
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e36352e302f32342d3234203d3e203137373735.roa
File: 3231302e31342e36352e302f32342d3234203d3e203137373735.roa (raw, json)
Hash identifier: oN0b5umjae+PZQCXltG6NzTW+fsQpQr3PGlZwgYJBB0=
Subject key identifier: 03:4A:AC:D3:ED:F0:38:9A:C4:DA:FD:81:1E:AF:F3:CA:1F:B4:1E:68
Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial: 1582591B3A80145CA8E734D22F74B3800A94A94B
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e36352e302f32342d3234203d3e203137373735.roa
Signing time: Thu 24 Sep 2026 00:47:49 +0000
ROA not before: Thu 24 Sep 2026 00:42:49 +0000
ROA not after: Thu 23 Sep 2027 00:47:49 +0000
asID: 17775
IP address blocks: 210.14.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:82:59:1b:3a:80:14:5c:a8:e7:34:d2:2f:74:b3:80:0a:94:a9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Validity
Not Before: Sep 24 00:42:49 2026 GMT
Not After : Sep 23 00:47:49 2027 GMT
Subject: CN=034AACD3EDF0389AC4DAFD811EAFF3CA1FB41E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:49:10:23:af:e6:b8:b1:36:3e:37:e6:d1:
23:5c:2a:b3:e3:da:58:8e:b3:22:4d:ff:eb:10:3d:
1c:dc:0c:b7:e8:96:3e:41:39:b2:51:40:6f:50:cf:
3b:0c:e2:ee:f0:cb:94:d2:e9:71:e3:25:4a:e6:be:
ea:18:a2:5b:b5:49:8b:a0:ea:d8:e9:c8:9d:d7:4d:
8d:ad:4d:bf:45:a8:c4:6b:ef:2d:1b:2f:02:76:83:
f7:e0:63:97:15:8a:6f:bb:c3:ee:21:27:43:32:d6:
c1:cf:4e:ea:58:e4:b5:78:81:a6:6e:fe:63:b7:12:
9c:c4:1c:41:b8:a0:ca:21:40:d4:df:e9:7f:7d:98:
2f:8b:fe:94:43:4f:18:e1:97:06:c9:d1:56:79:21:
01:a2:1f:3e:e2:56:44:f3:a6:e7:a3:9f:47:36:c2:
a9:1f:3e:13:61:7b:bb:66:80:dc:d9:1b:84:0f:c7:
18:31:b7:98:7d:ab:f5:c5:83:b1:ed:a8:4d:c9:40:
3e:19:4a:78:8a:68:bd:8f:03:56:c1:4c:13:8e:4c:
43:fa:b3:1d:12:05:3d:1d:e9:e3:47:95:dc:a8:62:
62:06:f1:2d:f2:eb:39:8a:96:dc:2d:62:10:71:96:
1e:db:b9:82:ce:4f:2f:37:a0:d0:8a:0a:82:86:0b:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:AC:D3:ED:F0:38:9A:C4:DA:FD:81:1E:AF:F3:CA:1F:B4:1E:68
X509v3 Authority Key Identifier:
keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e36352e302f32342d3234203d3e203137373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.14.65.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e1:9d:7b:77:39:bd:6c:fb:15:ac:da:d1:e8:a2:8f:63:c0:
6c:e4:78:42:e7:f5:14:90:9b:c9:1e:7d:ee:35:b5:cb:12:bd:
75:5c:d0:95:e9:21:15:76:f9:5c:c7:44:d3:37:6c:68:f3:32:
2f:60:21:72:82:b5:f2:b8:0d:6d:cb:fc:5e:44:0a:cc:d7:88:
2d:6c:dc:9b:81:33:ae:57:be:e6:7d:7d:9b:fc:7b:e7:d1:cb:
7a:b4:35:62:94:c8:39:8d:a5:0a:4b:9c:ae:5a:c2:d4:72:9a:
53:85:ef:af:79:0a:aa:69:f5:a7:2a:c1:ec:4a:98:3f:68:da:
e3:23:36:d8:42:50:57:aa:f5:7e:b9:d4:6c:c8:b9:0f:d0:9d:
03:6b:45:9f:15:3c:56:e4:40:6f:e9:18:cc:78:5d:14:8e:d1:
a3:a6:5b:76:3d:f9:e0:16:77:3f:c6:64:27:63:f0:6e:0f:8d:
9d:d3:57:61:88:d8:25:2b:8a:a2:6c:f4:84:03:1f:9f:e6:f8:
2a:a7:6d:6e:ad:e5:91:da:3a:00:de:b6:2d:ec:32:ca:a3:6a:
a0:94:0b:ec:e6:bc:6c:2f:66:3b:90:39:96:fc:18:e3:ab:7e:
94:82:23:99:ff:2a:a2:b1:3b:42:ed:2b:4f:6e:7e:f9:18:4e:
b6:e6:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:47:27 2026 by rpki-client