
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3135362e302f32332d3233203d3e203137373735.roa
File: 3132322e3134342e3135362e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: VaImNyTaD0vw2KbfXHLSh4HNs961Aq3XMnfSspPzMMc=
Subject key identifier: A7:87:B4:B9:E7:AD:F0:8D:4C:9F:0C:F5:C5:AA:78:80:19:24:94:E4
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 51263791A09D9E3D3E757BFD0303006E26899508
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3135362e302f32332d3233203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:13:36 +0000
ROA not before: Wed 17 Jun 2026 08:08:36 +0000
ROA not after: Wed 16 Jun 2027 08:13:36 +0000
asID: 17775
IP address blocks: 122.144.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:26:37:91:a0:9d:9e:3d:3e:75:7b:fd:03:03:00:6e:26:89:95:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:08:36 2026 GMT
Not After : Jun 16 08:13:36 2027 GMT
Subject: CN=A787B4B9E7ADF08D4C9F0CF5C5AA7880192494E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:7a:f6:0a:6e:14:15:1b:22:fa:ec:43:d8:
08:09:3e:41:61:6d:53:91:f9:25:3e:36:50:6a:a9:
e9:25:3f:8e:ac:a3:3c:4b:d1:78:a4:23:5c:20:92:
81:c4:c8:8e:df:4d:ba:2c:3c:32:91:31:5e:7c:ce:
82:86:c1:5e:ff:0d:5d:ab:1c:49:b2:b3:cc:27:31:
d0:06:58:6b:22:d9:bc:e4:d0:36:e5:9c:a0:7f:44:
57:8c:6f:6f:f9:d7:c4:e2:cb:c4:b2:c1:4d:fe:74:
36:42:3b:3b:31:b9:4a:fe:94:8e:99:00:ca:46:bf:
64:84:34:41:8e:e6:45:c0:e3:5a:8d:2b:7f:ca:2b:
cf:13:4e:a5:22:67:6c:7d:30:66:69:21:5b:b8:f9:
32:9e:81:bd:7e:bd:fa:c4:9e:1e:87:ed:33:90:5d:
18:6a:0a:36:ec:71:57:ee:d3:d9:d5:e2:f9:cc:df:
1a:ab:a5:36:ae:7b:a2:2c:b5:32:80:e5:0b:a4:74:
84:41:f6:74:84:82:21:05:73:99:d5:18:fe:80:23:
06:4f:93:23:e9:24:db:ba:5b:da:a6:71:17:79:b7:
80:3d:52:63:53:ab:07:1c:d5:8c:e0:12:32:d8:a1:
2b:b5:ba:6d:10:d9:fd:eb:a6:c2:97:ec:c2:05:6b:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:B4:B9:E7:AD:F0:8D:4C:9F:0C:F5:C5:AA:78:80:19:24:94:E4
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3135362e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:ef:7c:db:f0:b2:9e:e9:19:cb:c8:54:a2:50:a0:a5:13:9e:
5a:ac:77:75:c0:e9:47:07:86:94:a2:2c:23:b8:04:93:d5:51:
e7:69:e6:43:f7:ef:2d:56:d7:13:67:16:d7:81:31:de:ee:fb:
68:f1:3b:74:f9:08:43:46:13:47:ff:3b:63:ca:93:83:db:5a:
0f:bc:32:1c:64:96:3a:c0:87:51:af:3c:4d:b4:7f:89:82:b1:
77:0a:a6:54:4a:dd:1e:5b:f6:41:73:48:47:05:68:3e:18:30:
8b:9b:62:69:ca:5a:ae:12:e9:9e:54:66:c9:07:77:40:d1:9b:
fb:4a:cb:53:20:b0:ac:d0:b0:09:1f:b4:7c:b8:aa:fe:e3:52:
8a:43:57:2b:f5:96:27:ed:36:4f:c1:e5:ef:09:4c:dc:15:42:
f9:c9:70:a5:b0:9d:d9:87:67:7a:42:56:b8:11:e5:ce:6b:e5:
2b:d9:c0:3a:5c:53:79:24:20:25:f7:32:69:bd:2e:76:be:9f:
4b:e8:a0:7a:3f:12:e3:77:4a:84:d4:ec:08:b6:a8:60:bb:7a:
34:fd:ce:98:34:e7:76:0f:f6:3d:c5:a5:ef:38:86:cb:73:25:
33:f6:a0:29:40:88:65:b3:3d:24:01:02:dc:28:a6:77:7e:f9:
ba:4e:ac:c2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUUSY3kaCdnj0+dXv9AwMAbiaJlQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTcwODA4MzZaFw0yNzA2MTYwODEzMzZaMDMxMTAvBgNV
BAMTKEE3ODdCNEI5RTdBREYwOEQ0QzlGMENGNUM1QUE3ODgwMTkyNDk0RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC913r2Cm4UFRsi+uxD2AgJPkFh
bVOR+SU+NlBqqeklP46sozxL0XikI1wgkoHEyI7fTbosPDKRMV58zoKGwV7/DV2r
HEmys8wnMdAGWGsi2bzk0DblnKB/RFeMb2/518Tiy8SywU3+dDZCOzsxuUr+lI6Z
AMpGv2SENEGO5kXA41qNK3/KK88TTqUiZ2x9MGZpIVu4+TKegb1+vfrEnh6H7TOQ
XRhqCjbscVfu09nV4vnM3xqrpTaue6IstTKA5QukdIRB9nSEgiEFc5nVGP6AIwZP
kyPpJNu6W9qmcRd5t4A9UmNTqwcc1YzgEjLYoSu1um0Q2f3rpsKX7MIFa3lDAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUp4e0ueet8I1Mnwz1xap4gBkklOQwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMTMyMzIyZTMx
MzQzNDJlMzEzNTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAXqQnDANBgkqhkiG9w0BAQsFAAOCAQEAC+982/CynukZy8hUolCg
pROeWqx3dcDpRweGlKIsI7gEk9VR52nmQ/fvLVbXE2cW14Ex3u77aPE7dPkIQ0YT
R/87Y8qTg9taD7wyHGSWOsCHUa88TbR/iYKxdwqmVErdHlv2QXNIRwVoPhgwi5ti
acparhLpnlRmyQd3QNGb+0rLUyCwrNCwCR+0fLiq/uNSikNXK/WWJ+02T8Hl7wlM
3BVC+clwpbCd2YdnekJWuBHlzmvlK9nAOlxTeSQgJfcyab0udr6fS+igej8S43dK
hNTsCLaoYLt6NP3OmDTndg/2PcWl7ziGy3MlM/agKUCIZbM9JAEC3Cimd375uk6s
wg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:52 2026 by rpki-client