
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e39372e302f32342d3234203d3e203137373735.roa
File: 3231312e3134342e39372e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: 0p417Ar9pzF0FWKt+YNOOiZWOD9aOpFr2z2RGx6HSY0=
Subject key identifier: 63:35:04:48:88:9B:98:58:55:9A:B3:8A:F3:70:A1:E8:18:8A:0C:E9
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 6BB1F042385D8E8C33AF037B6217FE989759634F
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e39372e302f32342d3234203d3e203137373735.roa
Signing time: Wed 10 Jun 2026 06:56:06 +0000
ROA not before: Wed 10 Jun 2026 06:51:06 +0000
ROA not after: Wed 09 Jun 2027 06:56:06 +0000
asID: 17775
IP address blocks: 211.144.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b1:f0:42:38:5d:8e:8c:33:af:03:7b:62:17:fe:98:97:59:63:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 10 06:51:06 2026 GMT
Not After : Jun 9 06:56:06 2027 GMT
Subject: CN=63350448889B9858559AB38AF370A1E8188A0CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:20:2a:58:16:5a:86:d0:5b:ad:49:e2:fd:
45:cc:6a:50:33:44:20:41:a6:56:5e:c9:0b:0b:f0:
15:d5:5a:26:61:b4:06:0f:2e:74:3e:9c:a9:3f:61:
f5:ee:ae:56:69:eb:ed:24:66:1e:98:de:b4:bb:9f:
bb:2a:fc:78:53:b1:17:33:1a:3a:a5:08:33:b9:30:
30:b0:64:22:3d:94:4e:01:3d:66:0a:81:e4:28:26:
b3:a7:11:d2:0e:a4:4f:2c:d6:e0:ec:ca:8c:1f:bb:
d3:d7:93:c9:9e:dc:90:09:37:5f:76:79:82:13:ac:
fb:25:46:aa:0a:82:a3:30:d7:3a:b3:3e:11:ca:ed:
5a:c8:e5:39:ca:dc:5f:91:69:d4:98:ad:02:1d:e1:
2b:e8:70:7a:6c:88:d6:05:5e:ab:67:66:dd:ba:ae:
d8:76:97:11:17:cb:64:07:69:d7:c0:d2:04:fe:4e:
c4:ba:16:56:45:57:52:a1:a7:89:e5:28:61:29:3a:
3d:07:73:26:9f:4e:32:8c:a9:72:b1:27:87:c8:42:
e0:72:2e:09:af:bf:3b:33:b9:cf:01:40:d5:ba:d0:
3a:17:21:81:d5:b7:7e:c4:cf:f3:0f:be:f4:c5:a4:
69:fa:5a:b9:47:a4:b2:12:16:36:92:2f:c5:ee:23:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:04:48:88:9B:98:58:55:9A:B3:8A:F3:70:A1:E8:18:8A:0C:E9
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e39372e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ce:20:d3:90:f8:73:96:1c:7d:16:9e:4d:3e:28:95:05:44:
13:64:b2:5d:6b:8e:c3:ca:4f:97:77:67:3d:d7:62:d8:a7:3e:
0a:71:89:2c:c9:e7:18:84:17:39:ce:45:7c:9f:5f:06:e3:d1:
bf:2f:38:85:e4:83:2c:53:72:f7:13:61:2e:5d:d8:16:23:37:
90:ff:99:ee:8a:f2:04:59:36:23:22:12:82:68:4d:84:d2:2d:
ca:d8:d2:49:a5:24:98:6e:c7:ea:2f:80:1c:c4:25:ed:a5:b0:
f2:47:be:e7:c2:22:f8:2c:4a:30:24:94:f2:db:76:e3:21:ab:
c9:f3:ec:74:22:76:8b:59:6b:6b:4c:fb:df:57:70:ce:41:fe:
e7:e8:2b:46:42:5c:18:75:83:9b:ac:d1:03:4d:f7:33:1c:85:
66:b9:eb:c3:9f:9d:07:49:d1:e8:c6:eb:c9:90:a2:e2:76:70:
de:b4:4d:da:6b:26:6d:52:f4:6c:ee:a4:1e:b1:29:02:de:18:
26:a9:a1:03:f4:ed:79:67:ed:d3:f7:73:91:52:26:45:9b:95:
d4:20:f1:c7:8b:6e:15:c3:1a:a4:3c:0e:34:e1:c3:1b:00:25:
39:7d:8e:d0:b8:e1:58:b0:02:0f:bd:15:c8:2e:cc:8b:74:ac:
21:f3:f6:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:54 2026 by rpki-client