
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31302e302f32332d3234203d3e203536303436.roa
File: 3232332e3136302e31302e302f32332d3234203d3e203536303436.roa (raw, json)
Hash identifier: IDL27WGOjn1DUNNl6WKf32kZQGIvxrg59OD1PzvhzEI=
Subject key identifier: 88:B7:C8:26:CB:90:3E:33:6C:BB:FE:DB:11:BA:12:88:54:80:A8:3D
Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial: 5A6F1ACCCCC623CC92BED7D5A5BA41E20223F38D
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31302e302f32332d3234203d3e203536303436.roa
Signing time: Wed 27 May 2026 07:34:55 +0000
ROA not before: Wed 27 May 2026 07:29:55 +0000
ROA not after: Wed 26 May 2027 07:34:55 +0000
asID: 56046
IP address blocks: 223.160.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6f:1a:cc:cc:c6:23:cc:92:be:d7:d5:a5:ba:41:e2:02:23:f3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Validity
Not Before: May 27 07:29:55 2026 GMT
Not After : May 26 07:34:55 2027 GMT
Subject: CN=88B7C826CB903E336CBBFEDB11BA12885480A83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:41:05:b6:5e:0f:d4:bf:15:1d:fb:eb:08:
84:12:15:b8:71:fb:2b:4a:5a:e2:43:25:7a:9d:2f:
5f:6b:5b:28:ae:61:6a:10:29:af:dd:52:a2:19:9c:
cd:a0:94:bb:74:76:47:13:e7:02:08:37:11:6f:6c:
ef:0a:1c:22:98:ab:26:b7:67:19:9e:d5:15:f9:75:
c6:13:e5:eb:39:b7:86:e7:63:89:4e:4f:0c:ff:ed:
4a:bd:ea:6a:5d:e1:9a:b6:b2:a0:68:4f:39:83:e8:
3d:33:75:5c:08:8b:41:5b:b3:52:cb:57:3a:ec:c3:
1b:47:a6:8c:64:ab:4e:2f:6c:9d:ed:4f:a1:d6:15:
7b:df:d9:93:69:52:f6:95:0d:88:52:cd:8b:22:7d:
7b:da:cb:84:c0:e8:f3:45:85:28:8c:4e:25:ac:85:
f0:2d:3b:b6:f6:19:4f:3c:49:bf:65:31:1a:d2:d2:
55:3a:aa:d1:89:e5:2c:13:c7:bb:fb:5a:75:e5:8a:
5c:fe:89:0c:4d:29:5a:2c:10:28:79:d9:c8:35:45:
90:8e:c2:b1:25:37:55:fe:2f:51:63:00:2e:82:30:
9e:6a:3a:a2:85:a9:50:bb:0d:56:e8:94:81:97:8c:
e3:f0:14:0d:fa:d2:b7:ca:86:9d:dd:27:b7:71:6a:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:C8:26:CB:90:3E:33:6C:BB:FE:DB:11:BA:12:88:54:80:A8:3D
X509v3 Authority Key Identifier:
keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31302e302f32332d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.160.10.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:d2:ca:99:c9:59:7c:6b:64:8c:db:4b:e1:69:3c:bf:d5:30:
f0:29:c1:f8:47:2e:d7:b9:6c:d9:44:a9:3e:e9:34:f3:09:70:
94:5c:56:01:90:bb:30:93:13:d3:ea:a6:5a:09:9c:bf:be:b5:
84:cc:b5:6e:b7:05:bf:a3:8b:e8:f3:f6:32:70:3b:ef:2c:d0:
7e:36:dd:85:93:22:a0:63:bb:8e:23:42:21:1b:9e:f1:61:23:
7c:5f:bb:e0:a6:9e:1e:3e:7c:8f:78:4a:39:7c:5a:eb:6e:cb:
a3:ca:bc:80:60:c7:8d:d5:a8:44:ec:f8:2d:9c:e8:b3:7e:da:
a3:a7:22:34:46:c5:4f:cf:8e:7e:32:da:15:18:0d:e9:ab:a1:
d2:fb:a4:3a:02:86:60:e8:68:dc:3f:30:6d:0a:93:69:87:5a:
20:93:6f:a7:f9:73:73:9c:26:b2:1d:fa:fd:db:aa:fd:c0:b7:
aa:7a:4f:56:fb:5c:65:7d:1a:2a:a0:63:61:f7:a9:85:84:d1:
8d:94:4e:d5:e2:c2:4f:5a:ce:d1:7d:d6:de:5c:5c:a9:bc:2d:
8c:5c:eb:51:96:ef:6e:23:e6:d8:8c:d5:7c:8c:09:8d:ac:d4:
51:7f:1f:b4:d0:14:82:07:e2:2d:b1:dd:ea:39:95:a0:64:9f:
53:19:f3:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:01:05 2026 by rpki-client