
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa
File: 3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa (raw, json)
Hash identifier: dO/jBwncmUIy1XA8SN7giwOHRkKc8mStVDa6zlMyDkQ=
Subject key identifier: 22:65:31:8D:E0:B3:B3:82:38:3C:F6:F2:D2:C1:97:5F:20:3D:0C:44
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 57365570E975F3E4F8654A923CCCB5EF2122114B
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa
Signing time: Wed 17 Jun 2026 08:26:27 +0000
ROA not before: Wed 17 Jun 2026 08:21:27 +0000
ROA not after: Wed 16 Jun 2027 08:26:27 +0000
asID: 17775
IP address blocks: 122.144.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:36:55:70:e9:75:f3:e4:f8:65:4a:92:3c:cc:b5:ef:21:22:11:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Jun 17 08:21:27 2026 GMT
Not After : Jun 16 08:26:27 2027 GMT
Subject: CN=2265318DE0B3B382383CF6F2D2C1975F203D0C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:56:e6:2e:ed:ac:df:ad:4d:48:86:24:68:
95:6d:7f:15:e8:71:68:dc:4f:7e:6c:2c:07:5b:7d:
c6:a4:f4:68:05:d8:f4:a4:b7:53:07:10:76:26:b0:
e7:4e:72:31:af:22:d7:cd:ea:f4:a8:39:20:a5:bc:
55:28:4d:87:c3:c3:7b:68:17:89:7d:18:a2:e7:cb:
fd:6f:05:d8:a7:b5:04:89:5f:10:97:86:5c:54:3b:
d3:61:22:c5:ad:3c:6b:1a:40:c6:60:9b:92:dd:a3:
48:e4:da:01:7b:36:88:4a:ac:f4:5c:7a:33:ef:95:
24:dc:44:33:7a:83:bd:b7:80:6e:33:2e:1a:c4:04:
6b:84:46:f7:59:ce:5f:8a:f9:91:ff:ca:3c:04:84:
7b:9a:ce:cc:b0:2a:a7:d1:06:cb:57:02:60:fb:95:
25:5f:23:5e:a8:cd:dc:9f:18:fa:c2:b0:28:c8:71:
ee:3e:b3:47:00:95:62:c7:73:b6:a6:25:d0:e4:65:
34:6e:3b:d5:ff:e3:9a:e2:97:ad:b2:8e:c1:39:db:
80:59:c0:b8:f5:dd:72:83:25:6c:8e:c3:05:cc:85:
f7:98:10:e2:5b:16:0b:78:99:41:4b:f9:95:b5:2f:
50:d5:be:d2:24:a6:1d:8f:40:bc:f2:2c:6a:7a:6e:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:31:8D:E0:B3:B3:82:38:3C:F6:F2:D2:C1:97:5F:20:3D:0C:44
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3234382e302f32332d3233203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.248.0/23
Signature Algorithm: sha256WithRSAEncryption
92:43:38:b7:ca:9a:c5:91:64:e3:2d:6f:bd:8c:f7:05:99:3b:
1b:11:c4:37:b6:0a:59:5f:16:13:6a:8a:bf:6c:4f:60:8d:ea:
7d:66:d5:81:ff:fd:14:30:a8:59:4d:74:64:73:9b:fc:d4:96:
1c:71:1a:35:f3:97:72:26:fc:47:6f:24:90:2c:68:ce:b7:aa:
1b:d5:8b:27:71:58:a7:5e:36:4e:47:a6:88:de:ca:b5:a5:bb:
6c:b5:32:1b:40:8e:79:00:68:48:a0:a3:ba:f1:9b:38:2a:26:
9a:19:af:a2:4b:c0:94:f9:38:04:ea:28:af:50:94:b8:58:9e:
5c:c8:44:e4:4a:2d:8f:16:c9:98:3d:86:46:c5:92:63:b6:c0:
f1:3f:c2:e2:70:da:e7:04:33:35:8d:3e:92:e8:7d:18:13:79:
7d:53:d0:3e:cd:82:67:f2:68:6c:0f:b7:e6:e7:75:e0:36:bf:
8f:d7:0e:27:e3:e6:12:6e:0b:6f:0a:dd:27:03:86:12:36:d1:
f9:d0:28:d9:09:ac:1d:3d:1c:23:ed:f0:33:d0:13:9e:f5:4b:
80:60:05:59:aa:43:ba:cd:59:b6:75:12:bf:ad:03:ab:18:86:
0a:1b:42:2c:e9:38:ca:b8:60:30:c4:6d:00:f9:a3:f6:0e:d1:
68:45:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:49 2026 by rpki-client