$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3132302e302f32322d3232203d3e203137373735.roa File: 3231312e3134342e3132302e302f32322d3232203d3e203137373735.roa (raw, json) Hash identifier: qCl+32FVy7bGyZWzMzZKLwQkAiP+uXDzClmrEjFkh1k= Subject key identifier: B6:3E:71:FB:85:72:23:57:98:C5:1F:62:53:53:16:75:82:FB:C0:E5 Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Certificate serial: 788982D2C978E1F3DD85A3CAE72A4D5AA47D066D Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3132302e302f32322d3232203d3e203137373735.roa Signing time: Wed 10 Jun 2026 07:03:56 +0000 ROA not before: Wed 10 Jun 2026 06:58:56 +0000 ROA not after: Wed 09 Jun 2027 07:03:56 +0000 asID: 17775 IP address blocks: 211.144.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:89:82:d2:c9:78:e1:f3:dd:85:a3:ca:e7:2a:4d:5a:a4:7d:06:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Validity Not Before: Jun 10 06:58:56 2026 GMT Not After : Jun 9 07:03:56 2027 GMT Subject: CN=B63E71FB8572235798C51F625353167582FBC0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:d2:14:a3:35:63:51:99:0c:00:b7:3c:28: 42:07:09:bf:c4:43:05:80:d6:ef:06:71:70:f8:9a: 65:66:61:c1:1d:17:62:a1:c1:cc:96:ac:f4:50:f7: 26:c9:33:8c:a1:fb:7d:f0:ff:5c:06:11:75:c7:da: cf:a8:5f:6b:42:59:81:e1:9f:27:f3:9b:d2:bf:43: 71:96:e2:14:87:a5:3f:fe:81:87:c2:75:64:a2:90: a7:6b:12:33:fe:01:99:89:da:9a:f8:7a:6e:ec:55: a9:df:0b:8e:fa:d4:0d:8a:64:a5:49:2d:9c:0a:23: 4b:85:7d:71:15:4e:b2:3a:36:b5:7a:88:eb:d1:cc: b1:82:db:ac:d9:2b:34:d9:61:a1:86:6e:c5:18:ba: 06:d0:87:0b:63:4e:d2:16:b6:33:fe:df:ac:13:db: 03:6e:b6:63:5c:25:36:94:8d:c2:79:b3:83:e9:c4: 77:cc:1a:26:fd:e7:bf:5e:18:62:9c:39:d2:26:d1: 27:ce:55:a1:1a:5c:18:d7:69:5d:64:bd:54:ce:01: 2d:f5:8d:7d:8b:1c:64:31:58:26:82:c8:b5:98:8a: d9:25:ac:26:72:85:5c:de:c8:56:c6:67:f1:0d:36: 14:e8:9a:70:b5:40:67:a3:ef:aa:49:9a:85:4b:05: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:71:FB:85:72:23:57:98:C5:1F:62:53:53:16:75:82:FB:C0:E5 X509v3 Authority Key Identifier: keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3231312e3134342e3132302e302f32322d3232203d3e203137373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.144.120.0/22 Signature Algorithm: sha256WithRSAEncryption 01:e4:a9:fe:ae:c0:8a:fe:76:dc:c6:d6:b5:da:7a:ca:5e:39: 3f:ea:5b:3d:f4:c0:25:3b:a6:9d:e0:a9:5b:e0:74:51:a8:21: 80:a3:9f:34:60:32:60:73:8f:9c:53:60:1b:c4:37:bc:7f:4e: d5:22:1b:7a:24:5d:16:87:fe:a9:9a:1b:50:79:d3:d9:4f:12: 2d:4c:56:28:e9:2f:f1:cf:0e:24:64:1f:45:a1:ae:fd:44:fa: a7:f6:91:ff:99:2a:81:04:cb:5d:20:42:53:96:81:8c:b6:f2: 74:f5:f3:b2:1d:e7:57:49:3d:8c:96:77:a9:30:18:d7:a3:a8: 21:1b:38:21:e8:56:cf:75:df:f9:03:45:8e:52:24:c9:2f:b8: 81:12:21:89:93:33:67:a2:ac:5f:3f:ed:c5:b5:fa:cd:49:9e: 83:4e:6a:04:15:08:36:ad:b1:dd:01:66:af:b2:a8:b7:4e:32: 2d:e2:2c:b3:ea:1d:73:94:cf:59:54:e9:a8:87:64:d9:8e:00: 57:76:3c:f4:98:fc:bd:d5:79:ad:77:84:ea:fb:d1:c0:e8:a6: 9b:f2:e4:a4:52:cf:d4:19:b4:1b:c6:09:ba:2a:ac:6f:dc:8b: ae:c5:ec:04:c6:ef:86:05:18:b1:41:95:15:00:b7:44:c3:e8: 6f:47:e3:97 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUeImC0sl44fPdhaPK5ypNWqR9Bm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF N0IwOEEwQjAeFw0yNjA2MTAwNjU4NTZaFw0yNzA2MDkwNzAzNTZaMDMxMTAvBgNV BAMTKEI2M0U3MUZCODU3MjIzNTc5OEM1MUY2MjUzNTMxNjc1ODJGQkMwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4tIUozVjUZkMALc8KEIHCb/E QwWA1u8GcXD4mmVmYcEdF2KhwcyWrPRQ9ybJM4yh+33w/1wGEXXH2s+oX2tCWYHh nyfzm9K/Q3GW4hSHpT/+gYfCdWSikKdrEjP+AZmJ2pr4em7sVanfC4761A2KZKVJ LZwKI0uFfXEVTrI6NrV6iOvRzLGC26zZKzTZYaGGbsUYugbQhwtjTtIWtjP+36wT 2wNutmNcJTaUjcJ5s4PpxHfMGib9579eGGKcOdIm0SfOVaEaXBjXaV1kvVTOAS31 jX2LHGQxWCaCyLWYitklrCZyhVzeyFbGZ/ENNhTomnC1QGej76pJmoVLBT6tAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUtj5x+4VyI1eYxR9iU1MWdYL7wOUwHwYDVR0j BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1 NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMjMxMzEyZTMx MzQzNDJlMzEzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM3MzczNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtOQeDANBgkqhkiG9w0BAQsFAAOCAQEAAeSp/q7Aiv523MbWtdp6 yl45P+pbPfTAJTumneCpW+B0UaghgKOfNGAyYHOPnFNgG8Q3vH9O1SIbeiRdFof+ qZobUHnT2U8SLUxWKOkv8c8OJGQfRaGu/UT6p/aR/5kqgQTLXSBCU5aBjLbydPXz sh3nV0k9jJZ3qTAY16OoIRs4IehWz3Xf+QNFjlIkyS+4gRIhiZMzZ6KsXz/txbX6 zUmeg05qBBUINq2x3QFmr7Kot04yLeIss+odc5TPWVTpqIdk2Y4AV3Y89Jj8vdV5 rXeE6vvRwOimm/LkpFLP1Bm0G8YJuiqsb9yLrsXsBMbvhgUYsUGVFQC3RMPob0fj lw== -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:57 2026 by rpki-client