$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3136302e302f32312d3234203d3e203234343434.roa File: 3232332e3136302e3136302e302f32312d3234203d3e203234343434.roa (raw, json) Hash identifier: eV4AcH2M/dPeu/1LDTM9e5+2UTcIsGw0jSvtCz/1WDE= Subject key identifier: A7:C4:08:D5:FA:36:F8:A8:43:64:66:FE:F7:5F:70:8D:0C:9D:DC:9A Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 04A6E8F0DB3A62BD8282E60B26778275707A4C7A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3136302e302f32312d3234203d3e203234343434.roa Signing time: Wed 27 May 2026 07:34:53 +0000 ROA not before: Wed 27 May 2026 07:29:53 +0000 ROA not after: Wed 26 May 2027 07:34:53 +0000 asID: 24444 IP address blocks: 223.160.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a6:e8:f0:db:3a:62:bd:82:82:e6:0b:26:77:82:75:70:7a:4c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:53 2026 GMT Not After : May 26 07:34:53 2027 GMT Subject: CN=A7C408D5FA36F8A8436466FEF75F708D0C9DDC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:2d:a7:7f:68:7e:4d:9e:c9:2f:a5:fe:fd: cf:7d:76:d9:24:61:bb:63:01:2f:3f:bb:f1:3a:3e: 21:de:f2:58:33:b0:46:71:b6:a1:07:32:e0:7c:8c: 81:d9:d9:9f:98:75:e1:11:aa:74:cb:dc:ad:b2:7c: dc:5a:ed:81:f9:06:53:1c:12:3e:b5:86:9c:a2:77: f9:e4:c7:86:8a:01:c5:68:64:a1:98:b0:c8:9b:7d: 9c:ab:23:99:58:e4:0f:60:f6:a8:e7:0c:fc:af:5f: 5e:84:62:bd:12:35:42:54:5d:1b:ad:10:b0:3c:42: 73:e5:c0:af:0a:f2:66:88:b5:27:a7:7a:65:44:ac: f6:8e:e5:26:e0:01:8b:53:10:f1:fb:d8:a6:d3:79: dd:93:54:7f:27:76:5d:d9:5f:cb:24:4c:7a:df:48: 55:a4:bb:f0:57:d4:b1:0d:d5:43:91:d1:e2:47:40: 3a:e1:34:fe:e8:d8:b7:eb:a0:3f:d0:06:5d:df:ab: da:05:46:b1:f3:63:9a:b4:cb:9b:ec:b4:18:30:db: 57:1e:a9:9d:fc:6f:03:e3:3d:2a:89:25:6b:ed:34: 73:53:26:7a:95:e7:59:9b:a6:e8:1f:1f:43:fd:5d: 88:1c:7c:94:3c:e5:18:2a:ac:cd:f0:f6:4e:a4:ef: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:08:D5:FA:36:F8:A8:43:64:66:FE:F7:5F:70:8D:0C:9D:DC:9A X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3136302e302f32312d3234203d3e203234343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.160.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:f1:2d:e8:fc:25:41:b4:9b:da:f8:72:33:69:a9:40:9c:d2: 99:0e:9f:0d:3e:5d:3c:ad:44:8e:87:d0:8e:91:ea:df:b3:ef: 58:0d:44:0c:6d:e8:ff:60:28:4d:13:64:54:13:1d:a9:21:dc: 9a:1a:af:9d:c6:0c:d7:24:ca:de:23:39:42:71:34:8d:a3:43: 4e:5e:66:37:fe:9d:e0:ee:ba:73:3d:d6:c3:76:e1:57:0a:e5: df:48:23:b7:ad:7c:07:31:a8:01:21:02:63:18:df:65:df:51: 7f:05:26:d6:b4:41:cc:c8:eb:18:1a:61:a2:98:74:3c:0e:ba: db:a5:2f:b7:22:02:94:fe:2c:bd:72:12:c8:10:ce:63:62:ce: d3:c7:39:15:a8:e3:7b:0f:2a:81:f1:56:f4:66:df:84:50:90: ae:dd:f3:b5:d9:96:2a:6f:fc:85:e2:a5:db:96:a2:c8:c9:eb: be:c9:fa:d4:cc:ee:de:2d:13:9e:3b:7b:98:42:72:26:c6:20: 47:73:fd:97:eb:6e:c7:91:e1:23:b9:96:34:1c:26:2d:ac:3d: 81:02:2f:1b:3f:5c:62:ac:79:d4:91:6e:1f:18:9e:69:c8:6c: 15:9d:9e:9d:33:e4:b1:39:85:cd:81:43:bf:3b:a9:7c:3f:5e: 37:95:7a:fa -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBKbo8Ns6Yr2CguYLJneCdXB6THowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTNaFw0yNzA1MjYwNzM0NTNaMDMxMTAvBgNV BAMTKEE3QzQwOEQ1RkEzNkY4QTg0MzY0NjZGRUY3NUY3MDhEMEM5RERDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgEi2nf2h+TZ7JL6X+/c99dtkk YbtjAS8/u/E6PiHe8lgzsEZxtqEHMuB8jIHZ2Z+YdeERqnTL3K2yfNxa7YH5BlMc Ej61hpyid/nkx4aKAcVoZKGYsMibfZyrI5lY5A9g9qjnDPyvX16EYr0SNUJUXRut ELA8QnPlwK8K8maItSenemVErPaO5SbgAYtTEPH72KbTed2TVH8ndl3ZX8skTHrf SFWku/BX1LEN1UOR0eJHQDrhNP7o2LfroD/QBl3fq9oFRrHzY5q0y5vstBgw21ce qZ38bwPjPSqJJWvtNHNTJnqV51mbpugfH0P9XYgcfJQ85RgqrM3w9k6k7y6PAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUp8QI1fo2+KhDZGb+919wjQyd3JowHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMDJlMzEzNjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNDM0MzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA9+goDANBgkqhkiG9w0BAQsFAAOCAQEAnPEt6PwlQbSb2vhyM2mp QJzSmQ6fDT5dPK1EjofQjpHq37PvWA1EDG3o/2AoTRNkVBMdqSHcmhqvncYM1yTK 3iM5QnE0jaNDTl5mN/6d4O66cz3Ww3bhVwrl30gjt618BzGoASECYxjfZd9RfwUm 1rRBzMjrGBphoph0PA6626UvtyIClP4svXISyBDOY2LO08c5Fajjew8qgfFW9Gbf hFCQrt3ztdmWKm/8heKl25aiyMnrvsn61Mzu3i0Tnjt7mEJyJsYgR3P9l+tux5Hh I7mWNBwmLaw9gQIvGz9cYqx51JFuHxieachsFZ2enTPksTmFzYFDvzupfD9eN5V6 +g== -----END CERTIFICATE-----Generated at Fri May 29 23:01:44 2026 by rpki-client