
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231342e302f32332d3233203d3e203137373735.roa
File: 3132322e3134342e3231342e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: Nl9ertVforJkyIxdubv98b8eCTI9tsxQk3px56gDSAk=
Subject key identifier: E6:C8:E6:34:37:AC:F4:D5:A0:BE:FC:EA:8E:D0:05:D3:A2:35:F6:42
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 33ACAAD5AC01FAEBB6C0E6956EFAEF9CA4A0C4F0
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231342e302f32332d3233203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:20:13 +0000
ROA not before: Wed 17 Jun 2026 08:15:13 +0000
ROA not after: Wed 16 Jun 2027 08:20:13 +0000
asID: 17775
IP address blocks: 122.144.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ac:aa:d5:ac:01:fa:eb:b6:c0:e6:95:6e:fa:ef:9c:a4:a0:c4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:15:13 2026 GMT
Not After : Jun 16 08:20:13 2027 GMT
Subject: CN=E6C8E63437ACF4D5A0BEFCEA8ED005D3A235F642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:0a:4e:10:c9:a0:d9:c9:59:28:f9:22:e0:
0f:d2:25:fa:cc:12:6b:d6:37:96:9d:c1:e4:cb:b6:
96:0e:86:b8:5e:ae:d4:01:6b:47:b8:8e:f8:95:25:
67:90:30:84:5d:9c:2e:22:91:46:5c:27:1e:9c:03:
9a:c2:e5:0f:5e:e2:d9:50:fd:5d:ed:e3:a0:0c:c3:
8d:ef:31:f0:1d:ca:41:1b:d2:ce:f2:69:d5:07:3d:
74:65:12:26:64:41:f6:40:8c:de:a8:a0:61:9c:73:
b9:09:8e:12:d1:7d:c1:7f:54:15:94:01:36:46:a1:
df:30:ec:66:ab:cb:15:7f:77:0f:38:49:1c:3f:95:
77:7b:63:99:50:fa:e1:d9:78:2d:db:39:fd:20:12:
c1:26:42:b0:0d:4f:81:14:01:4e:28:92:c1:93:b0:
76:05:f9:df:f9:9f:aa:cd:6e:3f:72:aa:53:56:7d:
7a:c5:1a:04:27:cf:d0:a8:cd:3c:ea:c9:0d:b7:7f:
7d:e1:85:01:a4:30:5e:72:30:1c:43:fa:3c:20:52:
c2:a9:e5:43:6f:2b:5a:59:c8:c1:59:04:0b:d0:2f:
9f:a2:1f:48:79:3e:90:18:74:e1:73:6f:f9:dc:32:
cb:40:8c:6d:b8:6e:25:b9:c3:ea:87:fb:89:20:30:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C8:E6:34:37:AC:F4:D5:A0:BE:FC:EA:8E:D0:05:D3:A2:35:F6:42
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231342e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.214.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f7:2e:2c:fd:af:c1:d5:fb:93:a5:ce:a0:b5:ea:2e:08:e2:
d0:95:fd:07:41:e3:d2:66:1b:cf:3f:a6:a8:3c:a8:86:96:bb:
8e:be:50:40:5f:3d:db:32:91:4a:4a:52:ef:b1:0d:15:40:8e:
58:0c:8c:ac:e3:67:3d:fa:20:2a:ba:8d:c6:3a:c7:a6:c7:af:
1d:b5:d0:13:7b:91:29:76:f2:25:d8:c3:06:1c:77:7c:07:4f:
d2:94:f6:d7:16:fe:4d:15:a1:40:7b:b3:eb:49:c4:41:56:98:
d7:73:8b:a4:94:01:d7:36:4b:08:4a:f3:7d:80:fd:6d:96:ef:
2a:27:5f:51:a6:10:b6:25:ad:ea:63:58:ed:d1:b6:15:8d:58:
d6:e7:56:75:4b:57:49:79:06:1e:b1:0d:33:82:ee:2f:c8:87:
7f:66:e6:63:60:31:25:0d:13:fc:df:ba:16:8a:39:be:65:2f:
eb:d3:35:21:6c:7b:1f:ed:5d:7e:82:c2:d4:59:eb:d3:1f:e8:
6d:60:e3:20:aa:0c:db:a0:70:42:32:36:81:cd:4e:f9:c9:79:
d6:12:2e:46:6a:c7:a9:94:a4:0e:7e:bf:d0:8a:dc:4c:4b:b4:
30:f2:ec:43:54:b5:6b:3c:bb:b0:02:bf:ea:c2:c7:58:fa:33:
16:2d:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:00 2026 by rpki-client