$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e322e302f32342d3234203d3e203137373735.roa File: 3230332e39352e322e302f32342d3234203d3e203137373735.roa (raw, json) Hash identifier: CkNrcH91bRm9gLJSGAw8X+SA9QINX1VZkx8uC1vwpR8= Subject key identifier: FF:9F:08:B7:8B:F9:81:67:A8:D1:26:C0:CC:AB:15:AA:1D:E3:8A:A8 Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Certificate serial: 6936A21F02B1D86A0027C52AE37168AD9E1CD2E7 Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e322e302f32342d3234203d3e203137373735.roa Signing time: Wed 10 Jun 2026 07:08:16 +0000 ROA not before: Wed 10 Jun 2026 07:03:16 +0000 ROA not after: Wed 09 Jun 2027 07:08:16 +0000 asID: 17775 IP address blocks: 203.95.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:36:a2:1f:02:b1:d8:6a:00:27:c5:2a:e3:71:68:ad:9e:1c:d2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Validity Not Before: Jun 10 07:03:16 2026 GMT Not After : Jun 9 07:08:16 2027 GMT Subject: CN=FF9F08B78BF98167A8D126C0CCAB15AA1DE38AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:24:39:e7:63:44:c1:0c:46:e4:d2:91:86: 29:e0:e1:5c:71:72:dd:32:8e:e3:14:4d:3c:0b:99: 82:ea:38:db:e0:85:6d:2a:42:73:04:1e:b3:9a:e9: 72:22:1e:1a:11:81:18:d1:d3:23:0a:9e:e8:41:4b: c2:52:d2:b0:9f:17:ae:ea:1e:ae:33:d6:c1:16:51: d3:7f:55:46:be:d0:e6:2d:41:56:60:11:f5:63:5f: 37:90:60:4b:99:14:ad:05:09:43:c6:24:c4:e7:27: ea:2e:37:10:7a:63:ed:b0:ab:2c:f4:91:a4:fe:99: 56:01:72:ad:67:07:96:ea:43:a6:0f:0f:8c:4c:ea: 8b:9a:29:2f:f1:d1:ec:64:59:7d:a9:89:d2:e5:7c: 60:2c:56:3b:f3:c9:0a:c6:10:db:d8:ff:f7:6a:94: ac:13:57:dc:6c:5d:fb:6e:97:27:6d:aa:42:46:c8: 7e:dd:d0:95:73:71:0f:47:c7:71:d2:32:89:0d:3c: bf:5d:a8:da:b3:d1:4b:ff:1f:12:fd:44:82:e2:36: fe:0d:44:4a:24:dc:bd:99:28:80:8e:3d:2f:ca:d4: 53:27:92:b3:54:85:04:e0:a8:40:a1:f2:0e:f7:80: 37:88:6d:5d:25:55:28:8b:2f:bb:0d:d7:93:3a:0f: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9F:08:B7:8B:F9:81:67:A8:D1:26:C0:CC:AB:15:AA:1D:E3:8A:A8 X509v3 Authority Key Identifier: keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3230332e39352e322e302f32342d3234203d3e203137373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.95.2.0/24 Signature Algorithm: sha256WithRSAEncryption 14:6e:6b:4b:52:df:c1:17:b7:33:53:0c:8d:04:ba:f9:1c:ac: 8e:c3:45:40:07:32:d9:6a:01:82:43:b9:51:b6:52:41:0f:26: 3a:44:df:35:bf:36:56:6b:8e:43:3f:f3:cc:e3:7c:52:5a:fa: 0c:96:c0:09:81:d1:f2:70:6d:2b:5f:d2:e1:ee:d0:c7:34:e1: 27:29:5e:96:d7:94:ca:81:04:6a:ee:86:de:ba:4b:a1:3e:37: b3:e7:03:4f:69:9f:71:48:ae:9b:57:1d:55:0f:d6:91:46:34: 79:4f:ec:60:bd:da:1f:a9:1d:2c:67:2a:9c:6e:ce:37:6a:5b: 94:92:74:6f:a8:73:01:38:5e:b4:c5:34:0b:25:f9:0a:0d:8e: ba:90:ab:8e:a3:1b:b4:a6:ee:4b:9b:db:10:21:b4:85:94:de: d1:a2:2a:5b:c7:39:c9:8b:8e:4a:6c:58:ed:f4:76:9f:1f:67: ef:08:6d:9c:7b:e2:49:bf:92:7e:b8:11:72:c1:18:f9:af:d5: 1e:21:54:97:3c:af:29:8b:ca:54:2e:13:44:ba:bb:8b:59:db: 24:05:b8:5f:89:8a:34:e4:48:5a:34:ea:88:61:ba:3e:25:a2: d0:2e:77:88:d8:72:58:bb:d9:de:5f:b5:f9:ad:b7:1b:bf:4a: a2:87:a9:f7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUaTaiHwKx2GoAJ8Uq43ForZ4c0ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF N0IwOEEwQjAeFw0yNjA2MTAwNzAzMTZaFw0yNzA2MDkwNzA4MTZaMDMxMTAvBgNV BAMTKEZGOUYwOEI3OEJGOTgxNjdBOEQxMjZDMENDQUIxNUFBMURFMzhBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMiQ552NEwQxG5NKRhing4Vxx ct0yjuMUTTwLmYLqONvghW0qQnMEHrOa6XIiHhoRgRjR0yMKnuhBS8JS0rCfF67q Hq4z1sEWUdN/VUa+0OYtQVZgEfVjXzeQYEuZFK0FCUPGJMTnJ+ouNxB6Y+2wqyz0 kaT+mVYBcq1nB5bqQ6YPD4xM6ouaKS/x0exkWX2pidLlfGAsVjvzyQrGENvY//dq lKwTV9xsXftulydtqkJGyH7d0JVzcQ9Hx3HSMokNPL9dqNqz0Uv/HxL9RILiNv4N REok3L2ZKICOPS/K1FMnkrNUhQTgqECh8g73gDeIbV0lVSiLL7sN15M6D/1FAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU/58It4v5gWeo0SbAzKsVqh3jiqgwHwYDVR0j BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1 NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjQ1OTUyOTU3ODc0MTk3LzAvMzIzMDMzMmUzOTM1 MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNzM3MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLXwIwDQYJKoZIhvcNAQELBQADggEBABRua0tS38EXtzNTDI0EuvkcrI7DRUAH MtlqAYJDuVG2UkEPJjpE3zW/NlZrjkM/88zjfFJa+gyWwAmB0fJwbStf0uHu0Mc0 4ScpXpbXlMqBBGruht66S6E+N7PnA09pn3FIrptXHVUP1pFGNHlP7GC92h+pHSxn KpxuzjdqW5SSdG+ocwE4XrTFNAsl+QoNjrqQq46jG7Sm7kub2xAhtIWU3tGiKlvH OcmLjkpsWO30dp8fZ+8IbZx74km/kn64EXLBGPmv1R4hVJc8rymLylQuE0S6u4tZ 2yQFuF+JijTkSFo06ohhuj4lotAud4jYcli72d5ftfmttxu/SqKHqfc= -----END CERTIFICATE-----Generated at Sun Jun 14 09:51:29 2026 by rpki-client