
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233322e302f32322d3232203d3e203137373735.roa
File: 3132322e3134342e3233322e302f32322d3232203d3e203137373735.roa (raw, json)
Hash identifier: sjEScPzkHe2hapQ4owlGQPZ0MFwiRNX+oHP4Hjz/53U=
Subject key identifier: D3:06:65:79:D3:11:56:77:F1:52:56:C3:F5:25:4D:AB:8D:0E:68:8D
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 39E5697ED71842040F2E393FD0CB62333D0176CD
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233322e302f32322d3232203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:21:35 +0000
ROA not before: Wed 17 Jun 2026 08:16:35 +0000
ROA not after: Wed 16 Jun 2027 08:21:35 +0000
asID: 17775
IP address blocks: 122.144.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e5:69:7e:d7:18:42:04:0f:2e:39:3f:d0:cb:62:33:3d:01:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:16:35 2026 GMT
Not After : Jun 16 08:21:35 2027 GMT
Subject: CN=D3066579D3115677F15256C3F5254DAB8D0E688D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:32:78:c8:4a:de:dc:bf:95:9f:cc:21:fd:
a8:e3:71:8c:46:7c:f9:bb:8a:a9:42:40:e1:4b:d8:
33:8e:73:13:f7:d0:48:ae:04:9b:d7:2a:d1:b1:20:
36:57:5d:d6:cd:de:67:62:6e:c3:a5:d3:ce:cc:69:
47:6c:bb:af:57:3a:0d:05:c1:8f:cb:f4:1d:a8:3a:
45:a1:5e:91:4b:cd:72:d5:40:f7:d9:ba:bd:75:62:
0a:a3:01:91:71:a9:70:d6:a6:a3:bf:d3:b7:49:ea:
b0:f4:21:da:6c:54:6f:78:26:d5:62:d9:11:36:4b:
0f:47:cc:54:ea:b2:dd:ad:ad:bd:c4:88:bf:89:59:
f9:44:65:84:b7:1b:02:89:d7:fa:21:16:51:fb:12:
63:94:22:26:ed:7a:27:bb:91:9d:59:ce:c0:69:7c:
aa:5c:e8:96:ed:4c:c4:55:f0:75:be:a4:98:9a:ff:
bc:03:a8:43:dd:32:9e:24:0c:92:46:ba:9a:dd:ab:
15:bd:66:db:81:01:1e:b8:6a:2a:2c:b9:6f:4f:1a:
10:ed:11:63:e3:aa:a1:4f:7f:60:19:39:50:fb:67:
c0:5a:47:d7:14:6a:64:cf:d5:4f:dc:f4:08:eb:6a:
e0:7f:ea:bf:87:1b:24:fa:05:6d:e6:ec:b9:73:12:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:65:79:D3:11:56:77:F1:52:56:C3:F5:25:4D:AB:8D:0E:68:8D
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3233322e302f32322d3232203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:80:31:08:05:2e:07:7d:e3:76:8a:1e:43:36:52:83:fb:e6:
9e:73:46:c4:0c:4b:0c:ba:fd:14:ad:fa:04:8f:77:ed:5c:34:
e8:24:ca:15:1f:48:93:c7:08:e7:3d:f7:e5:af:bc:45:2d:f3:
4d:8e:6a:e7:eb:c0:ea:22:5f:e1:cc:e5:df:b1:43:31:9d:d7:
71:a5:a0:81:f6:6c:f4:51:e8:07:d8:56:85:2d:95:88:f8:28:
20:dd:ee:e4:4d:f4:ed:93:c0:a6:7b:87:68:d5:3e:21:14:e6:
25:dc:48:bd:3f:fa:9e:b5:e4:1d:a5:fe:5c:db:0b:6f:ea:80:
7a:a5:83:2c:36:72:30:ee:4f:13:f1:a4:e2:d2:f7:4f:e2:2a:
9e:85:c8:3b:ed:0e:d6:31:ac:16:ee:c9:98:1f:d3:55:d9:32:
17:5b:4a:4f:ca:3f:a4:fb:c6:85:23:e6:c4:b4:c5:cf:69:bf:
d8:fe:ac:4f:65:e5:a0:65:0b:ce:04:6d:e5:75:c4:83:ab:72:
82:12:37:fb:3b:68:42:2a:d5:f8:13:50:66:a4:98:00:d3:d4:
56:59:b9:88:1c:39:db:dc:25:ab:55:60:15:a9:d7:3c:cd:54:
10:d9:f2:d9:92:2e:2f:81:24:88:6a:ff:f2:07:13:5c:51:67:
87:88:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:47 2026 by rpki-client