$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3135322e302f32312d3234203d3e203536303436.roa File: 3232332e3136302e3135322e302f32312d3234203d3e203536303436.roa (raw, json) Hash identifier: xtfjUwKmqrhhGSRfDlPt2mSrjG1LWc5/vp7NqAnqmr8= Subject key identifier: 53:61:B2:EE:3A:8B:55:95:C0:C7:BC:22:6B:2B:26:05:02:35:A1:9D Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 0C08F9373963007A2C71E3680A0B4DEFFF52971A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3135322e302f32312d3234203d3e203536303436.roa Signing time: Wed 27 May 2026 07:34:57 +0000 ROA not before: Wed 27 May 2026 07:29:57 +0000 ROA not after: Wed 26 May 2027 07:34:57 +0000 asID: 56046 IP address blocks: 223.160.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:08:f9:37:39:63:00:7a:2c:71:e3:68:0a:0b:4d:ef:ff:52:97:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:57 2026 GMT Not After : May 26 07:34:57 2027 GMT Subject: CN=5361B2EE3A8B5595C0C7BC226B2B26050235A19D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:c4:e0:34:04:73:a2:0e:08:06:68:05:87: e9:fd:c9:09:aa:d2:af:73:9f:82:0d:b3:82:c8:b3: 5a:72:04:3a:30:eb:b6:23:37:b4:91:54:b9:6f:0a: 2b:e9:e6:04:c0:7c:f3:09:40:29:11:3b:af:92:0c: 8c:94:26:ad:ed:79:db:a6:a8:0b:40:04:d6:46:b1: 22:f7:65:36:a0:d8:77:7f:15:ab:7a:88:1d:55:c5: 42:12:95:f8:ad:05:e0:33:d5:bf:7b:b8:fa:37:fe: a7:d7:f2:df:8c:90:5e:cd:b7:f9:5b:50:80:47:08: 03:61:06:a3:b4:3f:33:7b:59:c5:44:c5:45:3b:dd: 07:35:8a:ec:46:a7:21:33:5e:32:72:4b:3c:b1:70: 03:72:15:ea:09:1c:58:eb:95:0e:e2:fe:e4:f3:37: 6b:bd:6c:d0:a5:51:63:7d:72:d4:7c:a7:87:de:37: 90:7d:37:4b:55:49:9c:b2:c9:3e:1e:8a:05:fd:ec: d3:db:bf:f1:0c:4d:0b:89:0b:b0:a0:6f:73:88:2e: 42:37:76:13:9c:7a:47:91:23:0f:b4:5f:bd:db:ad: 45:33:51:30:b7:fc:49:a8:7a:f7:46:f8:ea:d5:73: ec:4d:05:88:93:18:64:89:08:43:25:7d:d0:69:05: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:61:B2:EE:3A:8B:55:95:C0:C7:BC:22:6B:2B:26:05:02:35:A1:9D X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3135322e302f32312d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.152.0/21 Signature Algorithm: sha256WithRSAEncryption b6:3c:48:b5:7d:03:68:2f:84:54:51:31:97:e4:fb:1c:03:b6: e3:d0:71:7e:a5:af:09:5c:e4:d3:c9:ec:c8:8e:bb:27:50:84: 61:81:f2:68:28:1f:ff:7a:5b:fd:7a:5d:84:6d:62:1a:bf:41: e3:89:38:40:7c:ce:92:5a:d2:3a:49:09:f3:f0:16:4e:87:08: 2e:71:22:6b:48:81:06:d2:fb:de:f4:3d:14:ad:89:ba:38:3d: 3f:d1:f8:76:77:f2:3e:6d:3f:80:a3:83:ab:6b:0f:0d:f3:90: 54:7a:3b:ed:4b:76:1e:7c:eb:8f:cd:d9:74:c3:33:60:44:eb: 1c:46:62:25:03:ff:2e:97:ed:48:be:ba:33:b0:23:21:e4:2e: e8:dc:57:28:9a:db:f8:d1:b7:60:fe:20:91:e1:3c:32:fc:27: 10:43:a2:c4:73:cf:a8:f5:34:c0:1f:11:bb:ef:27:27:e5:07: b8:17:a3:4d:08:35:69:fd:5d:30:71:fc:ea:31:b2:dc:66:93: 8c:c3:ff:a7:62:81:f0:54:c0:24:46:bd:13:5a:52:2b:1d:1c: e1:09:57:8b:24:e3:d4:9c:a3:9d:47:61:19:7a:51:63:a0:e3: a0:9d:2a:d5:57:e4:bc:36:62:96:23:cb:67:f8:d6:1c:a2:9f: 1f:ef:40:17 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDAj5NzljAHosceNoCgtN7/9SlxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTdaFw0yNzA1MjYwNzM0NTdaMDMxMTAvBgNV BAMTKDUzNjFCMkVFM0E4QjU1OTVDMEM3QkMyMjZCMkIyNjA1MDIzNUExOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMMTgNARzog4IBmgFh+n9yQmq 0q9zn4INs4LIs1pyBDow67YjN7SRVLlvCivp5gTAfPMJQCkRO6+SDIyUJq3tedum qAtABNZGsSL3ZTag2Hd/Fat6iB1VxUISlfitBeAz1b97uPo3/qfX8t+MkF7Nt/lb UIBHCANhBqO0PzN7WcVExUU73Qc1iuxGpyEzXjJySzyxcANyFeoJHFjrlQ7i/uTz N2u9bNClUWN9ctR8p4feN5B9N0tVSZyyyT4eigX97NPbv/EMTQuJC7Cgb3OILkI3 dhOcekeRIw+0X73brUUzUTC3/EmoevdG+OrVc+xNBYiTGGSJCEMlfdBpBZVnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUU2Gy7jqLVZXAx7wiaysmBQI1oZ0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzNTMyMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9+gmDANBgkqhkiG9w0BAQsFAAOCAQEAtjxItX0DaC+EVFExl+T7 HAO249BxfqWvCVzk08nsyI67J1CEYYHyaCgf/3pb/XpdhG1iGr9B44k4QHzOklrS OkkJ8/AWTocILnEia0iBBtL73vQ9FK2Jujg9P9H4dnfyPm0/gKODq2sPDfOQVHo7 7Ut2Hnzrj83ZdMMzYETrHEZiJQP/LpftSL66M7AjIeQu6NxXKJrb+NG3YP4gkeE8 MvwnEEOixHPPqPU0wB8Ru+8nJ+UHuBejTQg1af1dMHH86jGy3GaTjMP/p2KB8FTA JEa9E1pSKx0c4QlXiyTj1JyjnUdhGXpRY6DjoJ0q1VfkvDZiliPLZ/jWHKKfH+9A Fw== -----END CERTIFICATE-----Generated at Sat May 30 00:02:57 2026 by rpki-client