$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3232302e302f32332d3233203d3e203137373735.roa File: 3132322e3134342e3232302e302f32332d3233203d3e203137373735.roa (raw, json) Hash identifier: PAvTgpbsTQCi3ls+OdXa40Ve7Nc/Lh6vqDbihQLVc5I= Subject key identifier: A6:11:4B:9C:C7:34:BB:A9:D5:4A:68:A7:DC:D7:6C:FD:9B:83:74:EE Certificate issuer: /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Certificate serial: 2BAEFB21BCF4E6694FFB5CD92BD36E43ABEF61D1 Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3232302e302f32332d3233203d3e203137373735.roa Signing time: Wed 17 Jun 2026 08:21:36 +0000 ROA not before: Wed 17 Jun 2026 08:16:36 +0000 ROA not after: Wed 16 Jun 2027 08:21:36 +0000 asID: 17775 IP address blocks: 122.144.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ae:fb:21:bc:f4:e6:69:4f:fb:5c:d9:2b:d3:6e:43:ab:ef:61:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B Validity Not Before: Jun 17 08:16:36 2026 GMT Not After : Jun 16 08:21:36 2027 GMT Subject: CN=A6114B9CC734BBA9D54A68A7DCD76CFD9B8374EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:45:34:25:52:d8:51:4c:94:e7:b1:95:09: 5a:f3:1e:3a:b4:96:3d:b8:eb:7a:0e:67:9f:5a:53: 72:fc:6d:68:96:a9:44:8c:ba:77:0d:1d:a0:6f:b9: cb:a7:a6:74:9c:a6:44:27:9b:14:9e:3d:78:4f:15: 0e:96:db:e7:5d:9a:18:b1:47:63:41:37:6e:d0:64: 89:11:2d:60:43:5f:29:84:7c:ee:2d:a6:8d:3c:4a: ba:0e:08:e5:31:b3:17:38:3a:09:3a:94:26:ff:f5: 1f:30:d9:71:53:d1:fb:a4:17:21:bf:47:bf:e0:c2: cd:08:20:4d:dc:57:46:51:e8:2a:3d:9d:90:bc:1a: c2:30:0f:12:58:08:e7:b1:d0:b7:03:3b:47:9d:9f: a8:c9:53:0c:d4:95:15:7f:59:d8:60:de:8c:e7:ac: 80:69:c5:66:a6:62:68:e4:3b:bf:7d:8c:ea:40:e0: 97:aa:27:ea:e1:5b:ca:24:98:9e:e1:f7:f9:98:90: 2b:18:10:ca:a9:d9:98:9d:cf:39:20:ba:b2:e1:2d: 83:73:6e:ad:fe:d9:fc:8a:6f:43:f6:c8:38:58:ed: 60:eb:12:c3:5f:63:bc:32:ba:df:67:1e:02:f7:59: a5:ad:26:8a:eb:c3:42:17:f3:ac:27:6d:a9:3c:80: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:4B:9C:C7:34:BB:A9:D5:4A:68:A7:DC:D7:6C:FD:9B:83:74:EE X509v3 Authority Key Identifier: keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/3132322e3134342e3232302e302f32332d3233203d3e203137373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.144.220.0/23 Signature Algorithm: sha256WithRSAEncryption 02:2e:f1:63:c5:e5:51:35:4f:b3:e4:6d:4c:7a:a7:9a:3f:f4: b0:07:a5:21:b7:cf:b4:f2:29:43:f1:d5:a6:12:a8:cb:fb:84: 73:5f:dd:08:39:4c:b9:7a:83:ec:36:fa:f7:97:ef:51:b1:ea: 88:1e:2a:56:93:19:ef:3b:65:35:c4:09:92:42:2c:c3:e6:6b: f2:df:04:28:03:3e:52:ce:cc:29:ba:da:10:7f:30:f2:c4:0e: 9a:83:d1:73:aa:08:f4:36:32:9c:9c:09:ee:f4:26:b8:0f:bf: 72:56:c1:fb:13:5e:5f:79:97:65:55:b6:bc:01:31:9a:57:ad: c2:97:ac:80:ab:2b:bb:25:37:6b:02:a0:0e:9a:c6:ae:62:c7: f5:b7:b5:78:94:bd:80:55:65:6f:18:29:94:af:b2:be:ba:72: 02:d5:d7:79:dd:ec:5c:1d:dd:6f:f3:8b:ba:78:ed:db:c3:25: 8c:95:92:aa:1b:10:3c:da:93:89:d4:db:7c:98:a1:9d:3a:34: 29:25:6f:eb:f5:70:5f:9d:14:c3:f1:12:2f:98:8e:45:cd:4e: 6c:30:27:66:c2:e4:5b:d6:f9:49:bf:ac:e3:ee:a7:69:fa:91: 22:21:2d:07:ab:ec:64:c6:cf:29:f8:9b:7e:3e:3b:2a:a1:ad: 34:bd:5d:93 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUK677Ibz05mlP+1zZK9NuQ6vvYdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NF N0IwOEEwQjAeFw0yNjA2MTcwODE2MzZaFw0yNzA2MTYwODIxMzZaMDMxMTAvBgNV BAMTKEE2MTE0QjlDQzczNEJCQTlENTRBNjhBN0RDRDc2Q0ZEOUI4Mzc0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZkU0JVLYUUyU57GVCVrzHjq0 lj2463oOZ59aU3L8bWiWqUSMuncNHaBvucunpnScpkQnmxSePXhPFQ6W2+ddmhix R2NBN27QZIkRLWBDXymEfO4tpo08SroOCOUxsxc4Ogk6lCb/9R8w2XFT0fukFyG/ R7/gws0IIE3cV0ZR6Co9nZC8GsIwDxJYCOex0LcDO0edn6jJUwzUlRV/Wdhg3ozn rIBpxWamYmjkO799jOpA4JeqJ+rhW8okmJ7h9/mYkCsYEMqp2ZidzzkgurLhLYNz bq3+2fyKb0P2yDhY7WDrEsNfY7wyut9nHgL3WaWtJorrw0IX86wnbak8gHl5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUphFLnMc0u6nVSmin3Nds/ZuDdO4wHwYDVR0j BBgwFoAUVLMaxAnbBS/VAbcFCdhUzOewigswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY0NTk1Mjk1Nzg3NDE5Ny8wLzU0QjMxQUM0MDlEQjA1MkZENTAxQjcwNTA5RDg1 NENDRTdCMDhBMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTRCMzFBQzQwOURCMDUyRkQ1MDFCNzA1MDlEODU0Q0NFN0IwOEEwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDk2NDU5NTI5NTc4NzQxOTcvMC8zMTMyMzIyZTMx MzQzNDJlMzIzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM3MzczNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAXqQ3DANBgkqhkiG9w0BAQsFAAOCAQEAAi7xY8XlUTVPs+RtTHqn mj/0sAelIbfPtPIpQ/HVphKoy/uEc1/dCDlMuXqD7Db695fvUbHqiB4qVpMZ7ztl NcQJkkIsw+Zr8t8EKAM+Us7MKbraEH8w8sQOmoPRc6oI9DYynJwJ7vQmuA+/clbB +xNeX3mXZVW2vAExmletwpesgKsruyU3awKgDprGrmLH9be1eJS9gFVlbxgplK+y vrpyAtXXed3sXB3db/OLunjt28MljJWSqhsQPNqTidTbfJihnTo0KSVv6/VwX50U w/ESL5iORc1ObDAnZsLkW9b5Sb+s4+6nafqRIiEtB6vsZMbPKfibfj47KqGtNL1d kw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:14 2026 by rpki-client