$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa File: 3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa (raw, json) Hash identifier: JjylP76UBAFfZHf6PP5fxYkBIoId/GIbj28RiYgPGv8= Subject key identifier: B8:00:AA:27:D9:EB:17:7B:D4:6D:61:44:5B:F6:3D:F4:70:16:D4:EC Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 325DDB9C01A2F5A7211EE2BD573B223653A9F0EA Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 56046 IP address blocks: 223.161.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5d:db:9c:01:a2:f5:a7:21:1e:e2:bd:57:3b:22:36:53:a9:f0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=B800AA27D9EB177BD46D61445BF63DF47016D4EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:1d:f3:38:a4:ae:cf:c7:88:a9:5d:70:b4: 12:c4:61:11:24:42:80:5f:ab:4b:82:bd:dc:17:fa: bd:ea:11:4c:36:f8:47:aa:d6:6e:ef:fc:04:fa:2f: 0b:84:8c:22:91:1f:69:14:40:3d:c7:2b:fd:aa:31: cf:f3:db:16:b9:a5:ee:54:35:a1:5d:f5:a0:9e:6a: 38:3d:80:58:70:a7:63:6b:97:22:a0:97:54:42:e1: 76:a8:9c:7a:bb:d4:88:25:ae:ab:c9:56:e9:7f:be: db:80:dd:03:05:fe:fe:6b:a0:7b:0a:f4:f6:ed:ff: 19:70:0d:d9:2e:fe:a2:4d:f0:98:5f:93:de:6b:9f: f1:6a:e8:d1:ec:b7:88:33:da:64:ce:56:4f:e5:cc: 47:78:5e:96:0d:f0:b6:2a:5f:c2:72:70:56:78:6d: c1:59:19:88:ce:88:49:ef:2f:85:06:6c:8e:53:b9: a0:55:2e:d6:09:16:9e:51:51:54:51:3f:85:6c:33: e8:10:8c:2e:6c:df:e4:6e:a4:c6:ab:fc:d9:ea:55: 5e:7c:4b:5e:37:87:f4:41:f2:85:b3:bf:92:13:ad: de:69:d6:b9:15:18:ec:4a:7e:d2:c1:77:11:98:dd: 70:0a:c6:a9:3c:e6:72:91:31:4f:d0:0e:db:e5:fb: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:00:AA:27:D9:EB:17:7B:D4:6D:61:44:5B:F6:3D:F4:70:16:D4:EC X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3139382e302f32332d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.198.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:51:51:fa:73:04:d5:e5:aa:a9:40:2e:3c:c3:13:3b:f9:96: 30:fa:f3:65:9e:b3:92:79:bd:65:67:5c:1e:83:07:da:b9:80: fa:87:55:c3:88:30:2a:42:a9:47:08:ac:56:a4:2d:16:b8:cc: 87:71:a2:5d:c5:fe:36:52:16:96:b4:ea:b1:79:15:87:c3:de: 28:de:38:66:8b:a7:00:10:a5:aa:e2:21:0f:d4:42:b4:8c:c4: 66:96:10:1c:49:99:cd:76:b2:aa:99:23:03:d6:da:6e:73:e5: ac:de:3e:66:bc:d2:7c:0c:b5:f0:45:4c:fd:a7:4a:ab:30:fc: 2a:c2:df:c0:5d:09:15:74:21:ea:1a:13:d6:4d:7c:4c:02:b3: 45:db:89:fe:d1:3c:37:fe:96:7d:a7:7e:7d:0f:90:6b:1b:57: 2f:ce:ed:44:a1:60:e9:64:25:a9:b7:42:17:63:7d:49:55:aa: b0:d8:e3:d9:a1:95:f6:b8:1e:89:07:83:a9:7f:05:d9:a7:25: 49:41:fc:57:a9:89:9f:43:fa:c8:d7:72:59:0f:5f:79:8f:1d: eb:b5:19:50:23:57:97:ac:49:6d:39:14:12:f4:d5:df:db:54: 03:e8:86:f9:e3:eb:3b:49:8a:e5:a7:0f:e4:eb:42:a4:95:0c: 3b:cc:b9:30 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMl3bnAGi9achHuK9VzsiNlOp8OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKEI4MDBBQTI3RDlFQjE3N0JENDZENjE0NDVCRjYzREY0NzAxNkQ0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYh3zOKSuz8eIqV1wtBLEYREk QoBfq0uCvdwX+r3qEUw2+Eeq1m7v/AT6LwuEjCKRH2kUQD3HK/2qMc/z2xa5pe5U NaFd9aCeajg9gFhwp2NrlyKgl1RC4XaonHq71IglrqvJVul/vtuA3QMF/v5roHsK 9Pbt/xlwDdku/qJN8Jhfk95rn/Fq6NHst4gz2mTOVk/lzEd4XpYN8LYqX8JycFZ4 bcFZGYjOiEnvL4UGbI5TuaBVLtYJFp5RUVRRP4VsM+gQjC5s3+RupMar/NnqVV58 S143h/RB8oWzv5ITrd5p1rkVGOxKftLBdxGY3XAKxqk85nKRMU/QDtvl+w0zAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUuACqJ9nrF3vUbWFEW/Y99HAW1OwwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzEzOTM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+hxjANBgkqhkiG9w0BAQsFAAOCAQEAb1FR+nME1eWqqUAuPMMT O/mWMPrzZZ6zknm9ZWdcHoMH2rmA+odVw4gwKkKpRwisVqQtFrjMh3GiXcX+NlIW lrTqsXkVh8PeKN44ZounABClquIhD9RCtIzEZpYQHEmZzXayqpkjA9babnPlrN4+ ZrzSfAy18EVM/adKqzD8KsLfwF0JFXQh6hoT1k18TAKzRduJ/tE8N/6Wfad+fQ+Q axtXL87tRKFg6WQlqbdCF2N9SVWqsNjj2aGV9rgeiQeDqX8F2aclSUH8V6mJn0P6 yNdyWQ9feY8d67UZUCNXl6xJbTkUEvTV39tUA+iG+ePrO0mK5acP5OtCpJUMO8y5 MA== -----END CERTIFICATE-----Generated at Sat May 30 00:02:58 2026 by rpki-client