
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e342e302f32332d3234203d3e203536303430.roa
File: 3232332e3136302e342e302f32332d3234203d3e203536303430.roa (raw, json)
Hash identifier: VcSRZJMdoDYN74c/JV7l45/xmswUKrhPMxp3fdDtffQ=
Subject key identifier: 01:29:9E:CB:79:87:C2:16:28:7F:F6:2A:D9:51:48:08:6F:04:2F:F9
Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial: 1717332CD4663D46E28979D07434C852EB246565
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e342e302f32332d3234203d3e203536303430.roa
Signing time: Wed 27 May 2026 07:34:54 +0000
ROA not before: Wed 27 May 2026 07:29:54 +0000
ROA not after: Wed 26 May 2027 07:34:54 +0000
asID: 56040
IP address blocks: 223.160.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:17:33:2c:d4:66:3d:46:e2:89:79:d0:74:34:c8:52:eb:24:65:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Validity
Not Before: May 27 07:29:54 2026 GMT
Not After : May 26 07:34:54 2027 GMT
Subject: CN=01299ECB7987C216287FF62AD95148086F042FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:ba:53:56:24:36:4f:67:ad:2c:97:4b:fb:
97:4e:d4:e0:ac:91:92:49:5b:66:d6:25:08:fb:f1:
3b:12:b5:c3:69:c8:e6:67:18:f9:6f:9e:c1:b4:27:
71:f5:05:f4:a5:69:c6:6f:c1:2c:36:a0:f0:fc:9e:
45:63:dd:1d:60:19:41:7f:7a:a9:1c:de:2d:7c:71:
f9:bf:f4:a8:cb:1e:f0:72:ab:52:b0:68:8b:35:34:
4f:00:ca:ec:d1:e9:ec:52:98:4d:f4:5d:04:08:c6:
6c:df:da:89:59:49:4a:ff:93:d8:e1:f3:cd:c8:64:
3d:27:90:3b:4b:55:4a:f3:c5:1e:26:7b:a5:01:3d:
e3:e4:9d:a5:92:55:e5:16:b9:d4:7f:80:d1:0f:db:
1e:dd:65:05:31:ed:04:ce:e3:44:7b:7b:84:54:67:
4a:20:ee:ec:1f:93:ac:78:53:1d:fe:e5:36:29:a0:
1e:4a:98:18:40:8b:f9:f2:f7:24:2a:83:e2:e9:cc:
f2:c5:82:a9:d0:e5:28:e4:82:46:ed:6e:27:3c:09:
51:b9:c0:be:f1:31:1b:e6:d9:75:b1:c8:b1:10:9a:
26:21:4e:f2:6a:1d:c9:a6:c8:2d:43:6a:3d:2d:83:
f2:38:13:3b:4f:54:bc:d2:0e:77:62:bb:8e:ec:f6:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:9E:CB:79:87:C2:16:28:7F:F6:2A:D9:51:48:08:6F:04:2F:F9
X509v3 Authority Key Identifier:
keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e342e302f32332d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.160.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:88:7e:a5:5a:32:58:18:fa:b1:2a:97:77:0f:d2:6a:db:9f:
eb:ea:10:66:b5:0a:28:d9:16:14:a9:c3:90:fd:3d:5a:b1:e0:
a6:c9:64:fe:10:4c:5b:33:8a:87:84:8f:2b:0d:18:34:67:6a:
17:37:e1:7e:a0:83:f9:56:6d:bc:3e:f2:f3:55:23:9a:9b:0c:
64:47:65:11:74:73:88:90:bb:66:90:9b:fb:3b:68:e3:d7:22:
70:3c:d0:c1:d4:8e:8e:02:0d:51:a6:a8:54:4b:a5:43:cb:58:
6f:05:d0:bb:89:84:c8:17:c1:0d:8f:14:b5:5a:e1:8f:4f:06:
0b:d8:c2:52:06:01:ba:75:bd:1d:7d:0c:a9:b0:4a:84:e2:33:
07:db:36:4e:1f:72:7b:15:03:00:55:00:75:a0:4a:59:05:6e:
54:d1:47:03:37:2f:7c:73:dd:b5:4f:0f:ef:4e:e0:7e:da:70:
0a:43:37:3d:e2:be:a8:3e:49:f5:e3:9a:f6:09:7e:90:e2:2f:
95:34:c2:40:aa:67:d0:8a:97:85:a0:2b:6b:b8:c0:7e:f1:73:
aa:f2:32:f5:2f:1f:75:cf:ad:0a:70:ae:94:37:ae:ed:74:a1:
69:14:ce:82:e6:c0:43:11:98:dd:8e:c9:df:02:76:7a:4a:b2:
53:be:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:18 2026 by rpki-client