
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3132342e302f32322d3232203d3e203137373735.roa
File: 3231312e3134342e3132342e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier: GfOGwqyjuszbU5FL/KrqUmmtiNUk14hQMnqrxKpZZzc=
Subject key identifier: 07:02:5B:F9:0E:F9:37:C7:15:01:E3:B9:F8:60:2E:4A:3D:DE:A2:35
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 454C7611A1788C91DB68870B6CDBFB7361F00D68
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3132342e302f32322d3232203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 07:03:56 +0000
ROA not before: Wed 10 Jun 2026 06:58:56 +0000
ROA not after: Wed 09 Jun 2027 07:03:56 +0000
asID: 17775
IP address blocks: 211.144.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4c:76:11:a1:78:8c:91:db:68:87:0b:6c:db:fb:73:61:f0:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:58:56 2026 GMT
Not After : Jun 9 07:03:56 2027 GMT
Subject: CN=07025BF90EF937C71501E3B9F8602E4A3DDEA235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:17:88:9f:2a:b3:72:78:a5:ad:b3:f6:18:
98:50:44:59:4b:43:63:a2:64:ee:b5:1b:b6:90:08:
78:fd:db:8e:4d:62:f9:73:39:fd:01:04:8c:e7:ef:
80:86:f4:10:42:71:4c:ee:f1:de:57:01:bb:9b:c7:
2f:9d:e2:15:6c:c2:a9:38:8a:35:5b:33:92:c4:db:
5a:e4:aa:a7:5f:4d:e1:b4:19:f7:8e:0f:44:f2:a3:
ad:7f:64:75:44:06:98:61:92:57:45:33:9b:be:64:
57:6b:a4:46:ad:9f:3d:fa:58:3b:32:9b:c8:76:6f:
c7:6b:8f:6e:c7:e6:a4:8f:a7:bc:bf:4e:fc:6f:4e:
af:88:f7:a0:b9:f2:b3:65:e1:9c:1d:83:e7:04:a0:
6d:1b:e0:cb:79:a6:42:68:b4:38:18:eb:73:c9:6c:
66:9d:ae:c8:de:d3:1c:18:93:48:1f:27:47:84:f6:
6a:5f:2d:cd:2c:b1:a6:c9:db:8d:46:00:fd:68:83:
ec:22:2e:53:f8:9b:b7:5f:ee:99:cd:d5:14:22:fc:
64:79:65:dc:4f:66:23:5d:1b:c9:d8:47:06:61:d8:
cc:56:46:59:c1:c4:5e:08:bc:79:14:72:00:f6:7e:
0d:ce:a6:33:d2:f7:2f:00:5e:4d:c7:e3:dc:22:9e:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:5B:F9:0E:F9:37:C7:15:01:E3:B9:F8:60:2E:4A:3D:DE:A2:35
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3132342e302f32322d3232203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.124.0/22
Signature Algorithm: sha256WithRSAEncryption
44:a4:af:46:de:cf:3f:f2:ff:bc:21:3c:21:14:31:74:84:fb:
ae:6a:a4:33:3e:bf:97:02:19:98:f2:5a:28:70:a7:a6:9c:2b:
7f:06:8a:a3:36:e6:70:03:43:fd:9f:aa:6a:65:79:b4:e0:be:
25:0c:6d:d2:ef:84:06:49:34:9b:cd:25:78:1a:05:a6:d6:ed:
20:22:8b:0f:96:c1:83:de:ef:55:2c:5c:00:bb:64:30:67:9f:
5b:9f:11:93:aa:1e:d4:ca:59:51:60:49:8c:42:0d:fb:7a:b0:
a9:56:88:9f:89:d3:f3:b9:ba:3a:fc:11:de:7b:b3:59:9b:35:
7f:88:f5:77:31:23:41:e4:83:41:50:7d:0c:1b:83:3c:d7:5a:
6e:86:2b:fa:03:a1:95:94:06:9f:a3:52:e6:73:5d:3b:c4:f1:
00:de:55:98:4d:4d:f0:f1:e7:b5:ba:b3:a5:05:79:41:d6:f8:
79:1b:eb:e0:c4:56:af:c4:2c:04:e3:db:b6:e8:6d:7b:fe:d0:
69:2c:a3:fe:1f:19:52:43:77:27:36:cb:93:f1:6f:4a:9a:cd:
fe:9c:7d:e2:d5:b0:47:f6:45:cd:60:91:bb:60:06:6c:40:63:
3e:a4:1b:30:ff:96:26:eb:9c:6e:21:a5:e2:84:d3:6e:26:a4:
af:af:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:31:54 2026 by rpki-client