$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa File: 3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa (raw, json) Hash identifier: tbaHm6f6xVd1Gngx5aYcLhCWA+4woul8u0Zez92n7v8= Subject key identifier: 9D:0D:40:BA:5E:B1:65:4D:35:E0:39:61:EB:0E:C0:85:1D:09:C0:F8 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 607596A2C6F04F948A570C24EE7DE95E8E476DF4 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 132525 IP address blocks: 223.160.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:75:96:a2:c6:f0:4f:94:8a:57:0c:24:ee:7d:e9:5e:8e:47:6d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=9D0D40BA5EB1654D35E03961EB0EC0851D09C0F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e7:38:13:e6:4e:51:90:35:90:c1:89:db:98: a2:a2:03:0e:bb:b2:67:3d:6c:66:cb:c0:c4:43:d0: 88:0b:89:a7:40:91:27:33:f0:ad:08:e7:ec:8c:f9: 9f:42:be:60:d2:74:7a:04:b5:bb:58:46:d5:db:01: 19:ce:5e:57:30:91:34:c3:09:d5:f8:8a:5b:91:20: 99:56:d5:87:07:02:bc:aa:52:47:90:b4:fa:9a:42: af:27:85:31:12:5b:a3:4c:97:35:9a:38:e5:97:21: a8:a9:11:fa:85:f8:0a:31:f2:db:fb:7d:05:f1:e2: 64:53:23:db:47:e4:d9:82:f2:62:d1:be:63:f5:b9: 17:a7:a9:4c:d1:01:23:c5:0c:fb:6f:3c:6e:38:4b: 97:57:dd:2e:2a:f4:8d:8c:92:4d:80:87:df:c3:b2: cf:8a:eb:1b:74:0c:0f:d1:39:fd:ac:a9:5a:ce:36: 70:1a:32:ba:c6:cd:50:f7:4d:7e:0f:43:44:4d:8b: 4b:5c:10:79:69:82:86:38:fd:86:ff:72:0d:97:bb: a9:d6:ed:ba:a3:70:af:1e:50:7b:4b:06:6b:61:27: 5f:5c:1e:56:7d:9d:0e:78:71:99:2c:58:29:38:82: a4:2c:74:f2:41:09:9d:29:db:49:27:63:6b:ec:70: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0D:40:BA:5E:B1:65:4D:35:E0:39:61:EB:0E:C0:85:1D:09:C0:F8 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134342e302f32332d3234203d3e20313332353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.144.0/23 Signature Algorithm: sha256WithRSAEncryption 30:25:6d:20:65:f3:5d:e8:f0:56:96:6c:2a:c1:ca:8e:a0:04: fa:c9:06:2b:7d:4d:83:04:ad:75:2b:4f:de:24:7c:3c:59:fa: fd:89:8f:ac:9e:2f:9b:7b:5d:58:e0:dc:02:a8:8d:85:44:bb: 36:16:90:2a:9f:bd:4e:0e:83:61:ac:1c:ba:73:48:21:e3:58: 75:f0:20:41:6b:d5:d7:af:4a:cf:83:52:d9:a6:b9:b1:a5:2e: 91:de:f6:81:0d:df:eb:58:d7:ef:41:8c:10:aa:ec:42:02:57: 6e:79:61:ff:34:0e:fe:a4:74:af:f1:9c:90:70:c3:c4:94:a4: ea:d5:ee:bf:b9:55:b1:9d:81:21:99:ad:ed:3e:15:0c:17:af: 68:ba:88:c3:e9:f7:1a:4a:1e:e6:a9:04:12:a6:11:00:f8:06: fc:20:51:e7:fc:f6:c9:78:af:1f:9c:d3:05:31:a1:12:2e:71: 1f:10:6f:68:57:cc:6b:42:62:1d:73:60:8b:e5:c7:48:fb:f7: bf:d0:30:d8:d3:d6:12:07:8b:46:02:c9:00:ef:80:55:70:79: d2:01:e5:79:bd:86:f5:4c:9a:6c:f8:31:86:c4:73:b1:bf:da: 9c:2d:0f:c6:d7:50:12:14:44:e0:64:d6:44:e4:7f:08:38:02: 57:08:34:f2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUYHWWosbwT5SKVwwk7n3pXo5HbfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKDlEMEQ0MEJBNUVCMTY1NEQzNUUwMzk2MUVCMEVDMDg1MUQwOUMwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5zgT5k5RkDWQwYnbmKKiAw67 smc9bGbLwMRD0IgLiadAkScz8K0I5+yM+Z9CvmDSdHoEtbtYRtXbARnOXlcwkTTD CdX4iluRIJlW1YcHAryqUkeQtPqaQq8nhTESW6NMlzWaOOWXIaipEfqF+Aox8tv7 fQXx4mRTI9tH5NmC8mLRvmP1uRenqUzRASPFDPtvPG44S5dX3S4q9I2Mkk2Ah9/D ss+K6xt0DA/ROf2sqVrONnAaMrrGzVD3TX4PQ0RNi0tcEHlpgoY4/Yb/cg2Xu6nW 7bqjcK8eUHtLBmthJ19cHlZ9nQ54cZksWCk4gqQsdPJBCZ0p20knY2vscGfVAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUnQ1Aul6xZU014Dlh6w7AhR0JwPgwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUz MTM2MzAyZTMxMzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMjM1MzIz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd+gkDANBgkqhkiG9w0BAQsFAAOCAQEAMCVtIGXzXejwVpZs KsHKjqAE+skGK31NgwStdStP3iR8PFn6/YmPrJ4vm3tdWODcAqiNhUS7NhaQKp+9 Tg6DYawcunNIIeNYdfAgQWvV169Kz4NS2aa5saUukd72gQ3f61jX70GMEKrsQgJX bnlh/zQO/qR0r/GckHDDxJSk6tXuv7lVsZ2BIZmt7T4VDBevaLqIw+n3Gkoe5qkE EqYRAPgG/CBR5/z2yXivH5zTBTGhEi5xHxBvaFfMa0JiHXNgi+XHSPv3v9Aw2NPW EgeLRgLJAO+AVXB50gHleb2G9UyabPgxhsRzsb/anC0PxtdQEhRE4GTWROR/CDgC Vwg08g== -----END CERTIFICATE-----Generated at Fri May 29 23:01:40 2026 by rpki-client