$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3133362e302f32322d3234203d3e203234353437.roa File: 3232332e3136302e3133362e302f32322d3234203d3e203234353437.roa (raw, json) Hash identifier: P0GSFCYHvpiUOdDBohRpU3pXdgDM5d8CugyKKfNrXFs= Subject key identifier: 44:E1:FA:4F:F6:A9:52:51:20:13:C4:08:6B:61:72:5F:94:2B:43:37 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 249C5E1BB820E7B19FFA163E42E02991CE58E720 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3133362e302f32322d3234203d3e203234353437.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 24547 IP address blocks: 223.160.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9c:5e:1b:b8:20:e7:b1:9f:fa:16:3e:42:e0:29:91:ce:58:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=44E1FA4FF6A952512013C4086B61725F942B4337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:be:35:25:9b:f2:6b:c4:74:79:47:7a:3f: c3:ab:ec:14:f2:4a:9b:41:11:85:07:64:64:66:94: 15:66:44:4a:94:18:6f:7b:37:20:ee:b2:f8:07:a0: 7b:eb:98:83:b9:82:70:59:8a:68:4f:03:9c:b1:81: 44:63:27:01:cd:9c:51:e2:e7:ea:3b:9f:f0:91:ca: b9:af:30:7a:51:25:de:b8:97:3c:aa:18:3d:87:ff: 15:19:bc:b2:25:cf:01:20:39:8b:2d:93:85:58:1d: ce:f6:6a:92:cd:32:1f:f8:27:a2:70:5d:7b:1b:a0: 96:df:df:3c:b6:36:d0:0a:a0:fb:78:a2:24:75:83: 6b:0e:02:dd:b9:45:68:34:05:39:87:46:b6:ca:8e: ce:a2:cf:45:c0:0d:ec:66:33:81:82:bf:93:33:61: 4f:4a:20:e3:5b:9c:6a:13:b1:25:a8:a7:8f:f4:bc: b4:c3:77:17:81:77:c4:b0:0f:97:f4:2c:4b:10:a9: 6a:3d:70:29:fe:9f:5a:2d:ae:40:10:4a:0a:c5:6e: 27:6b:11:37:91:d4:1f:29:b7:96:2d:c4:17:0a:71: 38:e8:f8:26:57:2a:82:55:38:a4:6a:fb:e5:f2:ae: 04:b7:e4:09:bf:0a:4f:74:67:55:4b:56:08:8d:3e: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E1:FA:4F:F6:A9:52:51:20:13:C4:08:6B:61:72:5F:94:2B:43:37 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3133362e302f32322d3234203d3e203234353437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.136.0/22 Signature Algorithm: sha256WithRSAEncryption ae:a5:f3:3c:ca:45:95:96:fd:52:51:0a:e1:b4:a9:9e:bf:d6: c4:8a:dd:65:96:48:af:42:e8:c6:03:98:87:6d:19:8b:40:ae: df:2a:de:58:ce:39:ef:4c:37:fb:ea:d4:11:1e:8d:19:e0:16: 43:17:b3:27:5b:f9:03:69:f5:bb:c9:bd:f5:e1:90:56:a1:81: 1e:97:29:7f:8d:63:e5:99:9f:1d:8c:a0:3b:2f:a0:4d:f0:75: 09:21:7f:42:67:85:67:4f:d2:0a:2a:e0:00:e5:27:63:e8:12: fc:d0:55:ce:b0:7d:1d:d6:e7:6e:a7:de:dc:62:78:4c:8a:4e: 7b:62:a5:83:61:23:c6:46:e1:b0:9f:fd:35:e7:64:19:85:b2: a5:68:b7:2f:bc:20:cb:d4:76:d1:62:f0:ea:21:b6:32:a9:5d: 2c:b1:62:47:1d:f2:58:be:b6:26:af:82:bd:65:7d:c4:10:ba: 53:84:0e:d6:3c:6a:d3:5d:14:2d:f4:15:a9:d7:36:6c:df:6f: b9:b5:4a:29:38:19:2a:9e:b8:bc:64:a5:e7:c5:17:26:a1:c7: 04:6d:a4:d6:df:3c:4a:52:79:9c:5a:66:da:1d:e6:fb:38:03: 4a:5d:ac:19:47:e4:42:08:fc:ef:bc:50:e7:1f:0e:dd:30:00: 07:1b:43:58 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJJxeG7gg57Gf+hY+QuApkc5Y5yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKDQ0RTFGQTRGRjZBOTUyNTEyMDEzQzQwODZCNjE3MjVGOTQyQjQzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLr41JZvya8R0eUd6P8Or7BTy SptBEYUHZGRmlBVmREqUGG97NyDusvgHoHvrmIO5gnBZimhPA5yxgURjJwHNnFHi 5+o7n/CRyrmvMHpRJd64lzyqGD2H/xUZvLIlzwEgOYstk4VYHc72apLNMh/4J6Jw XXsboJbf3zy2NtAKoPt4oiR1g2sOAt25RWg0BTmHRrbKjs6iz0XADexmM4GCv5Mz YU9KIONbnGoTsSWop4/0vLTDdxeBd8SwD5f0LEsQqWo9cCn+n1otrkAQSgrFbidr ETeR1B8pt5YtxBcKcTjo+CZXKoJVOKRq++XyrgS35Am/Ck90Z1VLVgiNPq0RAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUROH6T/apUlEgE8QIa2FyX5QrQzcwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNDM1MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAt+giDANBgkqhkiG9w0BAQsFAAOCAQEArqXzPMpFlZb9UlEK4bSp nr/WxIrdZZZIr0LoxgOYh20Zi0Cu3yreWM4570w3++rUER6NGeAWQxezJ1v5A2n1 u8m99eGQVqGBHpcpf41j5ZmfHYygOy+gTfB1CSF/QmeFZ0/SCirgAOUnY+gS/NBV zrB9Hdbnbqfe3GJ4TIpOe2Klg2EjxkbhsJ/9NedkGYWypWi3L7wgy9R20WLw6iG2 MqldLLFiRx3yWL62Jq+CvWV9xBC6U4QO1jxq010ULfQVqdc2bN9vubVKKTgZKp64 vGSl58UXJqHHBG2k1t88SlJ5nFpm2h3m+zgDSl2sGUfkQgj877xQ5x8O3TAABxtD WA== -----END CERTIFICATE-----Generated at Fri May 29 23:01:45 2026 by rpki-client