yMPzwx
0lWDVQoEWrzvzW5InZ3ULg3GCjXZf4g+c/n2mJhB/obRccJ/OfchZne8R//J4gDh
w4fEj3evzXoKAyrBdFwQGWCWJ1wAtnujCalGd1UJfi6PS2FDA3q64q4B+Up2N47c
Zw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:05:59 2026 by rpki-client