
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3139322e302f32312d3231203d3e203137373735.roa
File: 3132322e3134342e3139322e302f32312d3231203d3e203137373735.roa (raw, json)
Hash identifier: ZT1n/dHNOZgegO+VDG0+rqtNewWThPitKMeobAM2Bys=
Subject key identifier: 1E:EA:94:FE:0D:DC:55:6A:F9:53:53:6F:20:1E:EE:D9:FA:03:04:EF
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 3CBD0DB624AD7A471150979D2693DD0B0E6B38C4
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3139322e302f32312d3231203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:18:41 +0000
ROA not before: Wed 17 Jun 2026 08:13:41 +0000
ROA not after: Wed 16 Jun 2027 08:18:41 +0000
asID: 17775
IP address blocks: 122.144.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bd:0d:b6:24:ad:7a:47:11:50:97:9d:26:93:dd:0b:0e:6b:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:13:41 2026 GMT
Not After : Jun 16 08:18:41 2027 GMT
Subject: CN=1EEA94FE0DDC556AF953536F201EEED9FA0304EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:5d:05:0d:72:ab:58:b0:9c:25:a9:f1:97:
f1:e7:c0:8a:3c:e5:9c:6a:ae:f2:e5:34:01:de:38:
b6:8c:cd:0b:fd:1c:63:a6:23:2f:b1:7f:b9:1a:83:
c4:fc:e3:6b:92:b2:33:3f:91:34:59:d3:a0:c6:6e:
68:4d:e3:c9:56:a2:91:91:4e:c2:81:c7:e5:f6:41:
9f:ca:69:6a:fc:d2:a8:8e:10:98:51:1c:c5:84:7b:
28:6d:7e:c4:27:c0:7c:7a:15:04:d8:d3:e8:e4:12:
d8:2c:6a:46:81:62:c3:1f:ea:1e:6b:69:f5:25:bf:
23:cb:34:b9:bc:41:18:2e:5f:24:18:d5:9a:39:e9:
5c:9f:db:2c:67:8f:a7:87:df:c2:4e:67:0f:59:03:
fd:f9:40:6d:a1:2d:d0:ca:a0:a9:74:ff:52:92:9d:
55:b6:4c:6f:58:43:1c:2e:ce:49:2c:13:f7:44:d0:
32:58:f9:8a:18:15:a0:53:9f:35:54:80:7c:8a:1c:
b4:9a:8b:22:d8:e7:02:8b:63:6d:f4:b7:98:1b:fc:
c9:18:97:31:28:c0:5e:62:b2:b3:be:0f:00:6e:b3:
41:0b:08:53:eb:6e:69:b8:57:7a:26:c4:67:2a:1c:
34:4f:b0:87:89:56:a0:c1:91:4e:a3:7e:2a:be:4b:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:94:FE:0D:DC:55:6A:F9:53:53:6F:20:1E:EE:D9:FA:03:04:EF
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3139322e302f32312d3231203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.192.0/21
Signature Algorithm: sha256WithRSAEncryption
97:86:0a:f9:52:5a:93:20:d1:31:00:c8:a8:30:44:48:fb:fc:
71:9b:ac:0d:5e:9d:de:df:ad:77:93:73:66:0a:d4:86:fa:c3:
a5:21:b7:59:8c:c3:a8:f3:98:14:be:93:1f:a4:e4:0d:3e:2f:
0c:d2:36:63:6a:bc:a4:88:3c:95:5a:32:ef:35:e0:6a:c3:45:
d4:44:4b:b7:c7:d7:ed:16:7a:79:48:81:6d:50:32:84:41:67:
e1:4d:95:1f:f6:da:b8:17:e8:8b:2f:fb:b1:30:15:40:94:19:
9f:e9:15:1d:33:dd:40:ea:a5:8d:45:df:f6:0d:ce:37:1f:39:
ab:f6:87:89:08:86:8a:b3:5c:a6:7a:6b:b8:71:74:ec:25:db:
65:77:b9:27:3d:90:fa:47:de:85:6c:48:60:12:fc:b3:39:3e:
62:d2:b7:25:46:b7:b8:36:b3:75:ab:09:33:86:24:ff:6b:8a:
12:0c:1e:a8:ae:bb:93:4f:6d:01:82:02:06:d4:b1:40:84:1a:
51:c3:30:9d:c7:22:b0:5b:f5:a4:00:36:c1:1d:95:51:be:31:
0a:1a:99:1a:da:18:b1:5b:ff:75:61:5e:11:15:c8:bb:54:5e:
c1:7e:21:a8:94:57:53:a9:a9:1b:11:93:90:66:0a:97:d4:81:
05:7a:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:45 2026 by rpki-client