$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e302e302f32332d3234203d3e203536303438.roa File: 3232332e3136302e302e302f32332d3234203d3e203536303438.roa (raw, json) Hash identifier: I0HDFX57V66meXMEnfLunPGdISeVOte2ZIfQsiSDKFY= Subject key identifier: C0:28:39:73:30:FF:5F:F0:4C:F0:C7:06:B7:E1:73:7D:15:D9:D8:71 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 52A87CB0DE6191A64FB09B90378AFBEA6F92F0FD Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e302e302f32332d3234203d3e203536303438.roa Signing time: Wed 27 May 2026 07:34:53 +0000 ROA not before: Wed 27 May 2026 07:29:53 +0000 ROA not after: Wed 26 May 2027 07:34:53 +0000 asID: 56048 IP address blocks: 223.160.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a8:7c:b0:de:61:91:a6:4f:b0:9b:90:37:8a:fb:ea:6f:92:f0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:53 2026 GMT Not After : May 26 07:34:53 2027 GMT Subject: CN=C028397330FF5FF04CF0C706B7E1737D15D9D871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:53:4a:37:02:36:33:7d:10:8e:93:d6:c7: 30:53:7d:ed:ad:10:0c:01:62:f5:c4:6c:c5:0c:d3: 8e:59:10:aa:76:1e:1d:53:51:03:ce:cf:b6:8d:9c: 1c:51:c9:87:8a:cf:f5:be:fd:01:46:91:05:33:c0: 03:42:0c:93:d0:d4:dc:28:3a:85:cf:cb:a5:59:34: 1a:7b:82:b1:b7:8a:75:3b:02:fd:ff:38:72:ec:9b: 49:88:bf:40:9c:f8:b6:04:9c:59:e5:12:44:58:40: e5:10:c9:e9:f5:d4:8b:ca:dd:2f:f6:aa:f8:4a:0d: d7:ce:34:ca:75:4b:52:c0:56:79:7a:6d:ef:04:68: b0:47:20:8b:7e:64:96:b0:43:75:2e:40:d4:ed:5d: 98:00:d1:70:ec:a3:a8:b5:ee:51:fe:0c:51:3c:08: c2:1e:d1:6b:dd:f0:47:7a:1c:a7:0c:36:dc:76:6a: 92:6a:8e:61:1b:60:1c:81:30:18:d3:73:c3:d4:0f: 61:5c:4c:51:dd:ce:ef:28:ac:52:e0:a4:ba:31:19: 1d:8f:7f:71:f7:f4:36:c9:c6:96:da:98:1d:a9:06: b2:89:43:62:1b:14:50:db:eb:8c:48:69:fa:c6:4e: 79:fc:3d:48:88:5f:45:d5:14:01:83:da:c6:84:b0: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:28:39:73:30:FF:5F:F0:4C:F0:C7:06:B7:E1:73:7D:15:D9:D8:71 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e302e302f32332d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.0.0/23 Signature Algorithm: sha256WithRSAEncryption 11:bb:23:39:17:b8:26:19:45:d1:a8:26:b9:de:a1:32:5b:41: cb:a2:3f:3a:46:a1:01:20:53:87:63:c0:86:8c:88:b6:de:56: af:58:6d:11:b4:ac:36:da:7b:b5:6e:84:65:bd:ff:35:f8:99: c6:11:44:2a:a5:21:32:c2:09:09:3e:08:05:62:04:62:f5:91: e6:f9:0b:19:33:76:00:91:13:9a:9f:8e:8c:f2:c0:a9:48:e5: 52:f8:46:e8:8e:74:f8:88:8d:a3:a7:2a:fd:f1:75:16:c1:cc: 8d:2f:b3:30:10:e4:33:5e:fa:46:9e:29:92:3e:b7:29:9d:fe: 7c:60:ab:26:cd:d0:93:3c:8a:a2:1a:79:f4:aa:42:7a:4c:00: 7a:c5:88:35:dd:a6:39:72:fb:02:9f:19:0d:0b:26:32:74:04: 6a:53:7b:18:c5:68:aa:fa:fc:f7:ce:88:24:a4:89:53:59:92: 10:84:cc:30:a9:06:06:aa:f0:66:c7:22:5f:e8:7b:bc:d1:da: 43:75:79:07:06:63:1f:40:e0:77:0b:1c:9a:5f:59:5a:c5:0f: 95:e0:77:0d:56:23:3d:79:9b:5f:1f:79:d1:fc:17:0b:d2:53: 64:7f:d1:ef:82:48:5b:af:5a:9b:0e:fa:f4:06:b0:67:10:82: 3d:b0:2b:19 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUqh8sN5hkaZPsJuQN4r76m+S8P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTNaFw0yNzA1MjYwNzM0NTNaMDMxMTAvBgNV BAMTKEMwMjgzOTczMzBGRjVGRjA0Q0YwQzcwNkI3RTE3MzdEMTVEOUQ4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYlNKNwI2M30QjpPWxzBTfe2t EAwBYvXEbMUM045ZEKp2Hh1TUQPOz7aNnBxRyYeKz/W+/QFGkQUzwANCDJPQ1Nwo OoXPy6VZNBp7grG3inU7Av3/OHLsm0mIv0Cc+LYEnFnlEkRYQOUQyen11IvK3S/2 qvhKDdfONMp1S1LAVnl6be8EaLBHIIt+ZJawQ3UuQNTtXZgA0XDso6i17lH+DFE8 CMIe0Wvd8Ed6HKcMNtx2apJqjmEbYByBMBjTc8PUD2FcTFHdzu8orFLgpLoxGR2P f3H39DbJxpbamB2pBrKJQ2IbFFDb64xIafrGTnn8PUiIX0XVFAGD2saEsB6VAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUwCg5czD/X/BM8McGt+FzfRXZ2HEwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUzMTM2 MzAyZTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAd+gADANBgkqhkiG9w0BAQsFAAOCAQEAEbsjORe4JhlF0agmud6hMltBy6I/ OkahASBTh2PAhoyItt5Wr1htEbSsNtp7tW6EZb3/NfiZxhFEKqUhMsIJCT4IBWIE YvWR5vkLGTN2AJETmp+OjPLAqUjlUvhG6I50+IiNo6cq/fF1FsHMjS+zMBDkM176 Rp4pkj63KZ3+fGCrJs3QkzyKohp59KpCekwAesWINd2mOXL7Ap8ZDQsmMnQEalN7 GMVoqvr8986IJKSJU1mSEITMMKkGBqrwZsciX+h7vNHaQ3V5BwZjH0Dgdwscml9Z WsUPleB3DVYjPXmbXx950fwXC9JTZH/R74JIW69amw769AawZxCCPbArGQ== -----END CERTIFICATE-----Generated at Fri May 29 23:01:19 2026 by rpki-client