
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa
File: 3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa (raw, json)
Hash identifier: a2r6boEbz7Y94cm6zWR5xjUukC2RsGmDtSN7OVn/QF0=
Subject key identifier: AC:BA:07:FE:D5:FF:69:A0:A7:EA:08:65:C1:D2:08:AE:7C:50:73:4E
Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial: 503DC8C1B44258267CEACCFFDAA1B89BAA6E6E16
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa
Signing time: Wed 27 May 2026 07:34:52 +0000
ROA not before: Wed 27 May 2026 07:29:52 +0000
ROA not after: Wed 26 May 2027 07:34:52 +0000
asID: 24400
IP address blocks: 223.160.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3d:c8:c1:b4:42:58:26:7c:ea:cc:ff:da:a1:b8:9b:aa:6e:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Validity
Not Before: May 27 07:29:52 2026 GMT
Not After : May 26 07:34:52 2027 GMT
Subject: CN=ACBA07FED5FF69A0A7EA0865C1D208AE7C50734E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:eb:89:1b:81:cf:4e:81:4b:ef:ed:d9:ef:
f0:91:31:38:f3:d0:bc:3f:7d:23:1d:34:95:0a:65:
9e:36:a1:fd:d9:87:7a:b7:68:b7:e8:a2:88:96:4d:
65:fb:c7:f6:44:b6:c3:ab:0e:90:8f:fd:00:8a:09:
da:82:ba:36:5f:00:a5:43:36:b5:c5:9d:b1:27:51:
88:69:14:aa:a2:16:cb:03:50:e3:1d:02:9f:9a:0f:
5e:4e:f2:62:86:11:2f:7f:79:7b:d6:db:a4:01:dd:
4d:a3:cc:99:d7:29:09:d6:c5:78:c5:69:96:78:72:
af:02:ba:1a:7a:9f:73:41:49:b0:de:85:05:78:df:
a7:bf:0a:82:1c:ad:09:8e:66:f4:85:5d:4f:7e:4d:
5b:fc:7c:18:64:10:2e:85:42:21:3f:15:23:06:cc:
53:6a:62:93:5c:e9:9b:ed:fd:43:bb:63:18:04:e3:
5c:c9:02:b7:fb:b5:e2:55:c6:f7:41:41:00:c0:32:
84:d5:7c:c8:82:a2:29:aa:e7:c6:8b:e4:8a:3e:ab:
0f:f7:14:3b:54:7a:97:1f:4b:40:2d:6c:91:f6:39:
34:0f:be:1f:d1:3b:88:72:b6:1d:09:56:e1:57:95:
aa:5e:9a:dc:24:ed:fd:b2:b6:08:4f:14:d5:27:f8:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BA:07:FE:D5:FF:69:A0:A7:EA:08:65:C1:D2:08:AE:7C:50:73:4E
X509v3 Authority Key Identifier:
keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3230362e302f32332d3234203d3e203234343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.160.206.0/23
Signature Algorithm: sha256WithRSAEncryption
53:33:24:02:18:1a:a7:6b:06:50:e2:71:bc:9b:9b:8c:29:3d:
b8:57:ca:e9:87:9b:c3:22:70:b5:68:34:4b:26:5b:75:0b:3e:
2f:6c:77:41:5c:42:27:1b:ce:f5:59:42:f7:88:63:f0:c5:42:
66:8f:76:d3:b0:a2:8e:c9:89:c7:85:aa:bd:ee:be:6c:ec:ab:
e4:ac:2e:7c:da:85:b7:72:c2:e5:b5:d5:fb:7c:e1:89:f7:64:
9e:7a:d3:40:f8:b1:45:85:d9:2a:f2:14:2a:11:b9:e5:c8:3a:
fe:62:1e:b9:18:3e:3c:8e:8c:a3:81:13:eb:ef:21:14:29:59:
7e:2f:74:3f:f6:8f:86:d0:67:57:2f:0e:52:f6:c0:ef:d3:15:
d9:ba:96:7a:21:cd:76:df:6f:6f:31:1b:f3:c0:2e:e1:13:eb:
75:b1:99:a7:22:6c:c0:3c:aa:18:db:7b:a9:f9:4c:6c:e8:b8:
58:22:88:ba:37:8c:b7:5f:c6:a3:37:87:6a:84:a2:f7:2d:66:
8a:9a:4c:7b:3f:8c:74:c0:d2:31:6a:30:79:21:fe:9d:a1:8e:
ce:60:4d:ae:00:5e:eb:00:39:04:f3:2e:a2:40:e7:40:c1:a4:
6c:b4:1e:64:4f:ce:5a:54:59:b2:d3:20:47:bb:a5:c7:56:6b:
26:62:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:03:02 2026 by rpki-client