$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa File: 3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa (raw, json) Hash identifier: jp5lp91ytMLtEFsf6B+hYByPv7tvskqxOddAJlnKLAQ= Subject key identifier: 8E:F9:A4:65:1C:9B:A6:0B:71:31:09:10:93:3C:94:5D:E5:18:01:80 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 3D80B4508B6F3D16AF11CC66B99C8D75BEA63C8A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 56044 IP address blocks: 223.161.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:80:b4:50:8b:6f:3d:16:af:11:cc:66:b9:9c:8d:75:be:a6:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=8EF9A4651C9BA60B71310910933C945DE5180180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:82:97:db:0f:37:7a:7d:5b:37:0e:a5:e1:8c: fe:60:f5:98:10:36:01:7e:6e:dd:6e:4c:da:6e:d7: 9e:b4:84:53:01:6e:bc:26:9a:74:0b:42:2a:9e:c7: 7c:bf:4c:39:86:d1:57:f6:d5:70:37:dd:dc:f5:5d: 63:e0:23:05:0f:40:13:95:27:7a:d0:d2:d5:2f:05: 20:a0:38:f4:bb:0b:ca:e3:4f:f7:78:e2:8d:7c:50: 99:1d:8e:6d:41:60:f5:96:2e:f0:8c:db:26:85:e8: 16:24:70:96:3c:c9:da:90:34:11:13:5c:aa:24:d7: 9a:34:85:db:96:a0:9f:d7:7c:98:96:82:ce:58:c4: 5c:d8:94:16:dc:8f:09:8d:b2:88:be:b6:1d:c5:98: 1d:be:05:a7:eb:7b:0f:19:d4:ba:17:d9:c4:26:05: b0:5d:22:48:25:6c:5a:45:cd:3b:e2:e7:15:65:6e: 17:4a:91:21:3f:84:f5:c3:83:4c:be:1f:a8:40:a2: f3:cf:59:65:ac:c0:af:1a:66:9f:7d:19:8f:72:80: 6d:1a:a4:68:25:4f:7e:76:42:cc:f8:69:46:51:41: a6:3d:2a:34:d6:6d:dd:80:6f:ef:5b:a2:63:fa:a3: 6a:c4:92:8f:e5:10:73:61:ed:a1:13:65:04:d7:72: 08:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F9:A4:65:1C:9B:A6:0B:71:31:09:10:93:3C:94:5D:E5:18:01:80 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3232362e302f32332d3234203d3e203536303434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.226.0/23 Signature Algorithm: sha256WithRSAEncryption 33:6d:8e:4e:88:fe:05:75:20:3a:ed:e2:d2:39:3d:66:db:79: b3:61:00:b9:36:3c:6e:2a:e7:45:5c:7b:0d:78:3c:0f:7f:72: cb:7a:7d:0e:a1:2b:f7:2b:4b:96:9c:52:41:33:fa:bf:ff:13: 5b:89:9a:f4:0e:d4:52:90:17:ad:3c:73:4e:ec:15:67:e2:e9: f4:66:16:19:20:c6:1d:1d:d6:5a:0f:23:09:8b:ed:c0:63:a7: 40:ec:d1:ce:a9:57:27:0e:1c:9f:6b:10:8c:0c:2e:9c:8c:61: 55:c2:6f:eb:43:f9:a0:d2:21:9f:c4:04:4f:44:f8:84:4a:7b: 66:e6:9b:75:ae:c9:22:a0:fc:6c:90:75:2f:31:00:8d:db:fc: 23:6a:86:19:95:e4:0e:b1:96:de:2b:67:37:bb:c8:06:55:47: 9e:51:00:11:0a:68:ab:db:b7:bf:47:19:26:28:db:e4:34:9c: 0d:cc:ff:b5:09:a8:60:3f:ab:15:e1:a8:02:d6:92:3a:17:53: 48:38:b7:d6:72:a2:78:f4:3b:3a:80:9f:98:78:9a:bf:cd:91: b7:20:ef:ca:1f:46:8d:3e:23:ba:58:3a:f5:ee:5b:b7:84:21: bb:79:c2:c9:9c:5a:87:18:48:5f:3d:27:5c:75:ee:b1:1a:fb: 0b:22:86:52 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPYC0UItvPRavEcxmuZyNdb6mPIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKDhFRjlBNDY1MUM5QkE2MEI3MTMxMDkxMDkzM0M5NDVERTUxODAxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcgpfbDzd6fVs3DqXhjP5g9ZgQ NgF+bt1uTNpu1560hFMBbrwmmnQLQiqex3y/TDmG0Vf21XA33dz1XWPgIwUPQBOV J3rQ0tUvBSCgOPS7C8rjT/d44o18UJkdjm1BYPWWLvCM2yaF6BYkcJY8ydqQNBET XKok15o0hduWoJ/XfJiWgs5YxFzYlBbcjwmNsoi+th3FmB2+Bafrew8Z1LoX2cQm BbBdIkglbFpFzTvi5xVlbhdKkSE/hPXDg0y+H6hAovPPWWWswK8aZp99GY9ygG0a pGglT352Qsz4aUZRQaY9KjTWbd2Ab+9bomP6o2rEko/lEHNh7aETZQTXcgiXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUjvmkZRybpgtxMQkQkzyUXeUYAYAwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMjM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h4jANBgkqhkiG9w0BAQsFAAOCAQEAM22OToj+BXUgOu3i0jk9 Ztt5s2EAuTY8birnRVx7DXg8D39yy3p9DqEr9ytLlpxSQTP6v/8TW4ma9A7UUpAX rTxzTuwVZ+Lp9GYWGSDGHR3WWg8jCYvtwGOnQOzRzqlXJw4cn2sQjAwunIxhVcJv 60P5oNIhn8QET0T4hEp7Zuabda7JIqD8bJB1LzEAjdv8I2qGGZXkDrGW3itnN7vI BlVHnlEAEQpoq9u3v0cZJijb5DScDcz/tQmoYD+rFeGoAtaSOhdTSDi31nKiePQ7 OoCfmHiav82RtyDvyh9GjT4julg69e5bt4Qhu3nCyZxahxhIXz0nXHXusRr7CyKG Ug== -----END CERTIFICATE-----Generated at Sat May 30 00:02:37 2026 by rpki-client