$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31342e302f32332d3234203d3e203536303430.roa File: 3232332e3136302e31342e302f32332d3234203d3e203536303430.roa (raw, json) Hash identifier: VKeQ6hwrFaM5Py7dCY1wN9kxnnkLamejCJImAZK+WCY= Subject key identifier: 49:C8:92:08:54:31:22:F7:59:51:89:68:C7:4A:D5:E8:2E:D8:D9:F3 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 66DA7D93101407E5C36669BD4675127F5665F7EF Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31342e302f32332d3234203d3e203536303430.roa Signing time: Wed 27 May 2026 07:34:53 +0000 ROA not before: Wed 27 May 2026 07:29:53 +0000 ROA not after: Wed 26 May 2027 07:34:53 +0000 asID: 56040 IP address blocks: 223.160.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:da:7d:93:10:14:07:e5:c3:66:69:bd:46:75:12:7f:56:65:f7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:53 2026 GMT Not After : May 26 07:34:53 2027 GMT Subject: CN=49C89208543122F759518968C74AD5E82ED8D9F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:7d:c8:57:4f:5c:35:f6:ac:81:9e:f8:4f: 10:ce:99:e3:ab:9e:24:58:dc:31:cf:10:55:6f:3e: 0a:59:a5:35:60:00:4d:9e:0a:c0:0a:55:10:66:84: 24:74:b6:98:29:0d:7d:e0:20:ea:50:2d:97:a5:d2: 32:0f:b3:fe:11:d4:c2:41:d9:73:79:69:5d:10:4a: 22:b0:5d:90:95:d7:d8:a6:55:c0:7f:b2:96:f5:c4: 00:c7:51:46:ff:48:08:be:0f:bc:b5:0b:55:fe:54: e1:fc:4c:fe:4b:24:ab:a8:15:8b:2e:a4:e2:f6:46: 24:ca:c6:e5:28:64:8a:c7:a4:7c:b9:e7:fe:d3:8b: ab:89:d1:0b:2d:83:53:64:b8:0b:89:a9:65:a1:be: 37:fc:77:2a:c5:b5:98:ce:d1:0e:8a:69:50:e8:9d: eb:bb:12:18:52:3a:34:e7:26:07:0b:b4:0f:0b:84: 1e:0f:1c:bb:28:60:c4:59:af:dd:cd:99:df:e9:02: c2:33:2e:32:03:e3:98:87:bc:cc:d2:7b:bb:81:d7: 39:13:01:e6:e7:f0:6c:cc:82:64:42:99:3a:6b:5d: cb:33:53:2c:52:28:b4:95:37:4e:d4:22:e9:16:cd: d4:04:8b:32:99:9e:f5:8e:72:24:73:3f:bd:06:77: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C8:92:08:54:31:22:F7:59:51:89:68:C7:4A:D5:E8:2E:D8:D9:F3 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31342e302f32332d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.14.0/23 Signature Algorithm: sha256WithRSAEncryption 81:ff:1b:f7:92:37:45:44:64:cb:21:1f:42:0c:a0:53:11:68: bd:33:72:4d:44:a7:6b:ae:c2:dd:31:34:e2:88:f2:f3:21:4d: 97:01:04:78:e3:86:9b:90:0f:a1:02:8e:79:7d:f6:0f:64:60: c7:9a:6d:a1:97:23:48:e8:1a:26:15:46:97:7f:d2:4a:40:29: 59:cf:09:50:3d:f3:12:fa:65:92:d0:17:bf:51:f4:46:c3:e7: d7:5d:09:3d:73:0c:0e:dc:fe:43:f3:0f:f8:41:98:4a:1a:06: cf:f5:08:33:d9:69:2c:65:3d:76:a6:aa:3d:ce:85:0c:36:83: ec:74:1f:25:05:92:e3:54:c8:3f:b6:64:56:00:7e:41:06:8a: 10:da:54:d7:95:6b:53:f8:c1:5a:ff:88:83:d5:dd:0f:75:7b: 62:e5:ca:fe:45:97:0e:69:22:f2:7a:ae:b1:cb:af:9b:11:03: 91:8d:e6:9f:10:e4:16:d6:0f:e0:63:97:e6:c9:1e:3e:7c:72: ba:68:7e:ef:4d:0f:16:64:a4:b1:a0:0f:f3:a6:9a:5f:56:99: 8f:7e:99:43:bf:9b:1a:2e:64:6e:e4:79:ee:74:34:b5:e7:56: 91:7c:4b:23:84:53:27:d6:ff:b1:19:29:5e:b7:92:52:55:94: 3e:b7:8a:94 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZtp9kxAUB+XDZmm9RnUSf1Zl9+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTNaFw0yNzA1MjYwNzM0NTNaMDMxMTAvBgNV BAMTKDQ5Qzg5MjA4NTQzMTIyRjc1OTUxODk2OEM3NEFENUU4MkVEOEQ5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaH3IV09cNfasgZ74TxDOmeOr niRY3DHPEFVvPgpZpTVgAE2eCsAKVRBmhCR0tpgpDX3gIOpQLZel0jIPs/4R1MJB 2XN5aV0QSiKwXZCV19imVcB/spb1xADHUUb/SAi+D7y1C1X+VOH8TP5LJKuoFYsu pOL2RiTKxuUoZIrHpHy55/7Ti6uJ0Qstg1NkuAuJqWWhvjf8dyrFtZjO0Q6KaVDo neu7EhhSOjTnJgcLtA8LhB4PHLsoYMRZr93Nmd/pAsIzLjID45iHvMzSe7uB1zkT Aebn8GzMgmRCmTprXcszUyxSKLSVN07UIukWzdQEizKZnvWOciRzP70GdycfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSciSCFQxIvdZUYlox0rV6C7Y2fMwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+gDjANBgkqhkiG9w0BAQsFAAOCAQEAgf8b95I3RURkyyEfQgygUxFo vTNyTUSna67C3TE04ojy8yFNlwEEeOOGm5APoQKOeX32D2Rgx5ptoZcjSOgaJhVG l3/SSkApWc8JUD3zEvplktAXv1H0RsPn110JPXMMDtz+Q/MP+EGYShoGz/UIM9lp LGU9dqaqPc6FDDaD7HQfJQWS41TIP7ZkVgB+QQaKENpU15VrU/jBWv+Ig9XdD3V7 YuXK/kWXDmki8nquscuvmxEDkY3mnxDkFtYP4GOX5skePnxyumh+700PFmSksaAP 86aaX1aZj36ZQ7+bGi5kbuR57nQ0tedWkXxLI4RTJ9b/sRkpXreSUlWUPreKlA== -----END CERTIFICATE-----Generated at Sat May 30 00:00:56 2026 by rpki-client