$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3230302e302f32322d3232203d3e203435303833.roa File: 312e34352e3230302e302f32322d3232203d3e203435303833.roa (raw, json) Hash identifier: 9HBAp2LUvtbvyUc15giZ3bBrmku31pWmxUKJanYmrh0= Subject key identifier: 85:CA:74:B7:84:7F:B4:3B:B5:CA:5A:96:01:EF:65:D5:FD:E8:E9:E5 Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 314A4F92B0250DBD860D45E46686F01D90D897E2 Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3230302e302f32322d3232203d3e203435303833.roa Signing time: Tue 16 Jun 2026 03:13:09 +0000 ROA not before: Tue 16 Jun 2026 03:08:09 +0000 ROA not after: Tue 15 Jun 2027 03:13:09 +0000 asID: 45083 IP address blocks: 1.45.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4a:4f:92:b0:25:0d:bd:86:0d:45:e4:66:86:f0:1d:90:d8:97:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: Jun 16 03:08:09 2026 GMT Not After : Jun 15 03:13:09 2027 GMT Subject: CN=85CA74B7847FB43BB5CA5A9601EF65D5FDE8E9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:f2:42:98:fd:6a:31:5e:76:22:60:78:71: d3:3a:b6:be:eb:87:49:92:c3:fb:86:87:53:b4:b6: 95:e2:89:4e:94:1b:67:2a:9d:45:99:d2:9f:48:6c: 3c:d8:1d:bb:c3:cf:4b:cf:6b:6c:e0:ac:df:62:c1: 00:51:d9:f9:dd:e5:91:77:cf:83:f9:4a:d7:1a:35: 3d:bb:6b:d1:41:37:93:af:f2:89:b7:a0:b1:a8:eb: 8f:68:5f:de:02:47:78:09:14:1b:39:1a:c8:5b:07: e6:8b:02:4d:5e:4f:a0:3f:32:bc:e3:44:91:d0:83: 2a:70:01:fb:99:a5:5d:1f:2b:af:34:0d:76:03:ad: 7d:e9:ae:67:7e:e8:ad:d3:6c:95:ec:01:f4:67:22: 62:b1:62:9c:1f:87:04:f6:c3:ee:59:17:29:d4:fb: 92:ff:1d:96:d0:1b:98:f6:43:62:23:a6:c2:7c:8c: 76:42:12:77:a9:55:51:dd:81:e1:1d:48:9a:50:d2: 2e:8f:02:fe:6d:ef:7c:5d:c1:75:3d:41:54:a4:65: 46:ac:b3:1b:86:ef:1e:17:59:89:97:0c:e0:b0:ef: 42:6b:94:11:8a:0e:76:83:9b:56:ea:26:42:4e:64: 67:7c:4f:e5:1e:d5:99:35:48:69:89:f2:8d:5d:9d: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:74:B7:84:7F:B4:3B:B5:CA:5A:96:01:EF:65:D5:FD:E8:E9:E5 X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3230302e302f32322d3232203d3e203435303833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.45.200.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:4d:c9:d6:ca:0a:f0:6f:b7:af:65:f9:8a:e0:92:f3:08:6e: 36:a7:59:db:ab:e6:e6:ba:da:58:57:97:90:a9:8b:34:ee:71: 7f:6f:bc:e7:70:67:10:5c:37:28:fa:6f:2b:83:80:6e:eb:a7: 54:f4:4d:01:39:6c:ab:97:ee:fc:f9:ff:af:a7:fe:85:15:61: 0f:b5:ef:05:41:83:58:8a:80:cf:5b:d7:c0:9d:cd:5b:97:f2: c5:b4:ea:2b:a6:4c:bb:0e:4b:76:49:b1:a6:81:d9:b1:55:7a: 20:74:46:8d:b7:b1:53:f5:59:c5:cf:18:18:77:08:0d:7b:f4: fc:b2:d8:17:27:9a:66:77:08:64:ca:15:75:c0:96:89:da:d0: 41:45:9a:ee:8d:26:d2:5f:27:aa:b6:7b:0b:8b:2b:f9:c2:3d: 7e:a5:20:87:dd:1a:bc:90:03:10:a5:9c:2b:04:34:a3:97:b6: db:46:1a:04:05:80:e4:de:98:09:89:51:6b:f0:90:a1:12:40: 38:a7:c6:2b:2e:b7:b5:e4:2e:b9:75:a9:dc:c1:00:74:86:e5: c3:88:28:28:3c:25:52:91:75:b5:74:af:f2:98:77:65:82:9f: ba:7c:bd:b0:36:2a:ac:0d:67:3e:d5:b7:c5:b5:e8:db:83:bb: 47:42:0f:b1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMUpPkrAlDb2GDUXkZobwHZDYl+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA2MTYwMzA4MDlaFw0yNzA2MTUwMzEzMDlaMDMxMTAvBgNV BAMTKDg1Q0E3NEI3ODQ3RkI0M0JCNUNBNUE5NjAxRUY2NUQ1RkRFOEU5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+/JCmP1qMV52ImB4cdM6tr7r h0mSw/uGh1O0tpXiiU6UG2cqnUWZ0p9IbDzYHbvDz0vPa2zgrN9iwQBR2fnd5ZF3 z4P5StcaNT27a9FBN5Ov8om3oLGo649oX94CR3gJFBs5GshbB+aLAk1eT6A/Mrzj RJHQgypwAfuZpV0fK680DXYDrX3prmd+6K3TbJXsAfRnImKxYpwfhwT2w+5ZFynU +5L/HZbQG5j2Q2IjpsJ8jHZCEnepVVHdgeEdSJpQ0i6PAv5t73xdwXU9QVSkZUas sxuG7x4XWYmXDOCw70JrlBGKDnaDm1bqJkJOZGd8T+Ue1Zk1SGmJ8o1dnSbDAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUhcp0t4R/tDu1ylqWAe9l1f3o6eUwHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTMy MzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzUzMDM4MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIBLcgwDQYJKoZIhvcNAQELBQADggEBAIxNydbKCvBvt69l+YrgkvMIbjanWdur 5ua62lhXl5CpizTucX9vvOdwZxBcNyj6byuDgG7rp1T0TQE5bKuX7vz5/6+n/oUV YQ+17wVBg1iKgM9b18CdzVuX8sW06iumTLsOS3ZJsaaB2bFVeiB0Ro23sVP1WcXP GBh3CA179Pyy2BcnmmZ3CGTKFXXAlona0EFFmu6NJtJfJ6q2ewuLK/nCPX6lIIfd GryQAxClnCsENKOXtttGGgQFgOTemAmJUWvwkKESQDinxisut7XkLrl1qdzBAHSG 5cOIKCg8JVKRdbV0r/KYd2WCn7p8vbA2KqwNZz7Vt8W16NuDu0dCD7E= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:05 2026 by rpki-client