$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa File: 3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa (raw, json) Hash identifier: bU64f5nQgBseI6BQ7zUwCOt6JvAgr54qjOOzg9TjJUw= Subject key identifier: 39:DE:43:C9:95:A5:24:DD:9F:A4:4B:5D:37:0A:4F:B5:90:F5:81:2D Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5A5FA7AF06F71A735B8221F87B4A89F15F8B1788 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa Signing time: Wed 27 May 2026 07:34:57 +0000 ROA not before: Wed 27 May 2026 07:29:57 +0000 ROA not after: Wed 26 May 2027 07:34:57 +0000 asID: 132525 IP address blocks: 223.161.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5f:a7:af:06:f7:1a:73:5b:82:21:f8:7b:4a:89:f1:5f:8b:17:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:57 2026 GMT Not After : May 26 07:34:57 2027 GMT Subject: CN=39DE43C995A524DD9FA44B5D370A4FB590F5812D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:cd:1f:c3:6e:fb:9a:22:fe:c2:fa:05:48: a9:98:57:13:07:61:e3:dd:32:e5:6a:d8:c6:6a:18: 5a:a0:e9:8c:59:56:1d:c9:da:36:cd:bc:fc:ae:71: 34:5c:99:94:f1:2a:42:cb:ab:63:de:b1:12:f6:1d: 8e:fe:a9:8e:bb:b3:d4:d5:0a:6a:39:6c:ff:5b:40: 74:3f:4e:69:b7:9b:27:34:d5:da:74:8b:80:ab:61: 85:ce:bc:88:a2:ea:a9:c7:4d:2a:df:43:c6:99:0d: ba:f2:cd:f9:e5:d3:16:8a:37:5e:09:f9:2c:bb:34: 55:7e:74:fc:ae:7d:78:5f:d1:c7:42:64:a6:39:c4: 48:9b:99:50:73:d3:cb:08:bf:ce:c4:9a:b5:9e:0b: 6f:e6:72:64:66:9e:60:ea:cb:24:e6:2c:c1:de:18: 80:a4:5c:bc:bc:a1:3d:03:e3:a4:c3:0c:d2:08:00: c2:ac:90:02:e6:72:c7:d9:04:24:fd:b1:8f:00:1d: 46:49:56:2f:bf:f0:a4:cb:04:46:46:26:2f:1d:c0: 88:1a:4f:cd:8c:90:a3:94:5d:72:01:be:5c:90:f7: ee:ae:d2:f5:9c:d9:fe:28:3a:6a:65:8a:80:3d:e7: 14:21:5c:d0:26:fa:75:5a:20:92:37:8a:46:fe:c8: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:43:C9:95:A5:24:DD:9F:A4:4B:5D:37:0A:4F:B5:90:F5:81:2D X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3230382e302f32332d3234203d3e20313332353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.208.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:2b:41:8d:26:9b:f0:f4:d8:80:71:2a:40:51:84:a5:90:c3: ff:64:e3:11:ff:0f:9d:a6:01:e6:ab:c3:aa:51:79:d9:9b:4f: dc:82:07:ca:b5:50:e3:73:6a:53:b9:2e:62:57:2e:79:25:37: cc:79:77:c4:90:89:af:b8:e3:a5:4f:50:a2:12:df:10:c9:7e: 43:03:39:83:7d:5f:70:b6:92:f3:13:db:0b:fd:06:15:a6:06: 58:42:f3:18:c0:2b:22:6b:2d:22:d6:a2:5c:cb:4c:f7:05:54: 38:84:bb:37:b1:4f:5e:09:a5:6d:2e:07:7d:f1:eb:0d:1f:0e: a8:15:2b:b5:26:a8:3d:6a:87:f1:ad:3f:9a:ed:19:0b:ee:b6: 61:03:52:6f:2a:8e:07:37:d4:5a:cb:82:8e:01:1b:0f:0f:67: 56:5e:33:66:5f:cf:8d:47:06:a1:82:7e:3c:31:20:2a:61:5a: ee:c3:9a:cd:bb:ab:7c:56:c7:6e:c3:5f:58:1d:27:fa:47:81: ad:5d:d5:44:68:60:c3:32:79:71:ac:fc:0c:83:d7:c4:5d:8d: af:88:23:80:d2:59:2d:21:fd:68:ae:8a:2e:2b:19:d9:3f:da: 48:9c:90:13:ff:51:e6:15:f6:f6:ec:da:3e:38:2d:f6:12:75: ff:53:7b:90 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUWl+nrwb3GnNbgiH4e0qJ8V+LF4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTdaFw0yNzA1MjYwNzM0NTdaMDMxMTAvBgNV BAMTKDM5REU0M0M5OTVBNTI0REQ5RkE0NEI1RDM3MEE0RkI1OTBGNTgxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59M0fw277miL+wvoFSKmYVxMH YePdMuVq2MZqGFqg6YxZVh3J2jbNvPyucTRcmZTxKkLLq2PesRL2HY7+qY67s9TV Cmo5bP9bQHQ/Tmm3myc01dp0i4CrYYXOvIii6qnHTSrfQ8aZDbryzfnl0xaKN14J +Sy7NFV+dPyufXhf0cdCZKY5xEibmVBz08sIv87EmrWeC2/mcmRmnmDqyyTmLMHe GICkXLy8oT0D46TDDNIIAMKskALmcsfZBCT9sY8AHUZJVi+/8KTLBEZGJi8dwIga T82MkKOUXXIBvlyQ9+6u0vWc2f4oOmplioA95xQhXNAm+nVaIJI3ikb+yE27AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUOd5DyZWlJN2fpEtdNwpPtZD1gS0wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUz MTM2MzEyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMjM1MzIz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd+h0DANBgkqhkiG9w0BAQsFAAOCAQEAiitBjSab8PTYgHEq QFGEpZDD/2TjEf8PnaYB5qvDqlF52ZtP3IIHyrVQ43NqU7kuYlcueSU3zHl3xJCJ r7jjpU9QohLfEMl+QwM5g31fcLaS8xPbC/0GFaYGWELzGMArImstItaiXMtM9wVU OIS7N7FPXgmlbS4HffHrDR8OqBUrtSaoPWqH8a0/mu0ZC+62YQNSbyqOBzfUWsuC jgEbDw9nVl4zZl/PjUcGoYJ+PDEgKmFa7sOazburfFbHbsNfWB0n+keBrV3VRGhg wzJ5caz8DIPXxF2Nr4gjgNJZLSH9aK6KLisZ2T/aSJyQE/9R5hX29uzaPjgt9hJ1 /1N7kA== -----END CERTIFICATE-----Generated at Fri May 29 23:00:46 2026 by rpki-client