
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231312e302f32342d3234203d3e203137373735.roa
File: 3132322e3134342e3231312e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: UBz79wdYPBmfpgHBvyLs+AWhvH0T8tgrxyGf7Nh7gYc=
Subject key identifier: 47:E7:07:DF:FC:95:BD:AB:E4:72:41:9B:E0:FB:E6:18:85:BB:86:84
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 4F9565B4B1397592A098017D1066A283AFD7017D
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231312e302f32342d3234203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:20:13 +0000
ROA not before: Wed 17 Jun 2026 08:15:13 +0000
ROA not after: Wed 16 Jun 2027 08:20:13 +0000
asID: 17775
IP address blocks: 122.144.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:95:65:b4:b1:39:75:92:a0:98:01:7d:10:66:a2:83:af:d7:01:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:15:13 2026 GMT
Not After : Jun 16 08:20:13 2027 GMT
Subject: CN=47E707DFFC95BDABE472419BE0FBE61885BB8684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:29:0f:c7:de:66:da:3d:8f:e9:70:2a:f5:
48:14:9e:1c:ab:da:6d:54:4f:06:3d:bf:71:1f:c4:
df:ee:f0:38:ba:37:d0:cf:83:34:5a:0f:1c:48:17:
e4:0d:e3:3d:67:87:f6:31:74:95:97:77:3f:3b:5a:
4f:57:6c:77:09:40:fd:1a:78:dd:22:b5:52:b9:b1:
67:63:76:da:8b:ce:eb:58:61:79:20:fe:0a:1c:04:
bd:e9:d5:6b:29:d5:e0:78:4a:b5:49:d3:eb:c3:91:
87:3e:39:05:01:fe:13:b8:30:19:05:af:e2:84:62:
c1:5f:6f:56:7a:d7:9d:94:7b:40:91:61:11:f0:f3:
34:09:37:74:a1:7a:c8:53:cd:ac:14:01:c8:82:5a:
fa:1a:b4:02:75:70:4c:c5:45:50:f4:98:11:e9:b4:
d3:38:d0:53:23:52:f8:bc:25:06:dc:de:08:f1:7f:
24:06:fd:79:69:b0:29:75:4a:23:44:03:e6:6e:9e:
0f:48:c4:81:35:b8:c3:5b:45:5d:58:10:e1:3b:8e:
f1:be:10:1f:46:b4:2d:f1:13:ca:93:c0:39:90:a6:
80:2c:df:37:7d:00:b8:c6:1f:aa:70:9f:5c:a6:79:
61:98:ca:9a:f3:33:a5:78:0c:18:76:62:07:22:34:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:07:DF:FC:95:BD:AB:E4:72:41:9B:E0:FB:E6:18:85:BB:86:84
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231312e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.211.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3f:a1:5a:00:a3:16:9f:5b:c8:36:21:68:8d:b0:b2:2c:d2:
e1:4a:72:1e:58:7b:ef:f9:36:f1:af:e7:7b:59:be:15:e8:e3:
19:c6:df:55:c5:db:41:15:0a:0e:c2:fd:af:24:c9:dc:70:b2:
22:c9:92:09:4f:31:4e:e0:4d:6d:b4:8a:23:1d:de:15:56:ed:
0f:6f:ef:ee:34:22:45:83:aa:25:62:79:18:8c:56:00:15:06:
34:af:80:72:1e:0b:42:fa:2b:ed:4b:a1:e7:65:ee:0d:17:e0:
25:32:d3:cd:be:03:c3:42:d9:85:4c:66:13:89:9c:80:df:fc:
0a:d6:7a:48:bf:2b:5f:12:2b:eb:29:d0:60:07:4d:b5:0e:6c:
f7:9d:c0:71:bf:87:7f:a2:dd:6b:ed:16:40:1d:e2:89:00:e4:
25:fc:da:cb:9b:ac:03:cf:57:07:0b:15:bf:a2:6c:14:b0:5e:
10:c0:05:44:d8:c8:0c:59:27:74:88:fe:50:22:77:e5:ff:57:
9e:c1:cd:fa:b4:9a:ca:5f:ad:07:40:0a:d4:f7:17:7b:56:b4:
bd:98:2e:4f:55:77:e8:ca:1b:c5:65:98:b7:49:c2:0b:dc:64:
31:17:a8:6c:bf:76:f7:96:8b:6a:55:a8:c3:04:84:9a:08:1d:
b4:8e:f4:07
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUT5VltLE5dZKgmAF9EGaig6/XAX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTcwODE1MTNaFw0yNzA2MTYwODIwMTNaMDMxMTAvBgNV
BAMTKDQ3RTcwN0RGRkM5NUJEQUJFNDcyNDE5QkUwRkJFNjE4ODVCQjg2ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvSkPx95m2j2P6XAq9UgUnhyr
2m1UTwY9v3EfxN/u8Di6N9DPgzRaDxxIF+QN4z1nh/YxdJWXdz87Wk9XbHcJQP0a
eN0itVK5sWdjdtqLzutYYXkg/gocBL3p1Wsp1eB4SrVJ0+vDkYc+OQUB/hO4MBkF
r+KEYsFfb1Z6152Ue0CRYRHw8zQJN3SheshTzawUAciCWvoatAJ1cEzFRVD0mBHp
tNM40FMjUvi8JQbc3gjxfyQG/XlpsCl1SiNEA+Zung9IxIE1uMNbRV1YEOE7jvG+
EB9GtC3xE8qTwDmQpoAs3zd9ALjGH6pwn1ymeWGYyprzM6V4DBh2YgciNK3FAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUR+cH3/yVvavkckGb4PvmGIW7hoQwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMTMyMzIyZTMx
MzQzNDJlMzIzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHqQ0zANBgkqhkiG9w0BAQsFAAOCAQEAYz+hWgCjFp9byDYhaI2w
sizS4UpyHlh77/k28a/ne1m+FejjGcbfVcXbQRUKDsL9ryTJ3HCyIsmSCU8xTuBN
bbSKIx3eFVbtD2/v7jQiRYOqJWJ5GIxWABUGNK+Ach4LQvor7Uuh52XuDRfgJTLT
zb4Dw0LZhUxmE4mcgN/8CtZ6SL8rXxIr6ynQYAdNtQ5s953Acb+Hf6Lda+0WQB3i
iQDkJfzay5usA89XBwsVv6JsFLBeEMAFRNjIDFkndIj+UCJ35f9XnsHN+rSayl+t
B0AK1PcXe1a0vZguT1V36MobxWWYt0nCC9xkMReobL9295aLalWowwSEmggdtI70
Bw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:42 2026 by rpki-client