
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa
File: 3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa (raw, json)
Hash identifier: P6pog93VDJsmvYzHJvaW7f8TZcy/ZOZV3MEe5xMJjmM=
Subject key identifier: 34:9D:60:24:4B:96:EB:05:2E:99:CD:E7:B1:26:BF:61:FC:D2:31:66
Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial: 7FC4EF767327486B7B404B788BD14C0921C14DD6
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa
Signing time: Wed 27 May 2026 07:34:56 +0000
ROA not before: Wed 27 May 2026 07:29:56 +0000
ROA not after: Wed 26 May 2027 07:34:56 +0000
asID: 9808
IP address blocks: 223.160.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c4:ef:76:73:27:48:6b:7b:40:4b:78:8b:d1:4c:09:21:c1:4d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Validity
Not Before: May 27 07:29:56 2026 GMT
Not After : May 26 07:34:56 2027 GMT
Subject: CN=349D60244B96EB052E99CDE7B126BF61FCD23166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e6:b4:43:22:43:51:af:c7:27:d3:13:16:59:
86:71:40:d4:7b:c8:5a:c3:08:dc:75:06:4e:82:36:
bc:27:8a:cd:4b:be:4a:9a:4b:6b:9f:13:10:a9:d9:
68:8c:81:48:e7:ef:50:a3:bd:c9:e0:b3:67:b7:bc:
00:74:59:64:7b:c8:80:ac:b0:09:d0:ff:1b:f9:06:
54:8c:8d:5d:6c:77:b6:56:ae:e7:eb:05:08:c3:e3:
3d:48:ed:55:1d:aa:b4:0e:aa:6e:4b:80:80:3e:f9:
16:54:78:1c:09:c8:0a:07:8a:27:33:cc:f3:aa:e5:
6f:2a:e1:aa:87:2e:00:e3:b7:6b:e6:9c:a4:a6:4b:
0e:ab:77:90:c6:fd:9c:84:38:a0:b1:c7:e1:89:3b:
aa:02:76:12:c9:5b:1f:56:65:16:4b:09:2c:8b:fc:
95:e2:52:b4:83:9c:5b:56:42:94:07:ac:59:d0:67:
9a:f5:fe:74:7c:ae:ff:89:a7:ba:97:8a:39:6e:e7:
60:4d:46:0b:38:7e:95:de:3e:16:15:42:95:c2:81:
d7:a3:b2:5f:ec:03:cb:7e:21:0a:21:77:e2:d0:33:
71:16:6a:c7:c7:c3:55:7b:bd:26:44:f1:2a:39:eb:
db:b1:ca:a1:66:ba:77:cd:9a:f3:a7:38:57:cd:20:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9D:60:24:4B:96:EB:05:2E:99:CD:E7:B1:26:BF:61:FC:D2:31:66
X509v3 Authority Key Identifier:
keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3131362e302f32322d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.160.116.0/22
Signature Algorithm: sha256WithRSAEncryption
14:c2:61:8c:e8:02:b9:ba:cc:af:9a:85:ce:0e:e0:42:b1:bc:
cf:cb:7d:19:d9:65:02:ba:98:58:42:88:be:aa:cd:d7:a1:fe:
74:db:dc:06:c4:8e:8b:c7:6f:ef:20:e5:9b:ab:04:61:4e:1d:
12:0c:fd:c0:a1:12:68:51:72:62:50:37:95:10:7a:a4:19:13:
00:e9:72:79:6b:a0:cc:1d:f0:ac:86:7c:e0:80:f1:ed:0e:97:
2a:c4:d6:98:0a:e0:74:eb:8b:01:91:5d:21:96:ae:0b:db:ae:
94:31:27:5a:a5:73:b6:d7:91:92:2e:d5:5b:96:e4:d6:98:42:
b9:a5:0a:26:4b:4a:64:7c:31:e9:cc:69:75:3c:a3:78:8b:0d:
f0:5a:4e:05:e4:cb:1c:7a:47:e5:f4:2c:94:de:7e:59:38:e1:
09:08:6a:e8:a8:f5:f8:f5:00:cd:8f:7c:c6:ed:d3:15:19:c0:
53:f2:f7:a2:9e:3f:6a:cf:e4:58:3d:9f:a6:06:5f:54:00:3f:
b1:25:ae:2f:0c:1a:ab:4f:81:67:55:9f:52:d9:62:9b:c9:17:
10:a2:aa:bc:42:97:54:e8:34:b9:4f:95:2e:24:3a:29:9e:1f:
77:26:69:ca:ae:42:2d:03:0d:63:19:7a:e8:c9:a3:58:d7:81:
2a:2f:3f:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 00:46:01 2026 by rpki-client