
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e382e302f32332d3234203d3e203536303438.roa
File: 3232332e3136302e382e302f32332d3234203d3e203536303438.roa (raw, json)
Hash identifier: 9L7/NyLGQZYJI/NvSLW4ZR1iKybgOd6amRpy+bngpbw=
Subject key identifier: DB:23:10:A1:C6:5D:DB:7F:86:E5:15:14:01:2C:93:7B:CA:30:AB:C6
Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial: 44F4389EDACA65487974D85B0DA04687DCE28F8E
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e382e302f32332d3234203d3e203536303438.roa
Signing time: Wed 27 May 2026 07:34:53 +0000
ROA not before: Wed 27 May 2026 07:29:53 +0000
ROA not after: Wed 26 May 2027 07:34:53 +0000
asID: 56048
IP address blocks: 223.160.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f4:38:9e:da:ca:65:48:79:74:d8:5b:0d:a0:46:87:dc:e2:8f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Validity
Not Before: May 27 07:29:53 2026 GMT
Not After : May 26 07:34:53 2027 GMT
Subject: CN=DB2310A1C65DDB7F86E51514012C937BCA30ABC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:06:76:bc:f6:8a:f4:35:72:2f:b1:70:59:
c1:e8:d1:75:38:8b:71:e6:89:25:45:b3:04:1b:97:
a5:99:2f:0f:7e:a1:eb:0a:2d:1d:97:c6:8e:46:02:
8f:82:cb:8a:be:f2:ac:53:6f:56:4d:12:33:15:ea:
70:5b:0a:8b:5b:fe:09:90:1a:76:3b:07:c3:96:7d:
be:ab:d0:9d:b6:7a:56:1e:fd:fe:e3:92:49:58:a7:
06:aa:93:fc:09:f3:6e:90:c4:23:b0:77:4b:8c:b9:
2f:44:fc:aa:30:a3:e6:3b:64:e0:04:bc:3f:93:1d:
88:5f:f5:05:55:63:e9:af:6a:07:eb:4c:a6:72:d3:
e8:42:ab:90:be:69:d3:be:8f:50:89:14:27:45:23:
36:df:49:66:6e:30:c0:18:62:97:1b:83:15:78:3b:
c7:5e:30:d8:70:9c:d0:3e:ff:4f:67:d5:92:8e:95:
4c:c9:96:aa:72:6d:20:1f:36:2f:6a:10:ee:61:5f:
05:ff:33:5c:e5:fc:0e:fa:4a:6c:38:ca:1d:ae:97:
9e:b3:cc:82:4b:97:bc:80:ac:88:99:e5:7a:1f:53:
af:13:46:23:97:d0:68:af:aa:63:c1:2b:7c:27:43:
ba:74:07:2e:b2:32:e2:55:1b:f2:3a:28:19:91:a7:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:10:A1:C6:5D:DB:7F:86:E5:15:14:01:2C:93:7B:CA:30:AB:C6
X509v3 Authority Key Identifier:
keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e382e302f32332d3234203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.160.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:59:0e:c7:01:98:fb:04:a2:84:59:64:bc:90:30:80:b5:6c:
5b:c9:db:36:b6:1b:aa:1d:a6:c1:4d:20:2c:e0:46:e0:44:67:
01:81:49:ce:15:a3:6b:71:24:02:59:5d:f8:01:60:09:16:9d:
4b:95:31:37:67:a9:c5:c9:7a:55:e6:fc:b6:d7:36:3e:e8:e1:
ee:98:c5:72:68:52:e7:04:14:cd:f5:d9:db:d4:a2:95:21:b0:
69:80:15:12:97:e8:f9:aa:7c:bd:ff:9b:c3:b2:51:8f:28:9f:
ad:96:6a:77:68:4f:1e:97:fe:86:9d:a1:2f:86:5a:10:36:57:
86:9e:d0:f7:5d:ef:5c:83:4c:b1:ba:cd:71:82:a4:13:ed:f8:
a8:f0:3b:d9:4a:ff:db:25:fa:5b:dd:73:cf:b1:39:ab:a1:63:
88:ff:a0:22:81:56:d6:f8:18:3b:72:5e:b9:bb:0f:5e:41:33:
54:07:a0:6d:14:4b:86:18:c6:8d:56:26:37:9c:7c:05:f7:8f:
12:4c:05:b3:d4:77:ab:11:3f:67:f2:bc:0c:91:d4:ed:f1:37:
55:98:63:cd:ea:5c:3f:28:d2:74:23:19:ab:19:ff:06:ed:d8:
ed:da:32:02:37:57:14:e7:21:6e:44:cc:46:ef:b0:c4:72:bd:
65:51:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:07 2026 by rpki-client