$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa File: 3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: STwNLFaSVC1NP6VJ+nwC/wGWz9nvPPKG/t4UIrZFY+g= Subject key identifier: C6:A5:6C:84:9D:02:59:03:BE:AF:45:EF:E1:F9:8D:0D:74:82:56:83 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 2F9E928EFC4682AB8BEEF9D4983E4C607B8A93F8 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa Signing time: Wed 27 May 2026 07:34:58 +0000 ROA not before: Wed 27 May 2026 07:29:58 +0000 ROA not after: Wed 26 May 2027 07:34:58 +0000 asID: 9808 IP address blocks: 223.161.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9e:92:8e:fc:46:82:ab:8b:ee:f9:d4:98:3e:4c:60:7b:8a:93:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:58 2026 GMT Not After : May 26 07:34:58 2027 GMT Subject: CN=C6A56C849D025903BEAF45EFE1F98D0D74825683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:f5:ad:a2:0c:7c:47:e9:9c:dd:71:b7:a1: 2a:8c:79:54:41:bc:24:2a:f3:ba:cf:14:26:cd:1d: 51:1b:32:cf:4d:1b:3c:8b:94:71:9a:e1:87:b7:b0: ab:2e:c6:a6:fd:06:ba:73:10:28:7a:45:c8:f8:e2: e0:ce:14:77:21:97:68:c1:20:36:98:a5:93:30:ea: d7:4f:a8:67:61:7c:0c:37:7b:03:70:f8:ef:b7:34: 28:28:29:cf:92:5c:0a:97:26:24:e5:80:dc:06:3a: ae:e6:68:ee:c0:95:65:a4:60:53:dd:74:b2:6e:90: e8:c0:e6:08:6c:15:7e:b6:03:68:74:78:6b:96:4e: ed:47:5a:c8:cf:2b:bd:a7:3b:3e:b2:16:96:e9:cf: fc:f7:a2:23:33:7d:97:ed:44:d2:55:01:69:e0:92: 2b:09:2f:68:fb:21:aa:52:4a:c9:66:dc:f1:ab:63: 26:32:56:65:63:06:ca:ea:b2:d3:4a:04:f5:45:03: ab:c8:28:22:8e:14:6c:fc:87:6e:64:eb:cf:09:3b: ce:84:8b:52:c7:b5:ed:9d:aa:e4:08:ad:6f:fc:b2: 7e:64:b5:3f:df:2e:44:09:8a:fe:9c:85:15:eb:83: 3c:7f:21:11:77:45:bd:56:a3:6c:e9:52:6e:35:ce: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A5:6C:84:9D:02:59:03:BE:AF:45:EF:E1:F9:8D:0D:74:82:56:83 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230302e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.200.0/23 Signature Algorithm: sha256WithRSAEncryption a3:08:30:87:0d:b9:b3:d4:6d:d6:72:58:5e:7e:3e:a0:6b:a2: 8e:0f:61:71:25:98:82:ad:ac:31:bb:ef:48:6f:02:43:e5:a2: 81:da:29:bd:42:da:53:b8:e5:06:fe:e2:11:c6:18:eb:54:b0: b8:2e:3c:25:07:53:bc:04:90:7f:c9:e6:d3:05:ee:7e:4b:39: c5:f8:b0:f6:a0:d4:5f:4e:f4:4a:c3:90:18:a1:15:44:81:0c: 3c:bf:fe:38:62:ec:29:25:05:3f:49:29:ac:bd:90:5f:ef:11: b0:90:c3:50:9c:67:ce:93:58:f8:82:63:0d:4f:d6:53:69:02: 64:23:70:97:e9:bd:f9:f1:61:76:1d:de:77:df:a5:ff:5c:39: af:4d:49:f2:4b:02:3b:71:a4:39:25:9e:24:00:a5:b0:36:1d: ca:99:06:de:89:08:cf:13:dc:e6:21:7c:1a:59:77:a5:99:85: 42:32:c2:7a:1d:42:09:2a:78:c7:83:84:ed:84:ed:17:3b:c7: c1:06:d5:38:98:89:53:27:ab:10:59:e6:d7:5a:83:3a:4f:a4: 72:33:82:41:e5:16:d0:33:d1:68:f4:cb:4e:d2:6f:24:e8:98: de:6c:bd:4e:65:54:1c:e5:49:9d:10:d7:6b:fd:a8:c2:89:6f: 3c:5a:41:9a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUL56SjvxGgquL7vnUmD5MYHuKk/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NThaFw0yNzA1MjYwNzM0NThaMDMxMTAvBgNV BAMTKEM2QTU2Qzg0OUQwMjU5MDNCRUFGNDVFRkUxRjk4RDBENzQ4MjU2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRfWtogx8R+mc3XG3oSqMeVRB vCQq87rPFCbNHVEbMs9NGzyLlHGa4Ye3sKsuxqb9BrpzECh6Rcj44uDOFHchl2jB IDaYpZMw6tdPqGdhfAw3ewNw+O+3NCgoKc+SXAqXJiTlgNwGOq7maO7AlWWkYFPd dLJukOjA5ghsFX62A2h0eGuWTu1HWsjPK72nOz6yFpbpz/z3oiMzfZftRNJVAWng kisJL2j7IapSSslm3PGrYyYyVmVjBsrqstNKBPVFA6vIKCKOFGz8h25k688JO86E i1LHte2dquQIrW/8sn5ktT/fLkQJiv6chRXrgzx/IRF3Rb1Wo2zpUm41zoWhAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxqVshJ0CWQO+r0Xv4fmNDXSCVoMwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMwMzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+hyDANBgkqhkiG9w0BAQsFAAOCAQEAowgwhw25s9Rt1nJYXn4+oGui jg9hcSWYgq2sMbvvSG8CQ+WigdopvULaU7jlBv7iEcYY61SwuC48JQdTvASQf8nm 0wXufks5xfiw9qDUX070SsOQGKEVRIEMPL/+OGLsKSUFP0kprL2QX+8RsJDDUJxn zpNY+IJjDU/WU2kCZCNwl+m9+fFhdh3ed9+l/1w5r01J8ksCO3GkOSWeJAClsDYd ypkG3okIzxPc5iF8Gll3pZmFQjLCeh1CCSp4x4OE7YTtFzvHwQbVOJiJUyerEFnm 11qDOk+kcjOCQeUW0DPRaPTLTtJvJOiY3my9TmVUHOVJnRDXa/2owolvPFpBmg== -----END CERTIFICATE-----Generated at Fri May 29 23:01:15 2026 by rpki-client