$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa File: 3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa (raw, json) Hash identifier: M2JFU29MOOd7UuNS/9wN9LXUxR6vP6AkT+zGNW+h4+4= Subject key identifier: D8:75:89:94:CE:A2:94:F6:C8:7B:19:B7:6E:05:61:BD:BB:15:B8:3F Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 32BAE9C85FDBB74A9F75D1A6D30F5B217744CE80 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa Signing time: Wed 27 May 2026 07:34:55 +0000 ROA not before: Wed 27 May 2026 07:29:55 +0000 ROA not after: Wed 26 May 2027 07:34:55 +0000 asID: 56042 IP address blocks: 223.160.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ba:e9:c8:5f:db:b7:4a:9f:75:d1:a6:d3:0f:5b:21:77:44:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:55 2026 GMT Not After : May 26 07:34:55 2027 GMT Subject: CN=D8758994CEA294F6C87B19B76E0561BDBB15B83F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:45:42:bf:38:12:da:06:60:f9:a9:fd:c0: a1:d2:83:1e:3c:c6:23:98:7f:11:8c:bd:8e:9e:65: 44:0e:e4:ec:67:16:a6:7a:45:03:7f:ea:dd:37:62: c1:36:63:52:8c:73:61:54:2b:d6:65:4d:b5:e2:df: 21:44:e8:00:6f:fd:53:44:e8:a8:34:16:34:3b:e6: 94:f6:fc:ad:3f:05:d9:ba:88:ef:f8:a6:ee:90:58: c3:04:3f:59:eb:b3:99:22:6d:02:46:9a:8a:8f:34: 37:87:1b:80:31:d6:f0:ae:eb:ee:01:78:7e:4a:b3: c8:fb:8d:89:ff:81:13:e5:9c:47:8c:91:bc:bd:c1: 6d:fa:f6:1f:95:db:80:ea:05:16:bc:8a:cb:c5:ae: a0:0a:0b:6d:1b:1b:43:67:11:53:32:53:66:db:37: c8:80:d7:41:33:68:c9:69:0e:b4:b4:25:b8:0e:f2: d4:1f:e0:2b:24:8c:76:d5:f8:18:d2:d9:ab:0a:d7: 84:64:6f:97:35:72:b5:52:2a:df:21:ba:03:35:53: 11:87:67:80:1a:00:2d:cf:82:f1:ca:4b:8f:17:65: 8f:3c:08:6c:b6:5b:bf:e8:98:76:de:25:16:8f:2e: 62:32:83:0f:0c:a4:ce:30:ff:b1:d0:a2:a0:e1:12: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:75:89:94:CE:A2:94:F6:C8:7B:19:B7:6E:05:61:BD:BB:15:B8:3F X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134302e302f32332d3234203d3e203536303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.140.0/23 Signature Algorithm: sha256WithRSAEncryption 88:26:8f:11:7a:09:28:8f:60:5d:de:27:8c:f8:eb:30:86:73: e8:05:c3:28:86:e8:08:10:98:17:2c:08:74:bb:ca:3e:b3:e6: 04:62:b0:ee:d2:ff:d7:d6:0f:3d:7e:0f:22:46:87:d3:91:e1: 15:e5:4b:e6:ec:2d:f4:86:05:ca:2c:17:98:27:12:4e:f3:55: ce:9a:64:5d:7b:66:f0:4d:e8:8a:27:7c:96:28:ed:bb:9c:d5: 9e:d3:e2:24:2b:7e:e3:0b:9b:bf:ce:4d:00:e2:f0:1f:1d:da: 3b:c3:4d:26:87:43:c9:69:dd:47:37:4d:19:14:0f:5c:b3:3b: a1:bd:3d:ca:3c:b4:e6:83:22:a8:0f:91:1c:a4:ea:56:94:a8: 4d:87:10:b6:68:02:2f:2a:ee:f8:c7:e3:53:29:40:30:04:64: 6c:c9:16:ce:ba:cc:ff:c0:32:2b:24:9b:b4:d4:9c:e3:e0:70: 67:3b:94:e3:c6:06:95:d6:36:29:87:22:88:31:b8:2e:9f:1d: cd:8d:e6:5c:49:a9:37:72:fe:b9:11:97:66:67:ab:d9:f4:b9: f2:1f:85:78:78:0f:0e:6b:7c:e4:3f:54:75:fe:df:a7:07:59: 0c:db:5e:3a:68:a8:cb:a5:87:6e:6e:d7:f3:f0:c2:50:ab:5e: 3a:c2:65:8a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMrrpyF/bt0qfddGm0w9bIXdEzoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTVaFw0yNzA1MjYwNzM0NTVaMDMxMTAvBgNV BAMTKEQ4NzU4OTk0Q0VBMjk0RjZDODdCMTlCNzZFMDU2MUJEQkIxNUI4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7m0VCvzgS2gZg+an9wKHSgx48 xiOYfxGMvY6eZUQO5OxnFqZ6RQN/6t03YsE2Y1KMc2FUK9ZlTbXi3yFE6ABv/VNE 6Kg0FjQ75pT2/K0/Bdm6iO/4pu6QWMMEP1nrs5kibQJGmoqPNDeHG4Ax1vCu6+4B eH5Ks8j7jYn/gRPlnEeMkby9wW369h+V24DqBRa8isvFrqAKC20bG0NnEVMyU2bb N8iA10EzaMlpDrS0JbgO8tQf4CskjHbV+BjS2asK14Rkb5c1crVSKt8hugM1UxGH Z4AaAC3PgvHKS48XZY88CGy2W7/omHbeJRaPLmIygw8MpM4w/7HQoqDhEk7PAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2HWJlM6ilPbIexm3bgVhvbsVuD8wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzNDMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+gjDANBgkqhkiG9w0BAQsFAAOCAQEAiCaPEXoJKI9gXd4njPjr MIZz6AXDKIboCBCYFywIdLvKPrPmBGKw7tL/19YPPX4PIkaH05HhFeVL5uwt9IYF yiwXmCcSTvNVzppkXXtm8E3oiid8lijtu5zVntPiJCt+4wubv85NAOLwHx3aO8NN JodDyWndRzdNGRQPXLM7ob09yjy05oMiqA+RHKTqVpSoTYcQtmgCLyru+MfjUylA MARkbMkWzrrM/8AyKySbtNSc4+BwZzuU48YGldY2KYciiDG4Lp8dzY3mXEmpN3L+ uRGXZmer2fS58h+FeHgPDmt85D9Udf7fpwdZDNteOmioy6WHbm7X8/DCUKteOsJl ig== -----END CERTIFICATE-----Generated at Sat May 30 00:03:03 2026 by rpki-client