$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130322e302f32332d3233203d3e203137373735.roa File: 3231312e3134342e3130322e302f32332d3233203d3e203137373735.roa (raw, json) Hash identifier: v+ln+Mt1HBhSjS0ALbA5hEMcB58BJhZtAIPyqxv1D0s= Subject key identifier: 21:58:D8:B0:17:69:77:B1:2D:07:88:ED:57:55:9A:2D:26:98:E1:B6 Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Certificate serial: 0197C005A3DE3EFB36123281312E5A0FA1919680 Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130322e302f32332d3233203d3e203137373735.roa Signing time: Wed 10 Jun 2026 06:58:36 +0000 ROA not before: Wed 10 Jun 2026 06:53:36 +0000 ROA not after: Wed 09 Jun 2027 06:58:36 +0000 asID: 17775 IP address blocks: 211.144.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c0:05:a3:de:3e:fb:36:12:32:81:31:2e:5a:0f:a1:91:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Validity Not Before: Jun 10 06:53:36 2026 GMT Not After : Jun 9 06:58:36 2027 GMT Subject: CN=2158D8B0176977B12D0788ED57559A2D2698E1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:22:96:0c:ab:06:1b:6e:c3:27:bc:e3:46: f3:cc:33:d8:46:95:30:b7:23:49:ba:a3:a6:ff:ba: 84:5a:6e:98:1a:cd:60:d3:01:55:cd:82:2f:63:56: 0e:05:62:47:10:e2:a8:16:6e:55:e8:3d:59:dc:35: 8c:da:f1:90:ec:51:8a:5d:58:61:85:1c:0e:48:4d: f8:2f:e2:ee:2b:09:ce:51:21:c7:d1:d6:8a:ae:fc: 00:9a:1e:11:3d:3b:f8:d1:8d:87:fa:15:c8:eb:29: 6c:56:65:cf:11:f5:32:ba:8c:90:d9:76:3b:97:99: 22:b9:c2:6a:90:13:25:ce:1a:4c:48:a5:4c:04:de: ed:34:1f:cb:0c:bb:af:09:88:84:fc:8f:be:cd:31: c6:fc:22:57:e8:39:37:74:36:ed:95:8a:4c:52:40: 9e:1d:36:1a:9e:a2:52:f4:9b:9b:7b:f4:ef:53:5e: 7c:97:3c:c7:0e:05:f9:42:e5:8a:0d:e6:99:3e:66: 96:99:e5:4d:fc:b6:d8:6a:cf:b4:b8:d3:38:e1:48: df:1d:25:7e:e4:0f:18:30:24:dd:f5:92:ba:bb:00: 82:2c:d4:37:2d:29:c2:5c:e1:aa:fe:08:ca:50:2e: f7:f5:c2:68:76:20:dc:56:f5:f5:fe:82:ea:bc:48: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:58:D8:B0:17:69:77:B1:2D:07:88:ED:57:55:9A:2D:26:98:E1:B6 X509v3 Authority Key Identifier: keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3130322e302f32332d3233203d3e203137373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.144.102.0/23 Signature Algorithm: sha256WithRSAEncryption 08:b3:1d:4d:85:40:48:1b:26:fb:63:36:ae:ac:73:f7:21:5f: 2d:5f:84:06:78:df:82:42:98:ab:d7:5c:bc:9a:1e:7d:6a:fe: 60:8d:ce:19:8b:b0:5c:40:bf:95:4d:2b:e2:dc:de:3d:26:41: 36:c8:76:10:54:57:47:88:88:49:00:19:e3:e5:58:84:cf:57: 02:0a:e0:e1:dd:8d:4a:0e:0b:56:f9:90:ee:97:59:33:46:07: fe:f6:df:dd:ca:c4:3d:d9:99:2d:70:f0:b3:a6:71:1a:31:de: 74:87:a7:2e:b7:9f:4b:23:e9:67:06:51:0f:14:a5:b5:6c:e5: cb:54:ad:46:a8:b3:82:d6:72:0b:b4:9b:7a:9b:8e:b1:33:5a: 9b:d1:99:9d:6a:54:f9:08:05:7a:dc:d5:62:19:69:3c:b2:bd: f5:16:71:77:6a:94:54:75:5e:5c:88:30:be:1f:55:ba:0e:43: 3d:3a:5b:db:cc:8d:9b:ab:51:44:da:de:c6:a1:6b:2d:7e:f7: c0:dc:51:ff:fd:9f:f5:0a:69:80:99:54:86:80:56:e1:72:9e: 68:42:e3:f5:46:81:6f:8e:25:76:7a:ad:da:a3:97:e1:13:30: b1:c6:33:86:78:99:e5:35:3f:61:37:c8:a9:45:77:a7:8a:6e: ef:df:fe:ea -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAZfABaPePvs2EjKBMS5aD6GRloAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF N0IwOEEwQjAeFw0yNjA2MTAwNjUzMzZaFw0yNzA2MDkwNjU4MzZaMDMxMTAvBgNV BAMTKDIxNThEOEIwMTc2OTc3QjEyRDA3ODhFRDU3NTU5QTJEMjY5OEUxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wiKWDKsGG27DJ7zjRvPMM9hG lTC3I0m6o6b/uoRabpgazWDTAVXNgi9jVg4FYkcQ4qgWblXoPVncNYza8ZDsUYpd WGGFHA5ITfgv4u4rCc5RIcfR1oqu/ACaHhE9O/jRjYf6FcjrKWxWZc8R9TK6jJDZ djuXmSK5wmqQEyXOGkxIpUwE3u00H8sMu68JiIT8j77NMcb8IlfoOTd0Nu2VikxS QJ4dNhqeolL0m5t79O9TXnyXPMcOBflC5YoN5pk+ZpaZ5U38tthqz7S40zjhSN8d JX7kDxgwJN31krq7AIIs1DctKcJc4ar+CMpQLvf1wmh2INxW9fX+guq8SCSFAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUIVjYsBdpd7EtB4jtV1WaLSaY4bYwHwYDVR0j BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1 NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMjMxMzEyZTMx MzQzNDJlMzEzMDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM3MzczNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAdOQZjANBgkqhkiG9w0BAQsFAAOCAQEACLMdTYVASBsm+2M2rqxz 9yFfLV+EBnjfgkKYq9dcvJoefWr+YI3OGYuwXEC/lU0r4tzePSZBNsh2EFRXR4iI SQAZ4+VYhM9XAgrg4d2NSg4LVvmQ7pdZM0YH/vbf3crEPdmZLXDws6ZxGjHedIen LrefSyPpZwZRDxSltWzly1StRqizgtZyC7SbepuOsTNam9GZnWpU+QgFetzVYhlp PLK99RZxd2qUVHVeXIgwvh9Vug5DPTpb28yNm6tRRNrexqFrLX73wNxR//2f9Qpp gJlUhoBW4XKeaELj9UaBb44ldnqt2qOX4RMwscYzhniZ5TU/YTfIqUV3p4pu79/+ 6g== -----END CERTIFICATE-----Generated at Sun Jun 14 09:51:52 2026 by rpki-client