
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234302e302f32342d3234203d3e203137363231.roa
File: 3132322e3134342e3234302e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: Z1YwYjm7v7HDo/USweZogcZNNZZnuymkg15ckkTwBYc=
Subject key identifier: AA:66:D4:F0:90:1C:4F:12:72:9F:8F:50:BC:9D:CC:A8:88:81:3C:C2
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 457B60CDD7695C21843667008F30235299D14932
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234302e302f32342d3234203d3e203137363231.roa
Signing time: Wed 17 Jun 2026 08:28:07 +0000
ROA not before: Wed 17 Jun 2026 08:23:07 +0000
ROA not after: Wed 16 Jun 2027 08:28:07 +0000
asID: 17621
IP address blocks: 122.144.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7b:60:cd:d7:69:5c:21:84:36:67:00:8f:30:23:52:99:d1:49:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:23:07 2026 GMT
Not After : Jun 16 08:28:07 2027 GMT
Subject: CN=AA66D4F0901C4F12729F8F50BC9DCCA888813CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:c1:52:85:a2:1c:35:02:ea:77:f2:8a:ac:
a3:ee:04:d4:01:72:f1:01:89:f1:47:9a:2f:4c:98:
ff:21:b9:81:d2:c7:0e:8f:14:3f:bc:db:2a:ed:4b:
f5:ee:72:2f:ea:0b:43:61:12:fa:32:b8:da:86:48:
c9:3a:f8:86:74:1a:89:77:4f:e1:e8:5a:70:af:32:
f2:8b:37:f5:5b:f2:c9:34:66:f9:71:26:92:2d:16:
ad:f1:80:ad:33:24:bf:a7:b6:20:3b:01:f8:10:5a:
dc:d2:d6:18:e5:ff:2d:d6:55:3d:3e:4f:35:04:2b:
81:91:15:e8:ee:d6:3c:b9:68:6a:3d:bc:9e:c2:d8:
8c:db:e6:0e:a4:ec:20:a9:d6:a3:90:10:a7:6d:70:
79:69:17:c4:44:c6:11:52:cf:e4:ba:a2:1f:c7:2d:
fb:5c:98:08:7f:ea:e4:9d:cb:35:44:10:c7:57:25:
94:95:54:f2:e9:b6:a3:24:d7:9c:51:34:6e:78:5c:
88:89:84:49:78:ca:b8:0f:0a:88:12:b5:23:46:37:
8f:1f:e5:c1:41:d6:bd:99:d1:af:7a:80:7e:cc:bd:
cb:cf:35:7a:53:65:37:17:6b:c8:83:5f:25:3d:5a:
da:00:aa:b9:3d:c6:82:4a:86:c4:86:06:4e:9f:e7:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:D4:F0:90:1C:4F:12:72:9F:8F:50:BC:9D:CC:A8:88:81:3C:C2
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234302e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.240.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3e:49:02:dd:59:1c:ed:28:2f:bd:39:b0:35:b5:76:06:64:
dc:64:f7:a7:60:da:68:9c:fb:f6:d3:53:90:d6:78:76:7f:2f:
22:e4:fb:2c:aa:53:7c:14:b6:61:dd:90:dd:72:bd:b5:da:c6:
e5:ff:a5:b5:e3:c3:41:cf:35:ed:2c:4c:3d:cd:c1:c1:80:16:
56:3b:37:d0:ff:06:8d:62:2b:22:02:cc:56:97:0a:8b:86:d7:
9b:b6:48:b0:38:48:38:72:9f:fb:0c:1d:dc:c8:52:01:52:b7:
34:e3:2c:68:34:ce:69:05:f8:b3:d9:9b:87:9c:13:7d:2c:8a:
10:aa:36:68:69:7a:aa:ae:9c:6e:1b:35:ad:ab:79:99:95:d8:
a2:e2:9e:b1:2f:46:bf:db:00:9b:9a:ac:cb:4b:6c:f8:32:dd:
41:95:95:15:63:e0:41:b3:98:5d:0b:dc:6c:eb:a3:97:d2:b4:
66:37:e5:90:7c:29:85:37:17:6b:e0:01:a2:54:77:b4:ea:38:
59:12:d9:9f:67:1f:00:d5:68:97:0d:89:fb:19:b2:ca:c9:0a:
e7:40:f1:81:25:a8:b7:1b:2d:30:9e:ee:a9:9a:57:91:a2:ad:
49:b9:0f:86:64:b1:74:b0:44:6b:3d:32:55:b7:5b:0b:2a:a3:
71:3f:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:49 2026 by rpki-client