
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130312e302f32342d3234203d3e20313334353433.roa
File: 3231312e39392e3130312e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: 0hRUwN4aKRJdV+/94bpV1Y2VWSh2CWPq9l1XqmdIMIU=
Subject key identifier: 45:54:0B:28:67:95:90:DC:C0:5E:C7:24:2E:28:EA:08:C7:12:0A:50
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 54226C726A1E4260A83F88DA0BEB9A853D010579
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130312e302f32342d3234203d3e20313334353433.roa
Signing time: Wed 27 May 2026 07:41:39 +0000
ROA not before: Wed 27 May 2026 07:36:39 +0000
ROA not after: Wed 26 May 2027 07:41:39 +0000
asID: 134543
IP address blocks: 211.99.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:22:6c:72:6a:1e:42:60:a8:3f:88:da:0b:eb:9a:85:3d:01:05:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: May 27 07:36:39 2026 GMT
Not After : May 26 07:41:39 2027 GMT
Subject: CN=45540B28679590DCC05EC7242E28EA08C7120A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:53:bc:2f:12:97:e0:53:95:61:1a:fe:a9:
ac:c2:1e:e8:06:6c:ea:2e:d7:2b:bf:5b:c3:53:ac:
20:bb:22:89:91:d9:00:18:8d:8f:63:48:02:2c:db:
b6:ea:c2:ef:8c:41:e8:2f:bb:a1:ce:56:c7:0d:85:
a9:ff:32:c3:b0:af:cb:86:d2:4d:96:bc:03:bb:e6:
ae:f0:53:96:59:0b:a1:f6:d9:1c:f8:ef:b7:74:d2:
2d:10:88:de:3e:ba:1c:f5:08:60:e7:b2:33:ed:42:
53:67:55:ef:f5:56:63:8d:6d:76:91:ce:26:a0:38:
5b:cb:17:08:98:0f:d9:f1:95:bc:72:44:15:1e:6f:
f4:9b:83:2c:ef:fc:9a:9e:90:06:e0:a3:e0:1b:ea:
f0:ff:0c:28:71:96:0a:4e:7c:86:3b:b4:32:cd:7e:
dc:1d:2a:7f:31:1b:3d:90:b0:0a:c9:31:40:c2:bb:
24:25:41:f8:89:34:37:f0:93:0e:c2:6c:cc:5b:e5:
67:3e:55:fb:c1:2a:f7:ce:d4:99:ed:1a:13:c3:20:
33:69:b5:6d:2e:c0:f1:5c:08:70:fc:4c:09:85:9e:
bf:d7:69:d4:ac:04:43:a8:7c:3e:b5:96:18:95:40:
ef:4a:f8:a0:e1:f7:04:ca:3c:4b:6e:d4:8f:63:f2:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:0B:28:67:95:90:DC:C0:5E:C7:24:2E:28:EA:08:C7:12:0A:50
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/3231312e39392e3130312e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.99.101.0/24
Signature Algorithm: sha256WithRSAEncryption
60:79:75:a9:a7:bf:39:5b:01:e5:fb:81:ee:a2:c8:73:e0:7a:
be:c9:16:bb:a0:dc:7a:d6:ec:38:06:01:be:e2:60:60:f1:b3:
19:4e:f3:02:fb:86:f9:fc:54:6a:82:79:22:80:21:c1:4f:f2:
02:2e:f5:3b:60:6f:69:6f:7a:2d:5b:d4:f0:a7:5a:29:01:4f:
e8:06:58:63:7a:0f:e3:4d:ba:d8:ea:e3:96:6f:76:d0:13:a1:
c4:e6:60:d5:4b:c8:a1:da:2f:0b:e3:d7:ce:18:70:3e:0c:db:
71:98:be:06:e8:bf:a0:62:9d:d6:fc:a9:4c:68:1c:4a:80:14:
8c:1a:3a:9c:29:a9:c6:42:3a:8b:e7:7e:4a:da:14:b8:d8:05:
63:a2:9e:cf:18:4d:64:11:4c:fc:e9:5d:0b:2b:35:a0:67:66:
94:11:86:f1:0e:64:60:e1:5e:ef:5c:0c:18:0e:f2:4f:ff:5c:
9d:3e:d2:96:05:4c:8f:d7:ce:eb:ba:8d:fc:c1:5a:ca:0a:cc:
a2:a1:3a:e6:5f:4a:af:b3:39:c8:80:8b:73:6c:24:1b:46:54:
4a:30:8c:91:7b:31:c4:0c:40:c0:1c:e4:33:29:b9:cf:b6:58:
9d:79:71:d7:f1:40:f0:f8:04:be:09:08:11:e7:b8:76:2d:ec:
4f:81:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:07 2026 by rpki-client