
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231322e302f32332d3233203d3e203137373735.roa
File: 3132322e3134342e3231322e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: M9vdr6GKOvPagBtgxZ4z/hS8qe15zijBKLh/Wsd1cE4=
Subject key identifier: 52:46:14:64:26:F4:AE:1E:3C:27:CD:BF:FF:CA:5A:FD:63:41:B5:66
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 10537066470E3CEDB602DBACC18E0EC61E0AD767
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231322e302f32332d3233203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:20:13 +0000
ROA not before: Wed 17 Jun 2026 08:15:13 +0000
ROA not after: Wed 16 Jun 2027 08:20:13 +0000
asID: 17775
IP address blocks: 122.144.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:53:70:66:47:0e:3c:ed:b6:02:db:ac:c1:8e:0e:c6:1e:0a:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:15:13 2026 GMT
Not After : Jun 16 08:20:13 2027 GMT
Subject: CN=5246146426F4AE1E3C27CDBFFFCA5AFD6341B566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:d7:39:73:f2:e6:cc:b8:d9:ee:9f:ca:5b:
0e:e8:a1:a6:32:75:53:88:8f:7b:19:fa:d2:f3:63:
08:d7:8b:3f:92:db:59:ff:72:c3:b2:41:57:3f:0b:
0e:59:02:e8:43:e2:f8:72:fd:d4:05:68:c9:c8:db:
44:97:b8:44:b3:0e:d1:71:6b:d6:80:45:a5:1c:fc:
94:6b:a4:71:fb:83:c6:07:e2:e1:df:b0:56:6f:3f:
a2:b4:53:e6:0b:05:6e:15:14:48:6c:b8:81:44:5b:
5a:4c:4d:65:3b:a4:7d:cd:56:b8:c5:79:aa:22:6c:
3f:8a:60:81:32:14:6e:4c:d1:65:c4:c1:c5:d7:75:
2d:81:29:c3:ab:ed:ef:80:83:87:99:04:f7:04:fa:
f5:ed:14:63:e2:1a:38:cd:1f:01:cd:b3:d1:28:ba:
9f:db:f3:95:0d:de:77:63:cb:24:30:6a:ab:09:08:
e7:ee:f6:fd:38:3c:c6:68:b6:f0:89:f6:85:5e:78:
01:5e:f2:18:fe:5c:91:6a:6c:2b:03:ba:0c:7e:e2:
c6:78:9d:c3:ea:42:aa:d0:8a:7a:eb:aa:1b:7e:20:
67:c1:fd:67:19:d1:95:60:fd:87:66:87:1e:c9:c2:
eb:5f:52:20:6e:b2:b4:15:07:0f:99:aa:a4:d2:f0:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:14:64:26:F4:AE:1E:3C:27:CD:BF:FF:CA:5A:FD:63:41:B5:66
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231322e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:e6:ae:c3:f6:cf:30:eb:fe:a2:7f:6e:21:c7:48:68:ca:27:
fb:40:1a:00:b5:3c:90:87:37:8c:72:12:ae:8d:ac:d9:f4:e1:
e8:78:06:1a:4e:a9:b9:24:1f:c5:f0:2b:de:ba:93:e9:20:6f:
15:ed:0c:01:22:d5:40:c6:e1:ef:75:1f:2e:f9:05:71:97:b6:
fa:12:8a:b7:8e:16:8c:3f:51:d1:91:79:2c:b4:92:09:e1:df:
dd:22:1b:0d:c5:67:85:77:0a:60:26:c1:6c:d2:1e:00:de:d8:
cf:a6:a8:08:d7:4f:23:d1:c2:52:c0:01:7d:1f:7a:6f:a9:e0:
6f:42:9c:5b:2d:e4:62:be:fd:5b:bf:a8:f9:c5:76:b7:42:d1:
9f:6b:a8:05:c2:7e:87:66:d7:0c:36:12:df:92:9c:4f:64:e8:
23:e9:14:31:8e:2f:f0:ae:7a:0b:df:a9:88:9c:ba:d3:d7:3a:
32:e9:df:53:1e:7f:31:34:7c:26:96:19:b5:2a:dc:8c:a7:63:
c2:29:db:1d:02:5b:02:74:a3:d7:ec:9b:2d:52:85:b4:40:78:
51:48:6f:59:fe:57:92:be:88:35:10:8a:b7:9a:60:a0:4c:28:
57:d2:89:73:ce:3b:41:d6:4f:f5:a5:35:51:5e:c5:6d:43:0d:
ec:b3:8f:bc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUEFNwZkcOPO22AtuswY4Oxh4K12cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF
N0IwOEEwQjAeFw0yNjA2MTcwODE1MTNaFw0yNzA2MTYwODIwMTNaMDMxMTAvBgNV
BAMTKDUyNDYxNDY0MjZGNEFFMUUzQzI3Q0RCRkZGQ0E1QUZENjM0MUI1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyF9c5c/LmzLjZ7p/KWw7ooaYy
dVOIj3sZ+tLzYwjXiz+S21n/csOyQVc/Cw5ZAuhD4vhy/dQFaMnI20SXuESzDtFx
a9aARaUc/JRrpHH7g8YH4uHfsFZvP6K0U+YLBW4VFEhsuIFEW1pMTWU7pH3NVrjF
eaoibD+KYIEyFG5M0WXEwcXXdS2BKcOr7e+Ag4eZBPcE+vXtFGPiGjjNHwHNs9Eo
up/b85UN3ndjyyQwaqsJCOfu9v04PMZotvCJ9oVeeAFe8hj+XJFqbCsDugx+4sZ4
ncPqQqrQinrrqht+IGfB/WcZ0ZVg/Ydmhx7JwutfUiBusrQVBw+ZqqTS8ATdAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUUkYUZCb0rh48J82//8pa/WNBtWYwHwYDVR0j
BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1
NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMTMyMzIyZTMx
MzQzNDJlMzIzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM3MzczNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAXqQ1DANBgkqhkiG9w0BAQsFAAOCAQEALOauw/bPMOv+on9uIcdI
aMon+0AaALU8kIc3jHISro2s2fTh6HgGGk6puSQfxfAr3rqT6SBvFe0MASLVQMbh
73UfLvkFcZe2+hKKt44WjD9R0ZF5LLSSCeHf3SIbDcVnhXcKYCbBbNIeAN7Yz6ao
CNdPI9HCUsABfR96b6ngb0KcWy3kYr79W7+o+cV2t0LRn2uoBcJ+h2bXDDYS35Kc
T2ToI+kUMY4v8K56C9+piJy609c6MunfUx5/MTR8JpYZtSrcjKdjwinbHQJbAnSj
1+ybLVKFtEB4UUhvWf5Xkr6INRCKt5pgoEwoV9KJc847QdZP9aU1UV7FbUMN7LOP
vA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:29 2026 by rpki-client