$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e32302e302f32322d3232203d3e203435303833.roa File: 312e34352e32302e302f32322d3232203d3e203435303833.roa (raw, json) Hash identifier: DLKkjVBZDI/vPf99cy959ua3PLQ3lGw6g9F9n6lNm94= Subject key identifier: F8:56:6B:83:19:AF:9B:96:F8:F7:8E:F7:9D:60:6B:A8:A5:F0:AC:33 Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 27D26FD1A66A574B4EC43BB2581C51FADE476194 Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e32302e302f32322d3232203d3e203435303833.roa Signing time: Tue 16 Jun 2026 03:01:36 +0000 ROA not before: Tue 16 Jun 2026 02:56:36 +0000 ROA not after: Tue 15 Jun 2027 03:01:36 +0000 asID: 45083 IP address blocks: 1.45.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d2:6f:d1:a6:6a:57:4b:4e:c4:3b:b2:58:1c:51:fa:de:47:61:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: Jun 16 02:56:36 2026 GMT Not After : Jun 15 03:01:36 2027 GMT Subject: CN=F8566B8319AF9B96F8F78EF79D606BA8A5F0AC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:a7:34:cf:f1:a5:03:17:fb:b9:75:88:0b: 22:35:d7:28:f8:a7:6c:44:3f:77:5e:45:23:09:71: db:5e:8a:79:18:ad:1c:f5:c0:cb:0a:c0:7d:e2:f6: a1:7f:0a:44:e9:2b:b7:2b:05:e5:f3:02:82:d4:b6: 5b:0c:e2:46:76:2c:96:21:c6:be:f7:d2:15:07:7c: 44:c8:ea:9c:02:b2:b9:75:6a:57:79:a7:f3:47:53: 24:fc:ca:90:8e:ad:6d:2a:68:b2:77:67:d4:97:f9: 3c:d5:c0:f1:0f:eb:1d:7d:d6:11:52:ae:34:2e:62: da:20:3a:e3:0f:26:bf:2b:ab:8a:6f:55:ad:80:e4: 30:ef:71:49:3d:73:24:92:b9:d5:4e:11:9b:35:68: 35:7b:de:b2:7b:88:17:9b:f2:e4:99:ab:25:11:70: 36:57:b5:ae:dd:2a:12:f8:61:60:cd:18:09:9f:4d: e7:52:ae:1f:16:2a:48:0d:fe:ec:32:8a:0a:4c:a5: 19:21:e0:f7:6b:8a:24:33:79:9a:a3:54:22:cd:d7: e9:27:ee:e4:ce:c6:09:6b:c2:ab:47:e6:c7:db:09: c2:42:69:9b:66:99:00:b9:fe:54:8f:d5:2f:60:90: 64:1a:06:47:ed:02:26:e9:dd:09:de:eb:04:33:39: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:56:6B:83:19:AF:9B:96:F8:F7:8E:F7:9D:60:6B:A8:A5:F0:AC:33 X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e32302e302f32322d3232203d3e203435303833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.45.20.0/22 Signature Algorithm: sha256WithRSAEncryption 96:27:5f:e1:2a:9e:bb:01:ca:61:be:68:1e:81:e6:fa:c0:e0: 9c:4a:c7:0f:36:44:76:5c:ad:02:d2:18:09:bb:c6:8d:ce:0d: 9d:39:9a:46:51:8b:fa:f8:d1:66:88:2d:eb:d7:75:e0:3e:77: d1:8b:89:97:ee:8c:d6:df:b4:97:9e:2f:24:77:1d:ec:08:80: 92:c0:a3:79:9a:68:7f:0d:ed:3d:18:c9:8e:63:12:6f:6e:7e: 75:4a:3d:1c:ea:4e:e2:d7:ac:1c:0a:70:e1:89:46:e6:24:4f: 01:07:37:77:50:8f:53:2c:55:c8:ae:d2:be:a3:c6:02:d4:19: ed:78:84:0d:71:8b:8c:ce:fc:3b:d9:74:1b:15:dd:52:a9:fd: f3:7f:4b:a4:f7:ff:1d:73:97:80:05:d8:9b:20:0f:de:6c:ba: f0:fb:7b:72:31:83:91:71:e6:1f:cd:b5:3a:86:87:af:ef:46: 0a:66:48:c1:e5:26:3b:a1:34:eb:22:0b:51:c6:32:8e:fc:95: f5:b9:68:26:33:6e:1c:89:fe:ea:e5:e7:b6:42:11:3c:e1:a0: d5:59:7f:53:2c:34:1a:f0:8a:e5:bb:df:76:91:cf:5d:c4:fa: 96:19:8c:76:a0:a2:6c:ba:1d:24:04:7f:8f:07:ad:90:3e:8f: 74:d2:86:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUJ9Jv0aZqV0tOxDuyWBxR+t5HYZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA2MTYwMjU2MzZaFw0yNzA2MTUwMzAxMzZaMDMxMTAvBgNV BAMTKEY4NTY2QjgzMTlBRjlCOTZGOEY3OEVGNzlENjA2QkE4QTVGMEFDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1Kc0z/GlAxf7uXWICyI11yj4 p2xEP3deRSMJcdteinkYrRz1wMsKwH3i9qF/CkTpK7crBeXzAoLUtlsM4kZ2LJYh xr730hUHfETI6pwCsrl1ald5p/NHUyT8ypCOrW0qaLJ3Z9SX+TzVwPEP6x191hFS rjQuYtogOuMPJr8rq4pvVa2A5DDvcUk9cySSudVOEZs1aDV73rJ7iBeb8uSZqyUR cDZXta7dKhL4YWDNGAmfTedSrh8WKkgN/uwyigpMpRkh4PdriiQzeZqjVCLN1+kn 7uTOxglrwqtH5sfbCcJCaZtmmQC5/lSP1S9gkGQaBkftAibp3Qne6wQzOWdZAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU+FZrgxmvm5b49473nWBrqKXwrDMwHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTMy MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM1MzAzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC AS0UMA0GCSqGSIb3DQEBCwUAA4IBAQCWJ1/hKp67Acphvmgegeb6wOCcSscPNkR2 XK0C0hgJu8aNzg2dOZpGUYv6+NFmiC3r13XgPnfRi4mX7ozW37SXni8kdx3sCICS wKN5mmh/De09GMmOYxJvbn51Sj0c6k7i16wcCnDhiUbmJE8BBzd3UI9TLFXIrtK+ o8YC1BnteIQNcYuMzvw72XQbFd1Sqf3zf0uk9/8dc5eABdibIA/ebLrw+3tyMYOR ceYfzbU6hoev70YKZkjB5SY7oTTrIgtRxjKO/JX1uWgmM24cif7q5ee2QhE84aDV WX9TLDQa8Irlu992kc9dxPqWGYx2oKJsuh0kBH+PB62QPo900oZn -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:06 2026 by rpki-client