
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e39362e302f32342d3234203d3e203137373735.roa
File: 3231312e3134342e39362e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: wzHZ0w5pxxZnLrcZBB4OEnCQlIREezONITcGvgl4y14=
Subject key identifier: 0D:1A:AF:60:E3:D8:3F:EB:F3:D1:5D:9D:D5:06:10:77:C2:C9:C8:BA
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 3E7F1FB1C1E050671D2F00633CF00F3674401F9E
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e39362e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 06:55:57 +0000
ROA not before: Wed 10 Jun 2026 06:50:57 +0000
ROA not after: Wed 09 Jun 2027 06:55:57 +0000
asID: 17775
IP address blocks: 211.144.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:7f:1f:b1:c1:e0:50:67:1d:2f:00:63:3c:f0:0f:36:74:40:1f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:50:57 2026 GMT
Not After : Jun 9 06:55:57 2027 GMT
Subject: CN=0D1AAF60E3D83FEBF3D15D9DD5061077C2C9C8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:09:c6:d7:4a:8c:95:7a:1e:11:b3:39:ef:
bf:36:ba:03:38:4c:d4:c3:25:a1:00:9a:06:7c:1a:
ab:d4:b2:6e:61:54:40:a8:ab:21:35:fe:30:ce:c2:
f6:14:1c:65:d5:49:04:ac:8e:df:3a:f4:48:ce:25:
bf:d8:08:db:47:20:5d:62:c8:b4:70:9f:94:9e:e3:
a8:3e:1a:ae:f5:4c:db:11:be:70:59:ff:63:3d:9f:
27:b5:e9:bd:45:20:23:ea:c2:54:dc:1f:06:00:99:
72:b7:57:e0:87:2d:ac:a5:88:00:de:32:b4:e8:ba:
ab:9e:2a:a0:0a:3e:6d:92:63:09:ef:5d:54:07:91:
74:61:10:0c:8e:45:4c:fc:e3:29:4b:9b:83:8a:de:
fc:c3:1d:ae:e7:11:35:f0:0b:4f:6f:b3:10:4c:e0:
be:e4:1f:24:85:50:7b:e0:63:4f:03:43:b7:f0:90:
5e:e0:42:06:94:d8:4e:c3:89:39:12:b6:4a:4b:30:
68:6f:4d:39:98:0c:d6:14:e5:3e:f0:73:7c:c3:ea:
7e:b4:86:2b:13:ec:fa:fc:24:3d:8c:da:35:dd:84:
13:1b:f9:4c:0a:c1:e6:79:45:1d:74:24:c0:0e:80:
99:79:90:ca:61:bd:59:5b:05:dd:20:62:6d:28:18:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:AF:60:E3:D8:3F:EB:F3:D1:5D:9D:D5:06:10:77:C2:C9:C8:BA
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e39362e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.96.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c7:9a:43:d4:18:52:9e:40:08:fa:e2:dc:46:c6:ce:7e:51:
91:44:eb:07:86:f8:78:46:d7:03:e1:5b:64:df:d1:21:e8:22:
c7:b8:76:eb:38:0b:85:c7:f1:d9:31:f5:09:dc:3a:18:f7:6d:
fb:b2:ed:fd:a8:b8:f7:27:d4:6e:51:9a:85:98:c6:de:49:4c:
58:1d:08:7c:9d:6f:44:d8:60:8f:48:9e:9f:67:5b:51:01:b5:
b4:6f:b1:cb:1a:43:08:e3:4c:43:73:a8:c8:2a:fb:09:69:a2:
cd:8b:d3:6f:03:7b:43:32:1c:91:2b:f1:2d:29:bb:ac:6f:36:
dd:99:3c:52:0d:75:82:48:b6:d0:4f:2a:c4:e9:0a:62:51:f0:
ee:bf:b6:d2:e7:fc:e9:dc:7b:09:8b:0f:19:1b:7a:2a:a0:b9:
09:92:6e:69:d6:a6:54:48:f4:d7:45:6d:a6:76:be:c8:f7:35:
14:32:dc:d0:b8:ae:e0:6c:f6:fa:3d:f7:57:2b:c9:ce:cf:0b:
10:6d:60:9d:ed:50:08:de:cf:d7:f1:b0:49:25:87:5c:a7:8c:
8a:a9:bb:c5:0a:f3:03:c3:90:fb:ff:18:fe:0e:dd:e7:bb:38:
18:85:46:b8:90:35:3d:db:97:58:93:33:37:2d:cb:1b:5f:98:
a9:bf:ca:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:52 2026 by rpki-client