$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136312e302f32342d3234203d3e203137373735.roa File: 3132322e3134342e3136312e302f32342d3234203d3e203137373735.roa (raw, json) Hash identifier: LxGWnf1nM3CrVhBLd+Z7WICq9XpPb3abpHKF/gVmIDk= Subject key identifier: 55:62:FB:07:24:29:BA:A5:AF:D2:BC:72:70:75:D7:F9:38:BE:81:34 Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Certificate serial: 70A297DB81EB212920A1247A0635CBCC9F08DE7E Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136312e302f32342d3234203d3e203137373735.roa Signing time: Wed 17 Jun 2026 08:13:56 +0000 ROA not before: Wed 17 Jun 2026 08:08:56 +0000 ROA not after: Wed 16 Jun 2027 08:13:56 +0000 asID: 17775 IP address blocks: 122.144.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a2:97:db:81:eb:21:29:20:a1:24:7a:06:35:cb:cc:9f:08:de:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Validity Not Before: Jun 17 08:08:56 2026 GMT Not After : Jun 16 08:13:56 2027 GMT Subject: CN=5562FB072429BAA5AFD2BC727075D7F938BE8134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:b4:db:3e:eb:d5:1b:86:75:af:bb:b9:08: 44:ec:7d:ab:9a:35:9b:3b:fe:5e:e5:89:b9:3b:13: 45:3e:fc:33:9a:d0:56:bf:d0:81:eb:7f:54:c1:6b: 8c:20:0b:c6:9c:ef:cb:18:46:ef:44:b0:63:01:62: cb:69:00:ad:a2:1a:80:07:f0:6c:0f:fe:dc:00:50: 4c:d7:b6:96:f3:46:42:50:60:26:ea:8d:36:7f:7b: 31:e4:2c:c1:52:b1:62:49:4a:0c:d7:0f:84:9c:26: d8:ff:2c:e0:a7:3c:10:78:ec:26:bc:12:82:45:93: 38:17:f9:07:17:88:0d:ee:c5:34:bf:a7:2e:53:cd: 1e:17:dc:e3:96:2a:f0:c8:1d:23:24:76:fb:67:3b: 4e:90:d1:3a:d6:7d:33:04:b3:5b:48:a5:86:8f:0a: 1f:3c:6b:a3:a6:4a:46:8a:1e:72:2d:28:91:e4:66: ea:83:8a:5a:ce:88:4b:df:92:8c:ea:61:70:ae:c6: a7:74:22:6e:81:6f:93:00:cf:ee:46:b0:d2:9a:ad: 19:bb:72:31:d9:11:63:80:62:b1:5d:e7:92:cd:dc: 1e:43:bc:20:30:69:2e:ea:34:59:59:e6:18:99:f4: 29:ca:05:0b:79:9a:3d:17:bb:1a:ac:b9:99:07:8f: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:62:FB:07:24:29:BA:A5:AF:D2:BC:72:70:75:D7:F9:38:BE:81:34 X509v3 Authority Key Identifier: keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3136312e302f32342d3234203d3e203137373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.144.161.0/24 Signature Algorithm: sha256WithRSAEncryption 65:07:b7:3d:43:25:04:0b:55:aa:9b:a4:c2:da:15:a4:58:fc: 5b:29:2b:ba:8e:b4:d8:96:90:4d:bc:90:e8:82:d7:85:c4:a5: 75:d3:c4:e4:4b:6c:c5:c9:c9:e9:36:83:2c:7f:eb:54:61:db: c8:83:21:54:99:b7:80:f8:97:c4:92:c3:52:e8:cd:05:ed:cb: e9:84:b4:44:8c:0d:79:64:5d:2d:db:cd:d5:8a:4e:97:32:c8: e2:9b:10:e6:26:f4:5b:f7:92:cd:af:77:3a:22:2c:59:98:a0: 1e:5a:32:3c:7c:95:48:ff:ba:dc:02:0a:21:e8:69:4e:c6:7a: c9:9d:90:5d:37:1c:01:2d:9d:ed:51:81:9a:3d:ca:e0:73:2e: 1c:8b:97:30:63:37:1a:42:37:0a:98:7d:3c:93:be:e5:0a:21: 2c:5f:e6:20:4e:9f:3a:49:c7:bc:a3:91:86:3e:b3:ca:b1:32: 1d:d4:a6:ea:1f:3a:c6:49:f5:0a:ed:c4:2d:8e:f0:b2:00:af: 55:f1:9b:14:66:35:66:fd:1f:c0:f5:fb:b3:c8:af:56:da:30: 07:af:53:7f:9e:56:4c:0e:f8:11:be:08:56:73:fe:16:d6:9e: e8:22:1b:79:a6:e5:5c:25:f7:73:76:67:0b:d9:ef:b9:cb:7c: 73:c3:9e:a6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcKKX24HrISkgoSR6BjXLzJ8I3n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF N0IwOEEwQjAeFw0yNjA2MTcwODA4NTZaFw0yNzA2MTYwODEzNTZaMDMxMTAvBgNV BAMTKDU1NjJGQjA3MjQyOUJBQTVBRkQyQkM3MjcwNzVEN0Y5MzhCRTgxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8f7TbPuvVG4Z1r7u5CETsfaua NZs7/l7libk7E0U+/DOa0Fa/0IHrf1TBa4wgC8ac78sYRu9EsGMBYstpAK2iGoAH 8GwP/twAUEzXtpbzRkJQYCbqjTZ/ezHkLMFSsWJJSgzXD4ScJtj/LOCnPBB47Ca8 EoJFkzgX+QcXiA3uxTS/py5TzR4X3OOWKvDIHSMkdvtnO06Q0TrWfTMEs1tIpYaP Ch88a6OmSkaKHnItKJHkZuqDilrOiEvfkozqYXCuxqd0Im6Bb5MAz+5GsNKarRm7 cjHZEWOAYrFd55LN3B5DvCAwaS7qNFlZ5hiZ9CnKBQt5mj0XuxqsuZkHj5zVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVWL7ByQpuqWv0rxycHXX+Ti+gTQwHwYDVR0j BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1 NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMTMyMzIyZTMx MzQzNDJlMzEzNjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzczNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAHqQoTANBgkqhkiG9w0BAQsFAAOCAQEAZQe3PUMlBAtVqpukwtoV pFj8Wykruo602JaQTbyQ6ILXhcSlddPE5EtsxcnJ6TaDLH/rVGHbyIMhVJm3gPiX xJLDUujNBe3L6YS0RIwNeWRdLdvN1YpOlzLI4psQ5ib0W/eSza93OiIsWZigHloy PHyVSP+63AIKIehpTsZ6yZ2QXTccAS2d7VGBmj3K4HMuHIuXMGM3GkI3Cph9PJO+ 5QohLF/mIE6fOknHvKORhj6zyrEyHdSm6h86xkn1Cu3ELY7wsgCvVfGbFGY1Zv0f wPX7s8ivVtowB69Tf55WTA74Eb4IVnP+Ftae6CIbeablXCX3c3ZnC9nvuct8c8Oe pg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:47 2026 by rpki-client