$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e36342e302f32312d3231203d3e203137373735.roa File: 3231302e31342e36342e302f32312d3231203d3e203137373735.roa (raw, json) Hash identifier: q8zLhmE0PpvWC1jmRTN6YF/SLwJjzFMhEyrvcfvcsX8= Subject key identifier: D5:70:46:84:26:8D:27:9E:1E:F7:C7:0E:E7:61:A8:C7:4C:19:A4:81 Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Certificate serial: 56ADC56D9CCB5B26E714CF758B08227FFBF56A65 Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e36342e302f32312d3231203d3e203137373735.roa Signing time: Wed 10 Jun 2026 06:52:33 +0000 ROA not before: Wed 10 Jun 2026 06:47:33 +0000 ROA not after: Wed 09 Jun 2027 06:52:33 +0000 asID: 17775 IP address blocks: 210.14.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ad:c5:6d:9c:cb:5b:26:e7:14:cf:75:8b:08:22:7f:fb:f5:6a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Validity Not Before: Jun 10 06:47:33 2026 GMT Not After : Jun 9 06:52:33 2027 GMT Subject: CN=D5704684268D279E1EF7C70EE761A8C74C19A481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:44:39:a7:e0:ee:68:1a:ff:05:98:ea:5b: 11:65:ae:b4:a3:7c:65:13:77:98:80:69:9d:1f:57: 4b:a1:70:2b:3e:d0:59:f7:a4:46:d4:8e:a2:79:66: 53:be:8a:9c:2d:ea:b6:af:d4:20:79:4d:1b:80:47: da:9b:c3:76:ce:11:28:41:d1:6a:2c:3d:2d:c3:17: ee:da:d1:c4:87:84:9a:0e:57:dd:fa:65:a1:fc:86: 1c:e0:f7:c8:e0:e6:99:d5:17:7e:19:6f:bd:1a:70: c6:a4:1b:ca:df:34:04:d1:1c:41:42:bd:ed:a7:4e: 93:2a:19:d4:90:66:67:ce:56:b6:24:b4:a0:30:b2: f2:fe:ea:3a:c7:3b:10:ba:0a:76:92:bf:bc:c0:19: 78:ef:33:8c:cf:1f:94:6e:28:11:5e:d6:14:db:fa: 89:3e:53:41:eb:91:aa:57:56:79:d6:47:3a:64:91: 7b:d1:3c:a3:33:18:4e:59:01:5c:e2:98:20:20:d4: 3e:f0:1d:84:09:55:1c:4c:d8:3f:61:b3:62:d6:f7: bd:9d:46:35:fe:35:35:5f:0c:e1:c6:01:d5:66:0f: 4f:0b:ff:b3:bb:ea:56:84:57:c6:98:24:8b:a7:ce: ff:49:97:66:38:a8:1f:48:22:37:f8:be:fb:eb:3b: a4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:46:84:26:8D:27:9E:1E:F7:C7:0E:E7:61:A8:C7:4C:19:A4:81 X509v3 Authority Key Identifier: keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231302e31342e36342e302f32312d3231203d3e203137373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.14.64.0/21 Signature Algorithm: sha256WithRSAEncryption 13:80:18:46:13:a1:4f:f1:83:85:74:52:ce:27:11:27:b2:e7: d9:25:e7:db:3d:7a:80:56:c4:ac:bc:bc:39:63:25:65:24:0a: 9e:b1:ac:9f:b3:1e:9c:39:34:7c:9a:4c:a0:34:31:95:e1:c2: 94:fa:93:58:e4:8f:3a:f6:a0:ec:c3:a0:4e:b8:5c:4c:f4:87: 18:35:76:63:0f:49:ac:98:68:da:35:72:ca:97:f1:75:b8:df: 36:82:bb:9f:f0:37:df:1c:e2:1c:54:86:b5:be:c4:a9:9c:9a: d8:5a:9b:18:43:13:6f:4a:fe:02:b9:98:fe:af:8e:7b:19:22: b8:6e:96:ed:21:07:4b:7a:ad:16:a3:b2:f7:86:1d:3a:6a:a7: 7f:85:de:0c:02:c3:aa:2c:f3:ab:8e:62:af:55:90:d2:d3:9c: 81:83:e3:e9:89:68:80:58:d2:c2:99:1a:d5:e9:a1:28:e7:4d: 0d:fb:8a:e5:46:d0:e5:23:69:96:e7:0f:41:11:e3:47:c8:9b: e8:21:f6:11:b8:1c:01:3e:b3:a0:1a:2e:45:30:7c:9e:d0:36: 55:b5:4b:4a:5a:40:20:9e:ec:1a:0f:9e:27:16:87:01:1b:7b: 69:00:c6:8f:22:2d:d5:e7:2e:c0:0c:95:49:c9:75:b7:42:a0: e0:5c:de:00 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVq3FbZzLWybnFM91iwgif/v1amUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF N0IwOEEwQjAeFw0yNjA2MTAwNjQ3MzNaFw0yNzA2MDkwNjUyMzNaMDMxMTAvBgNV BAMTKEQ1NzA0Njg0MjY4RDI3OUUxRUY3QzcwRUU3NjFBOEM3NEMxOUE0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZ0Q5p+DuaBr/BZjqWxFlrrSj fGUTd5iAaZ0fV0uhcCs+0Fn3pEbUjqJ5ZlO+ipwt6rav1CB5TRuAR9qbw3bOEShB 0WosPS3DF+7a0cSHhJoOV936ZaH8hhzg98jg5pnVF34Zb70acMakG8rfNATRHEFC ve2nTpMqGdSQZmfOVrYktKAwsvL+6jrHOxC6CnaSv7zAGXjvM4zPH5RuKBFe1hTb +ok+U0HrkapXVnnWRzpkkXvRPKMzGE5ZAVzimCAg1D7wHYQJVRxM2D9hs2LW972d RjX+NTVfDOHGAdVmD08L/7O76laEV8aYJIunzv9Jl2Y4qB9IIjf4vvvrO6TdAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU1XBGhCaNJ54e98cO52Gox0wZpIEwHwYDVR0j BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1 NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjQ1OTUyOTU3ODc0MTk3LzAvMzIzMTMwMmUzMTM0 MmUzNjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzNzM3MzczNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9IOQDANBgkqhkiG9w0BAQsFAAOCAQEAE4AYRhOhT/GDhXRSzicRJ7Ln2SXn 2z16gFbErLy8OWMlZSQKnrGsn7MenDk0fJpMoDQxleHClPqTWOSPOvag7MOgTrhc TPSHGDV2Yw9JrJho2jVyypfxdbjfNoK7n/A33xziHFSGtb7EqZya2FqbGEMTb0r+ ArmY/q+OexkiuG6W7SEHS3qtFqOy94YdOmqnf4XeDALDqizzq45ir1WQ0tOcgYPj 6YlogFjSwpka1emhKOdNDfuK5UbQ5SNplucPQRHjR8ib6CH2EbgcAT6zoBouRTB8 ntA2VbVLSlpAIJ7sGg+eJxaHARt7aQDGjyIt1ecuwAyVScl1t0Kg4FzeAA== -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:04 2026 by rpki-client