$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa File: 3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa (raw, json) Hash identifier: n7WXrLDyoagnAarU83tMgV1xRVVgqV3g01tOGG93s70= Subject key identifier: 85:89:B9:C2:27:78:9B:B0:D2:6D:E9:76:60:6D:A2:28:A7:A9:DD:62 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 098A90F135DBEFAFB45303043CFD94BAC22EFC4D Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa Signing time: Wed 27 May 2026 07:34:54 +0000 ROA not before: Wed 27 May 2026 07:29:54 +0000 ROA not after: Wed 26 May 2027 07:34:54 +0000 asID: 38019 IP address blocks: 223.161.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8a:90:f1:35:db:ef:af:b4:53:03:04:3c:fd:94:ba:c2:2e:fc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:54 2026 GMT Not After : May 26 07:34:54 2027 GMT Subject: CN=8589B9C227789BB0D26DE976606DA228A7A9DD62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:00:e2:0c:34:97:c5:86:ad:c5:f4:63:8d: a6:bf:d5:95:37:51:93:f7:ac:46:f4:2b:eb:11:cc: a0:90:cc:cc:04:09:7b:a7:43:53:3d:f9:14:6b:8e: d0:06:ac:77:18:2e:2b:1f:cd:5e:b6:6d:78:36:1a: 18:51:88:bc:64:c7:4a:04:93:04:68:7a:7d:86:bc: 9d:71:4a:fb:20:91:a7:24:4a:36:77:c4:40:1e:3d: 10:c7:5c:74:0b:ed:9d:c6:4c:2d:00:75:4a:a2:cc: 57:8d:fc:08:27:7d:2a:ad:31:85:a6:43:67:55:26: 52:f3:30:84:54:58:33:b2:bc:7b:c9:e8:3f:69:5a: 68:75:7b:ea:eb:e4:fe:37:26:1d:42:03:bd:de:d6: 46:92:cb:4a:cb:7d:56:28:4f:03:dd:4d:8a:fd:d5: bc:07:59:ae:83:17:9c:ad:44:2e:1b:7e:0a:ed:90: 5a:cc:fd:e9:9c:18:16:42:41:95:44:83:77:b5:5a: 62:3c:c5:ec:8a:5f:77:a9:22:c3:35:ff:22:67:13: 1a:b0:84:6f:22:fe:a6:24:ec:89:e9:7a:79:2b:58: 58:1d:42:d0:e9:9d:81:3e:67:43:41:8d:da:91:54: 55:9d:dd:c2:a4:b1:fe:ae:eb:41:80:97:56:05:47: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:B9:C2:27:78:9B:B0:D2:6D:E9:76:60:6D:A2:28:A7:A9:DD:62 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230322e302f32332d3234203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.202.0/23 Signature Algorithm: sha256WithRSAEncryption 71:3e:53:ed:cc:74:ae:be:b3:2f:a2:40:5b:a7:73:73:20:d8: 6d:ca:88:1b:7f:c9:ed:74:70:31:69:47:81:5b:7d:9f:f0:73: f1:ee:3e:76:ef:a5:0e:ea:ad:a6:be:7e:89:1b:d8:59:15:e0: 25:66:04:a8:f1:98:f6:28:b8:3d:10:c1:de:1f:7c:85:7b:29: 7b:48:47:6e:79:dd:03:09:d0:d3:ac:ab:35:82:2c:03:7b:18: 25:f5:d7:52:89:e8:06:aa:fb:fc:d9:1d:11:d8:0c:30:58:ba: 72:56:fc:f3:5a:a6:67:97:47:3f:06:ae:dc:25:c2:ba:6a:e5: a9:42:87:f3:36:b4:9a:fb:ec:d5:d6:cd:14:1b:93:eb:34:9b: 95:9d:b3:ea:d5:f9:cb:08:2b:de:f1:b3:e5:1a:28:47:a6:cf: 02:c5:05:97:5e:d0:28:45:f3:46:95:59:50:9a:19:e8:3e:72: 7e:8d:a6:8c:7a:0c:8b:00:41:42:26:98:e1:92:d7:d9:23:ec: c2:58:b4:10:54:e0:39:df:6c:e0:6d:6e:76:98:24:e5:73:6d: 8e:71:36:94:73:94:da:10:54:66:6a:26:ae:05:4a:57:f5:21: b0:aa:f0:30:3c:3a:d2:ce:4f:31:5d:7c:27:60:3e:a6:ac:d9: c0:91:98:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCYqQ8TXb76+0UwMEPP2UusIu/E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTRaFw0yNzA1MjYwNzM0NTRaMDMxMTAvBgNV BAMTKDg1ODlCOUMyMjc3ODlCQjBEMjZERTk3NjYwNkRBMjI4QTdBOURENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSADiDDSXxYatxfRjjaa/1ZU3 UZP3rEb0K+sRzKCQzMwECXunQ1M9+RRrjtAGrHcYLisfzV62bXg2GhhRiLxkx0oE kwRoen2GvJ1xSvsgkackSjZ3xEAePRDHXHQL7Z3GTC0AdUqizFeN/AgnfSqtMYWm Q2dVJlLzMIRUWDOyvHvJ6D9pWmh1e+rr5P43Jh1CA73e1kaSy0rLfVYoTwPdTYr9 1bwHWa6DF5ytRC4bfgrtkFrM/emcGBZCQZVEg3e1WmI8xeyKX3epIsM1/yJnExqw hG8i/qYk7InpenkrWFgdQtDpnYE+Z0NBjdqRVFWd3cKksf6u60GAl1YFR2mjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhYm5wid4m7DSbel2YG2iKKep3WIwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMDMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+hyjANBgkqhkiG9w0BAQsFAAOCAQEAcT5T7cx0rr6zL6JAW6dz cyDYbcqIG3/J7XRwMWlHgVt9n/Bz8e4+du+lDuqtpr5+iRvYWRXgJWYEqPGY9ii4 PRDB3h98hXspe0hHbnndAwnQ06yrNYIsA3sYJfXXUonoBqr7/NkdEdgMMFi6clb8 81qmZ5dHPwau3CXCumrlqUKH8za0mvvs1dbNFBuT6zSblZ2z6tX5ywgr3vGz5Roo R6bPAsUFl17QKEXzRpVZUJoZ6D5yfo2mjHoMiwBBQiaY4ZLX2SPswli0EFTgOd9s 4G1udpgk5XNtjnE2lHOU2hBUZmomrgVKV/UhsKrwMDw60s5PMV18J2A+pqzZwJGY XQ== -----END CERTIFICATE-----Generated at Fri May 29 23:01:42 2026 by rpki-client