$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa File: 3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: udbk6h8yLK7qqurwxg3CFIO9fa7Jfan9A/rJv5djlRw= Subject key identifier: DB:8E:8E:5F:F6:3A:03:71:FE:4E:2D:05:C2:29:DD:12:7D:8B:2C:DD Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 51CF5D53FF7BCB43240569B41F00EBDB7C392CD4 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa Signing time: Wed 27 May 2026 07:34:55 +0000 ROA not before: Wed 27 May 2026 07:29:55 +0000 ROA not after: Wed 26 May 2027 07:34:55 +0000 asID: 9808 IP address blocks: 223.160.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cf:5d:53:ff:7b:cb:43:24:05:69:b4:1f:00:eb:db:7c:39:2c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:55 2026 GMT Not After : May 26 07:34:55 2027 GMT Subject: CN=DB8E8E5FF63A0371FE4E2D05C229DD127D8B2CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b3:60:df:db:a7:72:a3:c1:f1:36:8e:47:a9: 49:c2:0d:51:2a:92:db:76:d5:c2:ce:57:09:f1:b2: be:7b:4b:da:31:30:e7:b5:a4:ca:c9:5d:2c:d1:7a: b3:dd:80:f4:22:74:b7:fd:23:5a:bf:c3:35:22:2c: 92:86:54:4f:56:60:b9:09:3f:67:cc:7e:34:59:a2: ec:1c:ef:64:0d:f6:b1:f3:d3:e1:60:5e:20:bd:85: 3b:a0:57:6a:a9:b2:b0:1e:92:f2:17:07:60:98:77: ff:39:c5:e9:79:18:65:66:15:62:d1:e1:91:73:d7: 3a:ff:e8:ca:61:41:11:b5:8a:48:1f:61:98:88:29: c1:59:9a:42:cf:5c:e3:74:8d:59:4c:e0:03:5f:cc: 76:8a:69:a2:8c:c3:2a:31:0d:31:e1:27:45:79:86: 3d:5f:6a:a2:9f:22:b9:14:46:b6:31:e5:be:d2:10: a6:98:0e:ab:d3:94:be:30:db:14:2c:c9:e2:23:b9: b5:68:3c:d6:70:84:2c:34:7c:44:a5:6c:e5:eb:45: 71:1c:6f:da:27:c1:25:ba:f1:0c:a3:65:00:e1:f6: b8:93:a0:da:9d:0c:fa:c4:1e:8a:0e:82:15:f8:10: ec:2d:11:03:33:b3:de:99:52:a8:77:87:60:aa:df: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8E:8E:5F:F6:3A:03:71:FE:4E:2D:05:C2:29:DD:12:7D:8B:2C:DD X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233362e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.160.236.0/23 Signature Algorithm: sha256WithRSAEncryption 88:6f:02:3b:95:68:4d:6c:3b:82:83:77:73:30:3b:0c:72:1f: 83:68:7c:32:cb:97:6d:91:8f:c3:e0:4d:85:cc:96:84:a2:e2: 61:61:af:c8:05:7d:a4:cd:7d:1e:81:c6:bd:5e:9c:9c:3c:80: a9:0b:5a:13:c1:f0:4f:b5:03:10:95:63:5b:80:46:8a:92:d6: 6b:16:ce:5a:7d:5a:a9:76:fd:ee:b3:09:13:50:16:1e:9c:cb: d6:ed:98:24:53:5f:52:5f:da:b6:ed:2b:a8:1a:89:bc:a2:92: 5d:03:61:fa:84:d7:e4:5b:7e:44:d1:64:e0:bd:ce:78:98:df: 2c:24:20:cc:75:a4:6b:4d:6c:67:69:9d:62:52:1a:13:3c:76: e0:6c:66:58:45:1f:7a:56:31:6e:83:a4:6d:cd:b3:81:8a:ec: e1:fa:fc:93:e7:92:78:e4:03:4f:99:55:e9:a1:07:ce:4b:00: 79:84:62:af:19:af:4e:ec:cb:15:2a:5a:6e:f0:20:63:e1:6d: 6c:48:f7:c8:5c:8a:88:7b:83:e7:4e:95:9c:0e:23:3d:ec:a1: 10:2f:34:20:b0:c2:ba:bf:8c:62:3c:d1:9c:c9:ff:ec:bb:d9: 57:c9:ea:a8:78:3c:66:f5:0c:cd:c9:bf:04:ca:f7:be:93:6b: 55:d5:74:71 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUUc9dU/97y0MkBWm0HwDr23w5LNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTVaFw0yNzA1MjYwNzM0NTVaMDMxMTAvBgNV BAMTKERCOEU4RTVGRjYzQTAzNzFGRTRFMkQwNUMyMjlERDEyN0Q4QjJDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqs2Df26dyo8HxNo5HqUnCDVEq ktt21cLOVwnxsr57S9oxMOe1pMrJXSzRerPdgPQidLf9I1q/wzUiLJKGVE9WYLkJ P2fMfjRZouwc72QN9rHz0+FgXiC9hTugV2qpsrAekvIXB2CYd/85xel5GGVmFWLR 4ZFz1zr/6MphQRG1ikgfYZiIKcFZmkLPXON0jVlM4ANfzHaKaaKMwyoxDTHhJ0V5 hj1faqKfIrkURrYx5b7SEKaYDqvTlL4w2xQsyeIjubVoPNZwhCw0fESlbOXrRXEc b9onwSW68QyjZQDh9riToNqdDPrEHooOghX4EOwtEQMzs96ZUqh3h2Cq39ndAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU246OX/Y6A3H+Ti0FwindEn2LLN0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMwMmUzMjMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+g7DANBgkqhkiG9w0BAQsFAAOCAQEAiG8CO5VoTWw7goN3czA7DHIf g2h8MsuXbZGPw+BNhcyWhKLiYWGvyAV9pM19HoHGvV6cnDyAqQtaE8HwT7UDEJVj W4BGipLWaxbOWn1aqXb97rMJE1AWHpzL1u2YJFNfUl/atu0rqBqJvKKSXQNh+oTX 5Ft+RNFk4L3OeJjfLCQgzHWka01sZ2mdYlIaEzx24GxmWEUfelYxboOkbc2zgYrs 4fr8k+eSeOQDT5lV6aEHzksAeYRirxmvTuzLFSpabvAgY+FtbEj3yFyKiHuD506V nA4jPeyhEC80ILDCur+MYjzRnMn/7LvZV8nqqHg8ZvUMzcm/BMr3vpNrVdV0cQ== -----END CERTIFICATE-----Generated at Sat May 30 00:02:23 2026 by rpki-client