
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134382e302f32342d3234203d3e203137373735.roa
File: 3132322e3134342e3134382e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: ZTlwRHGZ3seNwzvSHNVeU+k1BDiZ7ACp4SX3C+488dw=
Subject key identifier: 93:E5:1F:24:EA:E0:65:74:29:63:1A:8C:91:F8:F8:12:1E:E9:AF:CA
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 134E550703B86C386FD184EEA27AAA14BD2BAA33
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134382e302f32342d3234203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:13:06 +0000
ROA not before: Wed 17 Jun 2026 08:08:06 +0000
ROA not after: Wed 16 Jun 2027 08:13:06 +0000
asID: 17775
IP address blocks: 122.144.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4e:55:07:03:b8:6c:38:6f:d1:84:ee:a2:7a:aa:14:bd:2b:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:08:06 2026 GMT
Not After : Jun 16 08:13:06 2027 GMT
Subject: CN=93E51F24EAE0657429631A8C91F8F8121EE9AFCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:d0:6f:07:0d:1b:ef:f1:fd:c7:a9:16:d7:
fb:8d:a1:e8:57:10:54:ae:7b:41:e6:f7:63:74:34:
54:cb:c8:7e:99:c1:44:d1:7e:14:48:71:f9:78:7a:
d4:98:19:21:79:6f:df:5e:78:56:3a:fb:83:3c:7b:
61:dc:1a:ca:37:42:95:a9:9f:e6:45:b9:55:1d:e7:
71:f4:af:41:3e:8c:fc:55:74:df:03:da:8a:4b:5c:
c6:71:0c:3d:81:e0:89:5d:3f:f7:f5:1a:ac:f1:71:
bf:11:28:be:1a:17:2b:e4:8e:7e:18:03:c9:ed:cd:
00:ac:61:e6:2c:79:8f:3c:4c:f7:17:8c:8b:f8:88:
8c:58:3f:20:0e:71:e5:5b:e5:7a:db:11:d6:93:df:
86:c7:6d:01:15:76:6d:5e:d7:f6:87:53:b0:7f:51:
67:23:e0:2e:22:35:16:54:a3:04:41:f4:c5:77:48:
92:d0:d4:82:7a:ed:b7:ab:fd:c7:46:87:b0:82:da:
4d:e5:cd:5c:d9:42:33:83:a4:77:14:23:c3:80:85:
43:94:3a:92:ba:52:e0:fc:a1:0a:9f:2e:cf:16:13:
fb:7f:7f:56:b0:db:37:32:4a:dc:6c:7d:ff:bc:5d:
19:6b:f5:97:48:44:dc:37:65:bf:f8:a3:5f:c2:8c:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:1F:24:EA:E0:65:74:29:63:1A:8C:91:F8:F8:12:1E:E9:AF:CA
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3134382e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:03:37:6d:a7:01:a4:43:73:0f:86:98:13:c8:93:43:fc:df:
8c:23:2f:c3:26:00:51:d4:f2:b4:fd:b6:22:c3:82:88:0a:1f:
4f:a2:2b:f8:2a:87:b0:12:cc:9f:41:23:ae:73:a9:62:59:90:
67:7c:d3:64:b6:72:fa:4a:36:1b:e1:d3:d7:0a:6e:76:64:f3:
81:87:49:1c:03:ba:be:cc:e7:e5:30:5b:9c:61:a9:ef:92:89:
8b:17:d7:b4:a8:e3:00:19:a5:3d:ed:96:b9:b6:3c:42:14:95:
0e:f3:83:22:bc:d2:4c:2f:d2:5c:92:e3:3d:f3:43:77:ba:4b:
5e:47:82:1e:fc:ce:b0:ea:f0:4f:ae:4b:19:94:98:dd:71:b9:
c2:c5:4e:21:e6:0f:a1:72:88:60:c0:9c:d2:f9:8d:8f:f6:00:
14:bc:18:0b:43:12:66:c1:07:7f:10:36:ac:e4:df:6e:ef:00:
b8:0b:09:c4:4a:63:12:8c:b8:85:50:a3:d8:66:b2:cf:b1:a5:
00:34:0b:39:a1:25:eb:10:f6:97:c1:ee:fa:d7:1c:1a:72:e5:
81:70:d9:82:4c:ad:25:fc:d1:59:87:0b:22:9b:c6:e0:6e:17:
e6:e0:fa:c3:21:3a:ed:39:c8:b3:c2:26:0a:91:70:7f:6a:fb:
a9:de:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:07 2026 by rpki-client