
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3138302e302f32322d3232203d3e203137373735.roa
File: 3132322e3134342e3138302e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier: 5YiApVzGywzTPsbALhZVYovrTOMSu41geeEUK7g+LnA=
Subject key identifier: 66:BF:2D:A3:16:BC:24:6B:49:4F:57:91:CA:B0:FF:9E:BE:CD:48:96
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 65443D26F7B5A2F1AEAE3FB40353A14CD606F668
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3138302e302f32322d3232203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:15:31 +0000
ROA not before: Wed 17 Jun 2026 08:10:31 +0000
ROA not after: Wed 16 Jun 2027 08:15:31 +0000
asID: 17775
IP address blocks: 122.144.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:44:3d:26:f7:b5:a2:f1:ae:ae:3f:b4:03:53:a1:4c:d6:06:f6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:10:31 2026 GMT
Not After : Jun 16 08:15:31 2027 GMT
Subject: CN=66BF2DA316BC246B494F5791CAB0FF9EBECD4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:cd:1d:57:a3:0d:00:50:bf:23:97:18:f3:
f0:a0:bc:d6:15:ac:d6:52:2d:a7:be:97:dc:09:b3:
ee:15:35:bc:fa:1e:ed:4a:ab:67:eb:78:59:66:78:
34:2c:d0:c3:b7:87:f8:b2:43:7f:5e:d3:61:c8:b5:
78:d4:ad:62:80:16:70:c2:f8:7a:7f:c9:55:07:c1:
ad:e6:09:75:a8:b3:93:54:b7:17:f3:78:d3:5f:a4:
0c:87:60:45:14:b6:ae:31:04:1c:39:cb:54:3e:08:
9f:3c:14:a7:d2:4e:74:a9:37:1a:41:bb:44:65:43:
74:ad:3c:20:62:05:fc:70:71:4e:d1:a2:38:f6:45:
e9:93:d9:ac:f8:38:39:87:19:05:a0:98:ca:c1:9c:
fd:29:64:15:48:26:94:43:08:84:43:66:f3:a0:53:
75:75:d2:48:af:62:47:a0:e3:53:96:0f:8b:24:8e:
8c:7d:ff:b2:6f:d6:c6:35:7f:f4:9d:13:cb:51:49:
dd:7f:20:da:9b:f8:45:cc:f8:87:eb:8a:ad:e9:d6:
8a:a2:84:41:68:16:de:aa:58:ac:27:ba:19:e4:72:
b8:da:09:55:ce:da:c6:43:46:f9:5a:5c:82:c5:5a:
d6:6b:08:81:64:db:be:5a:99:77:6a:5a:0c:0b:b9:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:2D:A3:16:BC:24:6B:49:4F:57:91:CA:B0:FF:9E:BE:CD:48:96
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3138302e302f32322d3232203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:d4:1b:2a:b8:11:a1:02:92:a7:e2:8f:72:e7:d0:f1:39:9e:
e0:3d:de:db:2b:ef:b9:c4:2c:1a:d5:ad:0b:d6:e8:a3:fe:e0:
6f:99:3d:ce:bd:f1:9e:87:21:77:3d:6e:eb:ce:d4:ef:c9:79:
cf:99:2e:d1:85:8c:ec:0c:8a:7f:02:cf:fd:50:5e:e7:83:d9:
8c:4c:cb:17:49:f2:a3:9b:c9:ec:37:9f:d1:39:89:b1:82:5f:
65:fc:bc:23:eb:0a:75:f6:16:06:f6:9b:e7:c8:b7:23:e3:a0:
39:a3:9b:ad:9c:84:4b:5e:55:fd:e2:b2:ff:a8:1f:c2:d7:07:
d3:67:70:bb:2f:b7:4d:4a:6a:ca:85:fa:4a:30:0c:54:79:08:
c6:5d:d9:7c:2c:30:53:c5:1e:4b:e5:78:8f:0a:47:14:68:6b:
b1:e3:15:40:81:9b:80:20:b9:69:82:46:7e:5d:d3:f2:df:ed:
56:f1:68:3b:39:89:fc:4c:67:4c:b7:76:24:f1:39:23:15:0b:
5d:30:e7:df:c8:1d:69:f2:f7:ab:7e:0c:70:44:de:62:2f:92:
fd:08:5a:b5:ca:03:8e:cc:21:90:84:12:27:02:b7:1b:c1:d5:
07:6f:b1:18:ce:ad:da:39:3c:18:5d:23:49:24:6b:8d:ae:fe:
e2:c9:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:40 2026 by rpki-client