
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa
File: 3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: nutPG2TM5JLVTOeSEe4DNxCd+aZ5tDnrF0kc01HgKlc=
Subject key identifier: 29:26:E4:A9:17:0F:48:0E:58:BF:F9:0C:08:FE:C2:8E:3E:4D:E0:4D
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 4522DB5A3601F967D080E370FCC316AA176B9867
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:15:31 +0000
ROA not before: Wed 17 Jun 2026 08:10:31 +0000
ROA not after: Wed 16 Jun 2027 08:15:31 +0000
asID: 17775
IP address blocks: 122.144.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:22:db:5a:36:01:f9:67:d0:80:e3:70:fc:c3:16:aa:17:6b:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:10:31 2026 GMT
Not After : Jun 16 08:15:31 2027 GMT
Subject: CN=2926E4A9170F480E58BFF90C08FEC28E3E4DE04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:b7:4e:62:06:d4:8a:c8:74:9f:ab:7c:f5:
55:dc:a9:59:35:05:d3:64:86:4c:0a:17:42:94:9a:
a5:4a:30:44:95:94:36:b6:5a:cd:8e:44:aa:6d:71:
7a:d8:52:bf:a9:43:25:af:e7:65:58:ea:ee:b8:9c:
8c:e2:3a:d6:17:b2:52:e0:99:f4:25:d0:bd:57:34:
04:c4:dc:19:fe:e0:b0:1b:97:8b:fd:55:49:e5:87:
78:b3:f8:1c:f2:09:1c:89:14:bc:45:c0:ba:20:25:
e0:18:b8:cc:ba:e5:1b:1b:67:b4:2e:a3:15:c7:67:
08:f8:fa:98:c8:75:6c:b8:c1:6c:18:6c:92:48:f9:
e3:37:06:73:6e:df:fe:2b:dd:90:76:6d:59:e3:24:
7a:66:63:c2:3f:9c:24:82:c5:c7:88:fd:5b:60:a3:
a1:8a:43:5c:35:eb:a7:92:c7:8d:cd:42:82:e9:ef:
46:9b:a2:fa:18:b2:86:b0:ca:cc:72:71:cf:65:34:
02:98:60:0a:0a:3e:e3:c9:45:3b:4d:27:fa:37:7f:
5f:cf:83:e0:90:39:ce:29:5d:19:ef:d8:36:cd:1a:
6d:28:64:26:1a:96:7b:e9:c7:36:bf:b3:cd:d8:de:
84:d7:c6:6b:6a:1a:43:76:11:79:be:a5:18:db:38:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:26:E4:A9:17:0F:48:0E:58:BF:F9:0C:08:FE:C2:8E:3E:4D:E0:4D
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3137382e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.178.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:ef:15:09:ee:03:ec:0f:7b:aa:f4:0c:36:94:f2:67:a6:92:
40:b0:1e:98:bd:29:5c:e7:c2:79:ed:d0:4e:e7:ab:e6:52:f4:
21:f1:3d:1a:4e:0b:f7:9d:57:33:16:ac:52:6d:c9:d9:b3:46:
f5:d8:a6:cd:07:ed:33:7e:40:01:d5:7e:ff:a9:d8:7f:80:12:
d5:1a:07:ed:0a:59:24:51:5b:d7:17:5f:e3:ed:fc:1a:23:09:
03:7c:3d:98:d4:97:9e:b8:b6:d2:16:9e:ca:65:d4:e0:c9:67:
31:b2:33:c1:0f:74:8a:e0:09:2f:81:47:85:60:c1:2d:77:c8:
df:4d:4d:10:06:ce:23:07:07:bd:0f:13:61:7e:a1:f7:92:7a:
3b:24:05:01:f4:c3:de:08:df:e5:c8:da:01:a9:9b:14:c4:2b:
64:2f:f0:ac:d7:fb:e1:68:63:73:fc:1b:b9:47:af:0e:74:59:
b9:6e:88:1c:d5:c0:f0:a0:d9:57:09:0b:94:f7:51:5b:57:91:
cc:cf:c5:52:6d:d4:6d:5f:df:77:43:09:0d:4f:0b:68:e8:a8:
bd:af:db:dc:90:4b:c4:cf:9c:e8:ba:1d:d5:6d:04:c6:70:54:
f2:8d:a4:24:73:e6:ae:9b:09:78:33:a2:db:3a:a3:2e:81:c9:
b2:2a:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:48 2026 by rpki-client