
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa
File: 3232332e3136302e322e302f32332d3234203d3e203536303436.roa (raw, json)
Hash identifier: UO7HtsX/7Ew7s2vBvm7nveXtdS2kit1RUTSlulAIBSE=
Subject key identifier: F1:4E:42:7A:B8:5E:CD:59:21:54:81:A7:6C:38:7A:78:22:DE:AC:9A
Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial: 7926A05BBCA7B66F8F587C7F6F3CACCF1B418A8A
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa
Signing time: Wed 27 May 2026 07:34:57 +0000
ROA not before: Wed 27 May 2026 07:29:57 +0000
ROA not after: Wed 26 May 2027 07:34:57 +0000
asID: 56046
IP address blocks: 223.160.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:26:a0:5b:bc:a7:b6:6f:8f:58:7c:7f:6f:3c:ac:cf:1b:41:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Validity
Not Before: May 27 07:29:57 2026 GMT
Not After : May 26 07:34:57 2027 GMT
Subject: CN=F14E427AB85ECD59215481A76C387A7822DEAC9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:50:d2:32:68:48:ce:28:b4:a3:36:0e:ae:fe:
4c:52:2c:d7:30:f0:28:58:9d:0d:bb:73:de:b7:98:
be:df:aa:c2:ad:e8:52:b4:f5:80:ed:c7:64:c4:2b:
61:e6:19:21:73:69:92:c6:50:ed:fb:7c:4c:fa:0c:
87:15:2f:e4:25:26:2a:3b:84:d8:fa:7f:8d:c2:e4:
43:f1:3a:37:f4:f8:39:04:d7:b2:75:6c:0d:3a:95:
40:ff:05:c8:3d:bd:29:18:02:8a:0f:f4:ad:fe:09:
a5:c4:5c:79:66:06:0a:e5:7c:95:e8:5a:ac:12:39:
d7:4c:5c:5b:fc:40:d3:58:74:59:a2:77:30:77:2d:
c7:18:65:2e:3c:53:b3:9e:ac:50:41:20:a8:10:35:
c2:b0:96:1f:1a:0e:00:03:b9:25:51:d7:2f:fa:e4:
de:58:d0:8d:73:4e:cc:09:17:79:bc:80:b3:56:b3:
be:6e:d7:7d:ca:4d:73:e2:47:8f:12:af:18:7a:53:
82:c3:6e:a6:1e:1b:24:87:c2:8b:a6:1f:41:74:c1:
14:6b:d7:a1:7a:5d:ed:8b:d7:0c:8d:cc:c8:8e:3a:
9b:d8:da:63:e5:9a:0d:e9:00:a1:0d:30:ef:da:56:
df:1c:97:c1:08:c9:2f:6e:d5:64:f5:a3:9f:13:93:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4E:42:7A:B8:5E:CD:59:21:54:81:A7:6C:38:7A:78:22:DE:AC:9A
X509v3 Authority Key Identifier:
keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.160.2.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:9c:e5:eb:79:5d:c7:a4:73:ad:d5:8b:2e:78:59:e8:1a:b3:
01:bb:3a:1f:27:a7:72:81:44:d2:53:34:52:35:71:e8:cb:4f:
38:df:05:62:a9:22:c6:9e:c7:23:62:a5:eb:a2:0c:41:fe:38:
07:64:d6:01:54:3f:7a:2c:b6:dc:b2:58:7f:0d:a6:5c:3e:cb:
90:a1:bd:db:7f:db:78:aa:f9:b6:a0:57:a4:9b:a1:ea:80:62:
6c:d6:86:02:ba:13:0d:9b:e3:ee:83:06:38:cc:fa:e0:9d:43:
c9:c7:13:22:c2:42:c3:3a:e4:90:df:1e:a2:02:ad:dd:08:42:
2b:bb:e2:bf:e4:ea:a9:98:c7:14:95:16:7f:70:31:b5:e0:49:
d8:ed:db:ae:95:87:05:d1:96:ce:9d:29:51:81:b0:3c:b6:76:
66:e7:da:0e:53:91:00:86:0b:a1:24:6a:d1:68:b3:39:e7:d4:
ee:16:79:a9:65:b7:ab:8d:1e:f2:ea:78:fa:9f:d7:dd:e6:ef:
cd:34:d7:43:42:9b:93:f7:0e:5c:02:42:4d:3c:e7:e2:fa:af:
3e:2c:34:69:5e:82:e6:73:55:98:93:94:8d:4e:d6:6d:c3:59:
a3:ba:23:63:67:2d:fb:4d:b5:2b:b8:d2:24:79:73:d2:c7:60:
cf:61:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:07 2026 by rpki-client