
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231362e302f32322d3232203d3e203137373735.roa
File: 3132322e3134342e3231362e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier: w2MmPvKIx5TFrLnOIK1It/3SzXRiwabHJzEvbhdcuGM=
Subject key identifier: 99:75:F7:42:12:0B:05:6C:60:BB:7F:A9:98:75:E4:97:CA:BE:BE:AB
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 390654DB64382440999242BB35F0B850D618B12D
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231362e302f32322d3232203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:20:25 +0000
ROA not before: Wed 17 Jun 2026 08:15:25 +0000
ROA not after: Wed 16 Jun 2027 08:20:25 +0000
asID: 17775
IP address blocks: 122.144.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:06:54:db:64:38:24:40:99:92:42:bb:35:f0:b8:50:d6:18:b1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:15:25 2026 GMT
Not After : Jun 16 08:20:25 2027 GMT
Subject: CN=9975F742120B056C60BB7FA99875E497CABEBEAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:14:87:4e:b3:fb:6f:c1:c5:10:cb:85:43:
f9:93:79:52:aa:da:e3:05:28:2f:66:c8:6b:e2:0c:
70:a9:70:f4:d1:93:77:19:3d:30:5b:ee:4b:10:35:
b2:31:d2:80:a4:c7:b2:e7:84:1f:25:ee:a0:a2:6b:
d9:d3:de:c7:74:25:bb:76:44:82:35:37:cc:75:9f:
95:ec:78:e5:a8:1c:b8:79:b6:5f:39:e7:42:4a:6d:
26:b2:3b:38:e9:c9:af:50:ab:8c:b9:20:94:78:58:
06:b2:c9:46:a1:8a:1c:35:08:87:0d:d7:ea:47:5c:
1f:31:4d:e8:64:d4:8c:fd:ee:0e:0f:5f:aa:f2:c8:
e8:0b:f8:39:a8:4a:1f:df:9e:b5:ae:a4:6f:a2:da:
76:0c:3d:e6:e4:2a:eb:e1:fb:52:c2:8e:9f:4f:09:
71:8e:33:7d:b6:4d:56:cc:19:7e:c3:e7:9f:4f:40:
a5:29:99:11:d4:3f:a9:ac:15:56:8e:7a:39:48:f0:
69:c3:ff:50:0e:4b:c4:89:7f:37:67:46:cb:b2:e0:
50:59:6d:51:40:f8:9e:7a:e3:30:5f:3a:b8:03:e1:
64:eb:be:86:5d:49:2f:78:8f:7d:f3:85:ba:73:31:
d3:2e:11:82:d1:17:96:ab:27:11:f7:6b:b9:4d:ed:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:F7:42:12:0B:05:6C:60:BB:7F:A9:98:75:E4:97:CA:BE:BE:AB
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3231362e302f32322d3232203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.216.0/22
Signature Algorithm: sha256WithRSAEncryption
28:54:aa:ee:3b:59:c1:4e:eb:55:12:cd:78:c6:a0:e7:31:61:
1a:c6:80:85:6f:e1:91:93:11:45:7f:81:c4:c7:d0:d7:46:c0:
30:e5:b2:0b:bd:f9:9f:d4:1f:c7:d8:a4:5e:53:5e:6f:17:ad:
b4:7c:06:6d:ea:ed:44:c3:b1:8f:0d:c9:ec:d2:91:b4:ae:40:
32:15:26:98:68:fe:98:39:40:27:4a:e9:f1:5d:4f:fe:db:97:
a5:dc:51:86:7f:8a:db:da:1d:38:0a:48:9e:2d:bc:4a:a5:e0:
95:3f:69:32:aa:ad:94:87:35:5f:21:d1:23:81:6b:80:d2:7d:
8c:de:24:a5:ee:1f:b2:67:49:94:26:8f:a3:b5:30:db:e7:f8:
b7:f7:da:14:07:be:d0:60:f3:61:9a:9b:fb:8d:b4:f3:43:55:
b3:bf:e6:c4:76:22:14:cd:20:3f:c4:c6:c0:87:e4:10:69:56:
5c:79:7a:02:5b:ff:1d:5c:c3:05:d6:e8:e8:1d:cb:ad:63:95:
d0:c9:3b:87:56:ef:e4:22:58:f7:a4:6b:95:c8:82:38:96:e6:
08:9e:ba:18:bc:64:00:cf:cf:5e:75:cd:8c:1b:4a:5c:f0:79:
1e:42:51:7d:57:68:23:e1:30:1b:d6:77:2e:28:86:a9:64:99:
d7:fd:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:42 2026 by rpki-client