$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa File: 3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa (raw, json) Hash identifier: 8uKePvdmxmLmIjVK/IodnmBvHZjis4hjZQ8DV6EbYVI= Subject key identifier: 1C:9D:21:02:EA:4F:30:B4:58:9B:46:5E:2C:09:6A:D9:9A:4A:DC:1E Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 47EFC94E5959AFC20C4F78E7875E1F5712AE2CD8 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa Signing time: Wed 27 May 2026 07:34:54 +0000 ROA not before: Wed 27 May 2026 07:29:54 +0000 ROA not after: Wed 26 May 2027 07:34:54 +0000 asID: 24547 IP address blocks: 223.161.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ef:c9:4e:59:59:af:c2:0c:4f:78:e7:87:5e:1f:57:12:ae:2c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:54 2026 GMT Not After : May 26 07:34:54 2027 GMT Subject: CN=1C9D2102EA4F30B4589B465E2C096AD99A4ADC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:47:61:ba:b3:47:18:1f:2d:f3:88:5c:ab: e0:06:03:9e:03:05:f6:01:ae:18:ec:6d:67:fa:5c: 47:7e:0f:51:7e:fe:ea:b1:d3:42:6f:64:cd:e3:66: ba:0b:39:f6:1b:b6:25:a9:25:25:d9:13:64:cb:f3: 30:98:91:4e:9c:d8:31:66:95:51:c9:24:3a:c2:bb: 03:ec:d7:14:a9:1d:de:dc:f2:77:7d:8a:37:f4:7e: 5d:6b:8b:79:6e:18:75:bd:ce:7e:5f:ee:37:52:0f: 35:88:9c:f4:88:9b:31:13:e9:fa:ad:7e:9f:9e:90: c8:c2:f3:db:b9:07:b2:de:e0:06:88:a4:bb:2c:65: eb:5d:7c:3f:77:2b:34:ff:3d:30:04:58:f7:dc:0e: 85:54:1c:87:bd:ac:a2:71:d2:4c:57:ba:d6:bb:05: 37:92:14:65:08:66:b5:cb:e7:0d:13:57:e4:32:5b: 61:8c:fe:51:55:9e:e5:42:79:9c:49:c2:87:21:8c: ec:89:30:1b:06:51:ef:91:fe:f2:c0:28:9f:94:24: 11:73:89:06:b9:5f:bc:1b:dc:6c:0c:73:ec:a7:98: ef:81:ef:95:b7:d0:99:04:ef:b9:bc:d5:04:d8:81: cb:55:9f:7a:8f:f9:f1:cc:3b:7f:53:1f:d6:dc:ea: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9D:21:02:EA:4F:30:B4:58:9B:46:5E:2C:09:6A:D9:9A:4A:DC:1E X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232342e302f32332d3234203d3e203234353437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.224.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:aa:1f:fd:a6:f9:6d:a3:e8:dc:9b:09:e5:5a:a8:58:9d:e5: 62:e5:c2:84:2e:e8:33:d4:2c:0c:f7:2f:43:d5:d8:b3:a5:31: 32:99:a7:38:08:70:86:fc:bd:27:6d:3c:9d:3d:b1:20:8d:69: 3e:dc:0a:1f:90:b3:af:70:ac:66:1b:69:d4:c5:08:4c:d9:27: dd:45:80:82:4a:dc:27:53:2f:58:49:8e:e1:9e:c0:a7:bf:cf: 2d:c3:2a:30:10:e3:df:ce:f5:f8:18:19:b0:34:f1:7b:1a:98: 6d:17:8b:21:6b:57:19:b4:af:d8:33:e7:6a:cf:2c:f5:00:ac: 1f:af:35:67:9e:2f:d3:3e:ca:b0:1f:9a:39:75:28:7c:09:59: af:f0:68:a8:4b:b5:ec:8f:c1:17:0f:69:79:e0:2e:a7:2e:75: b3:fa:1c:b5:68:ab:b9:82:57:36:6d:09:fb:56:12:2b:94:63: 2c:7a:27:3f:d2:af:0f:39:0c:0b:4b:f8:37:60:9b:8e:a7:21: 77:1b:c0:a6:71:ce:5e:9e:d9:d1:e1:3b:0b:ce:e1:8b:74:8c: 87:3a:30:13:a3:38:9f:ca:82:11:c0:d4:a3:78:e0:5e:15:94: 26:3d:a1:de:ae:fc:d0:07:55:5a:5c:ff:30:3b:94:0d:68:78: 13:f0:ad:db -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUR+/JTllZr8IMT3jnh14fVxKuLNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTRaFw0yNzA1MjYwNzM0NTRaMDMxMTAvBgNV BAMTKDFDOUQyMTAyRUE0RjMwQjQ1ODlCNDY1RTJDMDk2QUQ5OUE0QURDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXUdhurNHGB8t84hcq+AGA54D BfYBrhjsbWf6XEd+D1F+/uqx00JvZM3jZroLOfYbtiWpJSXZE2TL8zCYkU6c2DFm lVHJJDrCuwPs1xSpHd7c8nd9ijf0fl1ri3luGHW9zn5f7jdSDzWInPSImzET6fqt fp+ekMjC89u5B7Le4AaIpLssZetdfD93KzT/PTAEWPfcDoVUHIe9rKJx0kxXuta7 BTeSFGUIZrXL5w0TV+QyW2GM/lFVnuVCeZxJwochjOyJMBsGUe+R/vLAKJ+UJBFz iQa5X7wb3GwMc+ynmO+B75W30JkE77m81QTYgctVn3qP+fHMO39TH9bc6sl3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUHJ0hAupPMLRYm0ZeLAlq2ZpK3B4wHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMjM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNDM1MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h4DANBgkqhkiG9w0BAQsFAAOCAQEAHqof/ab5baPo3JsJ5Vqo WJ3lYuXChC7oM9QsDPcvQ9XYs6UxMpmnOAhwhvy9J208nT2xII1pPtwKH5Czr3Cs Zhtp1MUITNkn3UWAgkrcJ1MvWEmO4Z7Ap7/PLcMqMBDj3871+BgZsDTxexqYbReL IWtXGbSv2DPnas8s9QCsH681Z54v0z7KsB+aOXUofAlZr/BoqEu17I/BFw9peeAu py51s/octWiruYJXNm0J+1YSK5RjLHonP9KvDzkMC0v4N2CbjqchdxvApnHOXp7Z 0eE7C87hi3SMhzowE6M4n8qCEcDUo3jgXhWUJj2h3q780AdVWlz/MDuUDWh4E/Ct 2w== -----END CERTIFICATE-----Generated at Sat May 30 00:53:10 2026 by rpki-client