
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134312e302f32342d3234203d3e203137373735.roa
File: 3132322e3134342e3134312e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: 3JGsPdCumMEh+H2X+PvNOHKryaCLOu/POaVEJbhmOFc=
Subject key identifier: 75:2A:C9:A8:94:36:43:6A:B9:58:58:51:F8:DB:60:52:5E:2C:70:67
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 1A2D0272BE11D464AB885610C344991927FF94B0
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134312e302f32342d3234203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:11:52 +0000
ROA not before: Wed 17 Jun 2026 08:06:52 +0000
ROA not after: Wed 16 Jun 2027 08:11:52 +0000
asID: 17775
IP address blocks: 122.144.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2d:02:72:be:11:d4:64:ab:88:56:10:c3:44:99:19:27:ff:94:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:06:52 2026 GMT
Not After : Jun 16 08:11:52 2027 GMT
Subject: CN=752AC9A89436436AB9585851F8DB60525E2C7067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:c6:5f:61:24:a2:7e:40:c5:49:cb:b7:62:
81:bd:01:80:57:01:7b:a7:9f:30:4b:ab:8b:d4:97:
b2:14:ee:e1:73:11:48:45:3e:54:ca:9d:05:32:fd:
c9:69:54:30:b3:86:1e:f5:7f:4a:97:d9:b5:b6:2f:
08:a1:e5:1b:68:c9:8e:1a:2c:6d:e4:f3:59:71:e1:
1d:eb:9b:b7:11:f7:c6:b3:ec:ad:5c:b4:54:9e:99:
fb:d3:1d:a6:5c:28:0a:54:40:57:4b:f6:56:20:12:
c7:3d:aa:fe:13:43:99:3c:20:21:b4:e4:f8:29:84:
7d:0b:7d:7a:b7:d6:00:bf:d7:89:f9:c6:11:86:29:
2e:6c:fe:19:10:54:97:43:4a:b7:c5:e0:38:94:a2:
70:fe:6b:a6:a0:21:cb:b5:94:2b:63:6d:7b:54:59:
b1:ca:23:94:e7:dd:83:94:a3:cf:55:8c:89:55:4c:
58:f7:ae:06:69:b6:79:b9:f7:4e:68:9f:9c:f4:9c:
32:c7:6d:33:4e:9f:b9:be:92:8d:6f:71:96:4a:ed:
f4:3f:18:16:0f:d6:34:ea:81:62:5c:7e:5b:0d:98:
8e:85:26:af:9f:a3:b1:ec:c5:29:55:07:d4:52:18:
b5:c9:c6:d3:a1:df:09:a5:a2:64:12:9b:31:d1:d5:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:C9:A8:94:36:43:6A:B9:58:58:51:F8:DB:60:52:5E:2C:70:67
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134312e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.141.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2d:5b:26:5f:c0:9f:b6:ce:62:4a:d3:75:e9:56:ca:91:6f:
3b:31:be:1a:4d:f9:71:1e:80:cf:00:ef:02:cb:92:a9:54:e8:
d6:6e:14:93:62:32:d3:fc:0f:6b:c6:28:21:0f:11:db:c8:e8:
20:a1:55:5b:9b:b6:c7:76:f2:cb:64:4a:6b:4e:ea:ba:9b:c4:
7a:e3:cd:c6:06:fd:7e:48:bc:a2:2d:5d:b5:17:ce:ba:2b:6e:
fe:14:81:bb:f4:b8:89:e9:3f:42:32:95:48:3a:01:dd:92:e5:
f7:1a:43:91:ae:af:3a:a6:4f:33:3f:e0:cc:d5:e5:fc:2b:68:
ac:53:7c:f1:74:f9:b7:cd:b1:36:a5:39:87:c2:f0:a2:31:04:
45:cc:e0:d1:1b:b1:18:3f:4f:d2:f5:59:2e:e3:52:ad:5f:4c:
a9:10:38:1d:3b:95:f5:64:fa:7a:99:5a:c9:e2:a2:aa:db:7b:
e9:b5:83:d0:64:3e:2f:fc:cd:18:dd:56:f0:07:77:bf:6a:77:
db:ec:ff:d4:9d:5f:45:44:59:33:1b:f9:6d:a3:2b:37:6b:b4:
70:ae:05:e0:4e:1c:b2:f3:cf:51:c7:b5:3e:48:b3:36:47:24:
4c:f7:7e:75:73:d8:30:2a:00:da:22:00:ca:b6:2a:a2:dd:54:
66:ec:90:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:47 2026 by rpki-client