$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3137362e302f32302d3234203d3e2039383038.roa File: 3232332e3136302e3137362e302f32302d3234203d3e2039383038.roa (raw, json) Hash identifier: 7e6F9H0n35wP1b2khWzUj1isf3bsaoXfdxpI4ueB/GU= Subject key identifier: 21:27:EC:34:C4:BA:0A:AA:4F:D2:02:04:9A:A6:F6:37:F4:21:44:89 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 02E15DD0CE0F85DF00C1F5D4A9ED52DB864922CF Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3137362e302f32302d3234203d3e2039383038.roa Signing time: Wed 27 May 2026 07:34:53 +0000 ROA not before: Wed 27 May 2026 07:29:53 +0000 ROA not after: Wed 26 May 2027 07:34:53 +0000 asID: 9808 IP address blocks: 223.160.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e1:5d:d0:ce:0f:85:df:00:c1:f5:d4:a9:ed:52:db:86:49:22:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:53 2026 GMT Not After : May 26 07:34:53 2027 GMT Subject: CN=2127EC34C4BA0AAA4FD202049AA6F637F4214489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:bc:8a:e8:c5:bd:46:a5:2d:85:01:ea:36: 87:a1:ba:26:5d:6b:c1:45:f0:b6:45:3e:98:a7:04: 02:0d:f7:b2:38:cf:ec:f7:32:13:6b:be:a1:2f:c8: 4f:fc:1f:72:65:8a:cc:b7:d1:f3:c9:63:38:f4:5f: a6:75:f2:3f:dc:d1:06:45:f7:e1:f3:44:45:df:1b: 53:ab:b1:19:83:98:7c:59:00:94:e1:70:8f:d4:6d: f4:fc:10:39:00:f1:0c:b1:97:a0:52:73:2f:4b:30: 7a:cf:2f:4d:48:30:7c:db:06:99:84:2f:9f:fc:6f: 01:c9:92:44:91:8a:f3:19:04:fe:ae:29:33:78:98: 84:c9:c0:b4:24:b0:c1:46:79:2d:30:93:b2:1d:80: 0d:4e:4d:97:53:0e:ca:42:87:b8:b3:ad:6a:d6:b2: 4f:41:49:3c:f8:08:c8:a7:e0:24:f5:4b:f9:ca:12: d1:5e:10:14:b7:a4:7b:da:95:df:53:a6:e8:1e:0c: d1:bb:ab:be:36:39:02:2f:b8:eb:56:a6:96:7d:33: c5:2f:b9:e0:5e:5d:a7:c6:73:88:8f:ef:24:35:97: 7a:88:26:52:bc:df:dd:a0:e1:65:c4:df:56:18:13: 16:5c:18:1e:5a:51:1b:5e:1e:7b:50:47:0e:d5:10: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:27:EC:34:C4:BA:0A:AA:4F:D2:02:04:9A:A6:F6:37:F4:21:44:89 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3137362e302f32302d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.176.0/20 Signature Algorithm: sha256WithRSAEncryption 75:9c:d6:a7:9f:f1:86:b7:94:ee:d3:ce:62:c5:fa:4f:38:45: f4:a0:a9:46:07:06:df:91:e0:cf:cc:62:8b:4b:d4:c6:e7:d6: 7e:e0:ac:67:27:39:13:bf:c5:ba:57:62:e6:2d:c4:e4:9d:6a: cd:4e:34:db:5b:87:47:0a:05:ca:a1:cd:94:11:ab:06:f3:18: 2d:9a:5a:0f:fa:97:4d:d3:28:04:0a:e8:7d:e9:a8:4c:6d:ee: 85:3e:39:74:76:89:f1:f8:14:71:74:74:24:b0:9d:55:93:f1: 96:8e:ba:9b:49:0d:bf:65:1d:5a:4d:67:d4:21:89:53:5d:30: 96:1e:a2:13:f7:0b:7b:f5:b1:8c:51:a3:ea:1e:c9:f4:15:08: 8e:18:f3:d4:0b:aa:31:f7:85:0a:bf:76:43:f8:07:a6:ff:e3: 33:0d:42:e8:43:b6:2a:86:b9:90:42:64:eb:bd:c1:2c:88:d6: 0a:4a:19:61:75:c4:48:04:d8:02:a3:bd:84:9a:3f:29:c5:70: fb:e6:87:01:70:2f:dc:b9:ba:9c:19:04:72:a4:bd:e5:5f:55: 5b:f4:f4:7b:16:d0:18:0e:15:9d:61:b9:29:da:ea:91:f5:49: 03:c4:d2:7a:dd:5a:fd:31:0e:05:06:34:d4:c4:44:98:8e:7b: dd:65:79:50 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAuFd0M4Phd8AwfXUqe1S24ZJIs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTNaFw0yNzA1MjYwNzM0NTNaMDMxMTAvBgNV BAMTKDIxMjdFQzM0QzRCQTBBQUE0RkQyMDIwNDlBQTZGNjM3RjQyMTQ0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1LyK6MW9RqUthQHqNoehuiZd a8FF8LZFPpinBAIN97I4z+z3MhNrvqEvyE/8H3Jlisy30fPJYzj0X6Z18j/c0QZF 9+HzREXfG1OrsRmDmHxZAJThcI/UbfT8EDkA8Qyxl6BScy9LMHrPL01IMHzbBpmE L5/8bwHJkkSRivMZBP6uKTN4mITJwLQksMFGeS0wk7IdgA1OTZdTDspCh7izrWrW sk9BSTz4CMin4CT1S/nKEtFeEBS3pHvald9TpugeDNG7q742OQIvuOtWppZ9M8Uv ueBeXafGc4iP7yQ1l3qIJlK8392g4WXE31YYExZcGB5aURteHntQRw7VEPNzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUISfsNMS6CqpP0gIEmqb2N/QhRIkwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMTM3MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBN+gsDANBgkqhkiG9w0BAQsFAAOCAQEAdZzWp5/xhreU7tPOYsX6TzhF 9KCpRgcG35Hgz8xii0vUxufWfuCsZyc5E7/Fuldi5i3E5J1qzU4021uHRwoFyqHN lBGrBvMYLZpaD/qXTdMoBArofemoTG3uhT45dHaJ8fgUcXR0JLCdVZPxlo66m0kN v2UdWk1n1CGJU10wlh6iE/cLe/WxjFGj6h7J9BUIjhjz1AuqMfeFCr92Q/gHpv/j Mw1C6EO2Koa5kEJk673BLIjWCkoZYXXESATYAqO9hJo/KcVw++aHAXAv3Lm6nBkE cqS95V9VW/T0exbQGA4VnWG5KdrqkfVJA8TSet1a/TEOBQY01MREmI573WV5UA== -----END CERTIFICATE-----Generated at Sat May 30 00:02:36 2026 by rpki-client