
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa
File: 3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: IAKSL6bZABPaRMUEBhz/H1XY1VtVjb6Y+tOsihyKED4=
Subject key identifier: 02:76:5B:BC:1C:E9:B6:87:0E:02:48:FA:A2:7D:1E:59:FB:2E:BC:D4
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 7CF387C7FA80EB2485AF8DB49C490D84689EE1C4
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:12:34 +0000
ROA not before: Wed 17 Jun 2026 08:07:34 +0000
ROA not after: Wed 16 Jun 2027 08:12:34 +0000
asID: 17775
IP address blocks: 122.144.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f3:87:c7:fa:80:eb:24:85:af:8d:b4:9c:49:0d:84:68:9e:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:07:34 2026 GMT
Not After : Jun 16 08:12:34 2027 GMT
Subject: CN=02765BBC1CE9B6870E0248FAA27D1E59FB2EBCD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:7d:f9:04:a4:ed:4c:c1:3a:57:23:66:6d:
1c:cf:1a:f3:93:67:38:e5:c6:04:4f:07:6b:bc:4a:
3c:5c:92:77:f4:58:bf:de:6e:0e:92:4e:31:6c:fb:
ec:84:72:6f:05:33:b2:8f:44:db:d2:3c:e6:59:7a:
28:65:fa:56:68:4a:32:cd:be:2a:34:fb:d3:e5:53:
a6:c3:63:84:7f:00:5d:5e:0e:14:7d:53:5b:a0:c6:
ee:29:1b:df:19:d6:4e:26:59:3d:69:d0:d1:bf:ee:
da:31:52:95:08:25:f6:74:1b:c4:0f:42:31:62:74:
b8:47:c7:42:dd:bf:b6:88:ae:c9:5b:c0:9f:ad:b6:
ee:7f:89:8b:18:25:b7:e4:77:b9:d9:53:40:b1:69:
40:a0:de:0d:67:8b:c0:5a:51:bf:17:11:a9:9f:82:
16:69:21:e0:3b:bf:92:39:83:5f:02:e3:e3:e2:e2:
d3:cd:3d:fb:25:9a:67:e3:34:a6:71:84:bc:a9:ab:
ff:f1:56:33:9b:50:2e:56:79:c8:fd:3a:ad:fe:fd:
6b:f6:73:e8:e3:9b:09:dc:2a:84:b3:0a:79:9c:02:
28:bc:d9:29:6d:81:b6:75:0f:72:25:c3:60:f6:8a:
85:a5:33:28:b8:a5:4b:9d:b7:f2:e1:b2:d9:d6:d7:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:76:5B:BC:1C:E9:B6:87:0E:02:48:FA:A2:7D:1E:59:FB:2E:BC:D4
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134342e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.144.0/23
Signature Algorithm: sha256WithRSAEncryption
46:45:10:8b:c6:7f:0c:08:a3:72:0c:5c:45:36:3b:b4:e8:df:
bb:77:f2:82:b6:69:92:5d:01:8c:ab:2c:0f:d3:7e:66:3a:8f:
1b:5f:c4:a5:fd:80:2a:cd:7c:dc:ae:eb:3c:c3:6d:c1:b3:21:
92:46:26:e2:08:75:d0:db:2a:ce:08:5c:da:5a:31:8c:08:ea:
b6:09:39:94:33:0b:99:3d:5a:7a:f5:d0:9f:cf:4b:a6:70:04:
85:47:64:cf:70:5e:f4:2d:be:e6:81:bb:f4:bd:69:aa:14:16:
5e:bf:97:1b:2c:df:aa:22:27:30:54:66:a9:cb:26:b5:e0:66:
ab:13:f0:24:74:e3:71:8d:09:ec:25:99:7c:af:9e:94:cb:44:
1b:8a:81:74:dc:79:3c:79:89:5e:92:86:cc:22:b8:8c:73:03:
fb:78:f8:78:49:f4:60:ed:38:ae:1c:a2:9d:72:ed:7a:39:aa:
52:70:dc:c4:14:60:db:7c:95:ac:70:79:af:5d:73:d0:de:76:
23:3c:fb:a4:b1:30:fd:f4:87:23:35:cc:9d:64:0e:9f:21:ee:
1c:e6:8a:75:08:25:bc:41:d4:dd:21:ff:e1:94:79:35:80:43:
f4:29:9c:b3:df:c5:12:d7:2b:5c:92:41:1a:74:2b:9f:1a:8e:
d0:55:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:30 2026 by rpki-client