$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa File: 3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa (raw, json) Hash identifier: NPnlOQHsM7AXTyzv8sGlxj+V8HItmT6zYVybyAkwB+E= Subject key identifier: D2:82:D9:AA:5C:39:09:63:A4:EE:B6:11:02:DA:73:55:85:CF:F6:2D Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 512DBE87B122FF11E577170338F259A304FA3594 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa Signing time: Wed 27 May 2026 07:34:56 +0000 ROA not before: Wed 27 May 2026 07:29:56 +0000 ROA not after: Wed 26 May 2027 07:34:56 +0000 asID: 56048 IP address blocks: 223.160.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2d:be:87:b1:22:ff:11:e5:77:17:03:38:f2:59:a3:04:fa:35:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:56 2026 GMT Not After : May 26 07:34:56 2027 GMT Subject: CN=D282D9AA5C390963A4EEB61102DA735585CFF62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:7e:d6:e2:6e:ef:c8:b2:57:6a:de:7a:20: 9d:23:04:cf:40:87:85:35:a1:d2:64:b3:a4:e7:26: 12:ae:7f:5b:cd:0f:a0:5c:75:64:a0:8b:52:85:0f: f9:bc:0d:a2:4d:94:bf:af:a3:fe:62:d5:c4:15:bf: 18:12:13:a6:6d:8e:37:69:ba:bb:fb:b1:91:5d:7c: 96:d6:a4:63:a3:94:65:cf:f5:09:48:5c:f8:e1:3a: cd:39:47:ec:0e:52:d2:c0:0b:5d:a1:b5:be:a7:0d: 92:68:de:e6:b2:57:70:b6:ee:b4:54:bf:68:d6:6a: ab:0e:e5:fb:80:42:18:70:e5:4b:82:14:45:65:73: 3e:4c:24:fe:85:6f:d7:08:72:de:b2:29:1b:8d:8d: 1b:31:08:ba:41:cd:91:b5:ee:e7:a6:6e:c4:80:62: 25:5d:a6:40:c3:15:ed:3d:e3:ca:b8:c5:03:82:d8: ff:ed:21:26:f5:54:ba:81:39:bf:15:95:30:d1:07: 02:7a:60:d7:91:cd:71:c3:3d:09:6d:fc:2b:d5:a7: 25:95:ea:4f:3b:91:bd:4e:8f:0f:52:54:b8:76:4e: 3e:83:f4:91:50:33:b6:6d:07:02:c4:3c:31:ac:5b: 84:35:c2:37:63:d8:c1:fa:67:de:b8:9c:6c:87:99: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:82:D9:AA:5C:39:09:63:A4:EE:B6:11:02:DA:73:55:85:CF:F6:2D X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3132382e302f32322d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.128.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:1d:d6:80:9c:8a:ec:c2:77:7e:0b:a1:7e:3a:14:6c:1a:36: 6b:10:be:9d:d1:32:48:6f:b9:a1:33:0e:ea:e8:89:2b:3e:5f: 12:85:f7:a0:82:2b:1c:f5:ac:34:a8:6e:ec:8f:17:8e:6d:d0: 78:71:2b:55:8d:e3:65:49:6e:97:ce:3a:c3:3d:9d:9d:18:17: 7c:98:1e:bb:fb:0e:c2:74:bb:be:f0:48:e1:83:a4:53:e2:c4: e7:2b:aa:58:44:a3:d6:8c:68:a7:63:14:fd:46:d8:d2:c9:ae: f4:e4:c4:48:72:47:a5:32:cd:9d:90:34:81:84:b0:ae:58:28: 23:f1:31:12:18:1d:11:3a:cf:38:7d:fb:ba:2d:91:ba:8c:db: 67:4b:1a:16:65:49:c7:8d:e7:1a:0b:60:ec:dd:01:35:4f:04: 7b:6f:27:fd:75:32:22:42:9b:55:07:12:7c:6f:f5:ec:b4:df: bf:46:79:e0:55:c5:0a:c6:c2:8d:e4:d1:a7:f4:f9:9a:f1:2d: bf:73:9d:8c:0a:32:4e:b2:69:e3:c7:04:53:a6:31:ab:8b:30: 5f:57:51:96:4f:0d:91:20:f4:e6:d0:d2:b6:2c:15:3c:d9:14: 56:e5:66:bd:ff:14:b4:d6:42:cb:cb:71:aa:68:26:71:00:e0: 54:be:30:b7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUUS2+h7Ei/xHldxcDOPJZowT6NZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTZaFw0yNzA1MjYwNzM0NTZaMDMxMTAvBgNV BAMTKEQyODJEOUFBNUMzOTA5NjNBNEVFQjYxMTAyREE3MzU1ODVDRkY2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBX7W4m7vyLJXat56IJ0jBM9A h4U1odJks6TnJhKuf1vND6BcdWSgi1KFD/m8DaJNlL+vo/5i1cQVvxgSE6Ztjjdp urv7sZFdfJbWpGOjlGXP9QlIXPjhOs05R+wOUtLAC12htb6nDZJo3uayV3C27rRU v2jWaqsO5fuAQhhw5UuCFEVlcz5MJP6Fb9cIct6yKRuNjRsxCLpBzZG17uembsSA YiVdpkDDFe0948q4xQOC2P/tISb1VLqBOb8VlTDRBwJ6YNeRzXHDPQlt/CvVpyWV 6k87kb1Ojw9SVLh2Tj6D9JFQM7ZtBwLEPDGsW4Q1wjdj2MH6Z964nGyHmTRnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU0oLZqlw5CWOk7rYRAtpzVYXP9i0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAt+ggDANBgkqhkiG9w0BAQsFAAOCAQEADx3WgJyK7MJ3fguhfjoU bBo2axC+ndEySG+5oTMO6uiJKz5fEoX3oIIrHPWsNKhu7I8Xjm3QeHErVY3jZUlu l846wz2dnRgXfJgeu/sOwnS7vvBI4YOkU+LE5yuqWESj1oxop2MU/UbY0smu9OTE SHJHpTLNnZA0gYSwrlgoI/ExEhgdETrPOH37ui2RuozbZ0saFmVJx43nGgtg7N0B NU8Ee28n/XUyIkKbVQcSfG/17LTfv0Z54FXFCsbCjeTRp/T5mvEtv3OdjAoyTrJp 48cEU6Yxq4swX1dRlk8NkSD05tDStiwVPNkUVuVmvf8UtNZCy8txqmgmcQDgVL4w tw== -----END CERTIFICATE-----Generated at Sat May 30 00:03:11 2026 by rpki-client