$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa File: 3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa (raw, json) Hash identifier: pRjZW6CPWqh7xEt27XFpA0oMUsUHvrxk7SqM3pJYPp0= Subject key identifier: 2D:8B:29:6E:20:88:33:AC:18:63:4B:4F:7B:4A:D8:95:BA:A1:D7:8E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 4E850DF6B7498D83708BE37D11488D2898107F0A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa Signing time: Wed 27 May 2026 07:34:57 +0000 ROA not before: Wed 27 May 2026 07:29:57 +0000 ROA not after: Wed 26 May 2027 07:34:57 +0000 asID: 56040 IP address blocks: 223.161.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:85:0d:f6:b7:49:8d:83:70:8b:e3:7d:11:48:8d:28:98:10:7f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:57 2026 GMT Not After : May 26 07:34:57 2027 GMT Subject: CN=2D8B296E208833AC18634B4F7B4AD895BAA1D78E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:7d:25:0a:04:93:a6:ba:12:97:88:47:ab: 97:77:b1:66:a8:62:83:45:bc:2c:ea:ec:6c:64:65: 74:44:92:9d:54:18:36:ae:29:a8:f3:71:3e:94:f1: 11:aa:1d:cd:87:cd:79:e0:88:b9:7a:d0:21:e8:58: f1:6f:67:35:6b:d3:7b:10:b3:d1:fd:bf:46:a0:40: 01:53:d8:bf:33:8d:4c:8e:66:3b:e7:b5:b4:e2:bf: 9f:4c:0d:45:9c:04:f4:f3:f1:2c:99:a2:88:e8:58: d2:a8:95:9a:22:85:4c:1f:17:7d:e7:24:6e:28:93: 66:2d:41:26:41:f2:4e:8e:b5:e1:90:c6:49:16:55: 5c:0c:8b:00:67:2e:6b:d3:b3:b9:4c:91:a0:4e:c7: 5b:de:65:34:87:dd:3e:04:d6:b7:5d:02:16:fa:3a: dd:71:e5:9f:63:29:46:53:b7:1a:4f:d6:0e:89:6a: 80:b4:b7:84:9c:26:52:08:31:36:74:91:bb:38:2b: 06:47:b2:be:93:98:cc:53:2c:a3:25:f2:bc:c4:5f: 2c:a3:0a:08:e7:2b:ca:3f:7a:b8:03:24:de:1c:20: 04:a6:1a:d1:69:65:a0:3d:6d:e5:61:e3:d1:78:93: ca:e9:b0:80:6d:77:2d:a1:3d:a5:91:1d:bd:a4:c8: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:29:6E:20:88:33:AC:18:63:4B:4F:7B:4A:D8:95:BA:A1:D7:8E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139342e302f32332d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption 83:48:82:0d:58:8f:35:9f:a8:50:b7:c0:e2:b3:8f:05:d4:ab: 00:49:76:47:ac:59:98:26:b5:d4:95:15:7c:53:48:88:b7:e5: c3:a7:cd:8a:1c:c3:a3:36:9e:c1:fa:77:d3:6c:e5:15:25:10: 82:fb:6b:41:a0:61:fb:7a:d2:b8:bf:48:90:05:58:6e:e3:e0: 65:1b:47:0a:b8:15:a0:f8:59:f1:aa:32:4c:61:df:53:69:1d: 74:bb:80:d1:90:00:6b:35:74:f8:f8:55:15:ca:fa:af:a4:fc: 3f:f5:2c:e2:33:3e:67:87:9f:1d:e4:40:a0:2d:3d:18:98:63: 14:8f:2e:ec:2c:46:91:e9:bb:5a:84:b6:25:bc:85:ca:5f:3e: 42:27:5c:c1:81:da:eb:7a:7c:75:00:5b:e7:d4:ad:e8:d0:16: bd:f8:46:e1:db:af:22:9f:be:80:8d:4a:50:c3:17:d9:0f:18: 92:d5:43:90:39:2d:b3:5e:9f:9b:55:7d:ed:b1:b0:08:0b:0c: cb:92:2a:f3:f2:6d:cc:45:32:42:0e:12:48:81:46:0f:c5:d1: 3d:22:44:e5:44:f0:60:79:1e:f3:81:83:16:ac:4f:11:56:3a: 47:18:a1:1b:68:67:df:ae:c0:13:17:4f:23:6e:e0:0e:1e:e2: 94:ed:aa:4d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUToUN9rdJjYNwi+N9EUiNKJgQfwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTdaFw0yNzA1MjYwNzM0NTdaMDMxMTAvBgNV BAMTKDJEOEIyOTZFMjA4ODMzQUMxODYzNEI0RjdCNEFEODk1QkFBMUQ3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoOH0lCgSTproSl4hHq5d3sWao YoNFvCzq7GxkZXREkp1UGDauKajzcT6U8RGqHc2HzXngiLl60CHoWPFvZzVr03sQ s9H9v0agQAFT2L8zjUyOZjvntbTiv59MDUWcBPTz8SyZoojoWNKolZoihUwfF33n JG4ok2YtQSZB8k6OteGQxkkWVVwMiwBnLmvTs7lMkaBOx1veZTSH3T4E1rddAhb6 Ot1x5Z9jKUZTtxpP1g6JaoC0t4ScJlIIMTZ0kbs4KwZHsr6TmMxTLKMl8rzEXyyj CgjnK8o/ergDJN4cIASmGtFpZaA9beVh49F4k8rpsIBtdy2hPaWRHb2kyLXbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQULYspbiCIM6wYY0tPe0rYlbqh144wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzEzOTM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+hwjANBgkqhkiG9w0BAQsFAAOCAQEAg0iCDViPNZ+oULfA4rOP BdSrAEl2R6xZmCa11JUVfFNIiLflw6fNihzDozaewfp302zlFSUQgvtrQaBh+3rS uL9IkAVYbuPgZRtHCrgVoPhZ8aoyTGHfU2kddLuA0ZAAazV0+PhVFcr6r6T8P/Us 4jM+Z4efHeRAoC09GJhjFI8u7CxGkem7WoS2JbyFyl8+QidcwYHa63p8dQBb59St 6NAWvfhG4duvIp++gI1KUMMX2Q8YktVDkDkts16fm1V97bGwCAsMy5Iq8/JtzEUy Qg4SSIFGD8XRPSJE5UTwYHke84GDFqxPEVY6RxihG2hn367AExdPI27gDh7ilO2q TQ== -----END CERTIFICATE-----Generated at Sat May 30 00:02:35 2026 by rpki-client