$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31362e302f32322d3234203d3e203536303438.roa File: 3232332e3136302e31362e302f32322d3234203d3e203536303438.roa (raw, json) Hash identifier: sbAbZGESE98BEd0c5J7mj/wGbqRrxRQ1EBOk7I2BcUQ= Subject key identifier: 67:4E:EB:2D:A8:33:43:60:34:0B:3D:80:65:B2:07:CE:1C:2B:46:FD Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 0C4A8E55673F0C9F7A7F0AA993C44A1FA4D89039 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31362e302f32322d3234203d3e203536303438.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 56048 IP address blocks: 223.160.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4a:8e:55:67:3f:0c:9f:7a:7f:0a:a9:93:c4:4a:1f:a4:d8:90:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=674EEB2DA8334360340B3D8065B207CE1C2B46FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c4:f0:27:5b:07:de:9f:98:b6:7c:fa:d6:da: 0f:1b:96:b1:f6:af:2a:33:d6:e7:83:a9:ab:d8:05: ee:b2:11:71:4b:78:2c:c7:54:5f:16:42:4c:66:c8: ad:e2:94:19:33:00:fc:4e:93:4a:ad:b6:53:be:47: ef:9b:4c:2c:f9:df:80:9b:fa:ef:02:a5:2c:49:b1: b3:1f:ad:02:14:a1:8a:48:cb:6b:b7:6b:cb:41:3f: bc:6d:c0:6d:84:02:06:63:ce:3d:8e:14:19:af:d4: be:90:68:84:07:99:7c:cc:c9:79:89:d0:73:9a:4e: 82:77:13:90:e1:b0:11:7b:30:fa:ed:1b:11:71:68: 65:9f:92:f1:02:85:65:6a:fc:16:84:d1:10:4b:9c: d2:0d:aa:63:c6:3c:49:ea:52:b8:ec:93:ac:97:d7: 72:d4:05:b2:4b:df:61:70:ec:d7:4c:2c:3e:39:8a: 1c:4e:de:92:ea:d7:d8:30:12:85:a6:9f:4f:13:dc: 8b:ed:37:f4:be:86:25:ee:b5:97:a9:36:b0:f0:34: ee:4e:ec:33:ab:be:b1:ad:16:23:df:57:1d:f1:da: 3e:4d:5a:f0:73:23:0d:ee:1d:27:60:a6:a3:97:7c: 33:c3:df:22:28:cf:36:5e:cb:e4:d8:0b:46:1f:62: 3c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4E:EB:2D:A8:33:43:60:34:0B:3D:80:65:B2:07:CE:1C:2B:46:FD X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e31362e302f32322d3234203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.16.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:15:0c:f9:98:55:bd:68:90:63:77:ea:53:e6:c1:db:9d:42: 8c:8f:7b:d7:a3:58:64:ee:9e:b3:8e:92:e7:ba:55:c4:bb:99: 77:5d:8d:9a:bd:54:2c:0d:f4:4f:83:d2:81:ef:1e:64:aa:ce: e4:3e:9c:11:16:d5:b8:f4:72:f1:21:96:78:f6:a8:6a:62:04: 62:8c:43:1b:34:17:c9:47:f4:4d:59:67:5a:ef:25:a1:93:20: 8e:ea:a1:70:c3:d0:10:d9:b6:b7:6b:d4:53:8f:f8:f4:2e:55: c8:61:50:26:fb:33:34:d9:7a:c7:1f:b0:2f:d7:88:57:c7:0e: 3f:42:e7:f1:b3:f4:92:cb:82:9c:66:9c:6f:9f:46:37:45:09: c7:f1:4a:00:de:70:00:85:90:c5:3a:e3:e1:f3:8a:be:69:5e: 93:12:b0:84:ba:93:1f:8b:ed:de:fc:66:76:6e:38:7e:57:1d: 45:6c:4e:28:da:60:c7:96:74:e6:77:36:a8:1f:00:55:69:9d: 63:0b:54:16:08:ab:45:77:5b:1a:34:16:2f:c6:97:e5:03:81: 12:93:b9:94:47:78:ff:6b:cb:c3:f8:8c:d8:9c:65:80:fb:d2: b1:4d:db:78:ee:6a:5d:0d:1a:75:76:40:93:0d:a6:50:23:99: 9d:c7:13:24 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDEqOVWc/DJ96fwqpk8RKH6TYkDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKDY3NEVFQjJEQTgzMzQzNjAzNDBCM0Q4MDY1QjIwN0NFMUMyQjQ2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsxPAnWwfen5i2fPrW2g8blrH2 ryoz1ueDqavYBe6yEXFLeCzHVF8WQkxmyK3ilBkzAPxOk0qttlO+R++bTCz534Cb +u8CpSxJsbMfrQIUoYpIy2u3a8tBP7xtwG2EAgZjzj2OFBmv1L6QaIQHmXzMyXmJ 0HOaToJ3E5DhsBF7MPrtGxFxaGWfkvEChWVq/BaE0RBLnNINqmPGPEnqUrjsk6yX 13LUBbJL32Fw7NdMLD45ihxO3pLq19gwEoWmn08T3IvtN/S+hiXutZepNrDwNO5O 7DOrvrGtFiPfVx3x2j5NWvBzIw3uHSdgpqOXfDPD3yIozzZey+TYC0YfYjzzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZ07rLagzQ2A0Cz2AZbIHzhwrRv0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+gEDANBgkqhkiG9w0BAQsFAAOCAQEAfxUM+ZhVvWiQY3fqU+bB251C jI9716NYZO6es46S57pVxLuZd12Nmr1ULA30T4PSge8eZKrO5D6cERbVuPRy8SGW ePaoamIEYoxDGzQXyUf0TVlnWu8loZMgjuqhcMPQENm2t2vUU4/49C5VyGFQJvsz NNl6xx+wL9eIV8cOP0Ln8bP0ksuCnGacb59GN0UJx/FKAN5wAIWQxTrj4fOKvmle kxKwhLqTH4vt3vxmdm44flcdRWxOKNpgx5Z05nc2qB8AVWmdYwtUFgirRXdbGjQW L8aX5QOBEpO5lEd4/2vLw/iM2JxlgPvSsU3beO5qXQ0adXZAkw2mUCOZnccTJA== -----END CERTIFICATE-----Generated at Sat May 30 00:02:35 2026 by rpki-client