$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233322e302f32322d3234203d3e2039383038.roa File: 3232332e3136312e3233322e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: agBInCWJFRcUAfaRelfziVhB94hMJgREQYp5LOGYdOE= Subject key identifier: 5B:0A:16:A4:CA:EE:CE:44:24:B9:82:4A:AA:46:35:96:69:10:BE:C5 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 4E209CFA0870BAE731CA285447B472C69CC20AE5 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233322e302f32322d3234203d3e2039383038.roa Signing time: Wed 27 May 2026 07:34:57 +0000 ROA not before: Wed 27 May 2026 07:29:57 +0000 ROA not after: Wed 26 May 2027 07:34:57 +0000 asID: 9808 IP address blocks: 223.161.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:20:9c:fa:08:70:ba:e7:31:ca:28:54:47:b4:72:c6:9c:c2:0a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:57 2026 GMT Not After : May 26 07:34:57 2027 GMT Subject: CN=5B0A16A4CAEECE4424B9824AAA4635966910BEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:9d:c4:d0:69:6d:5d:ec:b1:9d:5d:e6:26: cd:bb:c2:25:f0:ae:5a:63:52:5a:1c:b2:35:3d:38: 8d:41:63:2e:34:11:40:75:ae:ef:42:c9:4d:67:e0: 0e:cd:d1:e5:85:06:c1:7e:3e:ff:01:a9:27:96:c8: 51:79:37:43:41:fd:bf:88:d7:25:d6:ef:6f:c0:4e: 1c:f7:90:49:52:90:c8:bc:93:3b:93:df:13:fb:77: 41:38:93:38:1c:0b:b3:1b:da:88:4f:56:8e:d9:4c: da:48:16:48:4c:f5:08:19:3e:00:48:44:e7:c9:ae: 71:aa:9b:1d:2b:b3:8b:f5:ee:d3:f2:13:95:87:81: a4:ef:9d:75:9b:4f:bd:73:49:5e:9f:25:de:5a:76: a3:c2:3c:f3:eb:75:11:04:4b:02:71:49:32:20:72: 33:d1:00:fe:52:a8:90:b3:d6:58:51:5f:50:a6:30: 9f:50:31:6c:1a:0f:71:f9:86:3b:89:51:cd:be:bc: c8:8e:5a:df:4e:a4:55:25:e5:00:d4:a0:cd:a1:bb: be:37:f7:f3:b5:46:34:92:6e:4c:a9:21:75:ed:94: c8:69:3e:cf:71:f3:74:05:92:68:ee:d4:e1:42:26: 85:46:00:b5:ec:4e:e0:2b:eb:f8:ca:c1:fb:30:67: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0A:16:A4:CA:EE:CE:44:24:B9:82:4A:AA:46:35:96:69:10:BE:C5 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233322e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.232.0/22 Signature Algorithm: sha256WithRSAEncryption 38:4e:74:34:dc:3d:ce:21:16:6b:58:1d:d4:32:26:94:3e:78: 85:2a:a8:22:ee:13:d9:0f:62:d2:9a:ec:b4:14:5c:5c:af:16: 24:a8:40:f0:10:f6:b4:40:6c:37:dc:97:80:25:02:0a:3d:9b: 91:79:47:cd:be:b5:1d:18:32:a4:0e:22:c8:46:7d:f6:e5:2e: 25:47:a7:b5:c2:7b:6c:a6:b5:9d:5b:b1:44:0d:bf:2b:35:df: 97:d3:81:c3:94:b7:83:61:d6:cc:c4:42:d9:df:07:c6:f2:bf: b1:10:a4:3c:37:c8:7c:40:34:44:b0:7d:13:8f:0d:12:3c:4a: 81:d5:e6:35:65:11:8e:e2:5a:b3:10:e0:41:11:e9:50:67:93: fc:e0:f5:37:c2:c9:82:70:0f:29:52:31:a7:db:26:5d:78:08: 63:99:a3:62:50:17:9f:07:69:b7:7b:3e:f4:73:47:73:e7:fb: 78:c0:bf:00:86:c1:67:a4:c0:b3:98:86:aa:d6:fb:e6:94:15: 9e:79:59:d1:23:2b:a5:87:a6:92:25:82:60:e6:3c:69:62:ee: ef:c7:7c:ad:25:cd:be:ac:74:89:e8:55:12:1d:98:10:3f:52: eb:2f:35:59:bc:44:a9:7a:86:fe:9c:55:81:55:08:c6:c4:d6: 5c:eb:87:5f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTiCc+ghwuucxyihUR7RyxpzCCuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTdaFw0yNzA1MjYwNzM0NTdaMDMxMTAvBgNV BAMTKDVCMEExNkE0Q0FFRUNFNDQyNEI5ODI0QUFBNDYzNTk2NjkxMEJFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhZ3E0GltXeyxnV3mJs27wiXw rlpjUlocsjU9OI1BYy40EUB1ru9CyU1n4A7N0eWFBsF+Pv8BqSeWyFF5N0NB/b+I 1yXW72/AThz3kElSkMi8kzuT3xP7d0E4kzgcC7Mb2ohPVo7ZTNpIFkhM9QgZPgBI ROfJrnGqmx0rs4v17tPyE5WHgaTvnXWbT71zSV6fJd5adqPCPPPrdREESwJxSTIg cjPRAP5SqJCz1lhRX1CmMJ9QMWwaD3H5hjuJUc2+vMiOWt9OpFUl5QDUoM2hu743 9/O1RjSSbkypIXXtlMhpPs9x83QFkmju1OFCJoVGALXsTuAr6/jKwfswZymfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUWwoWpMruzkQkuYJKqkY1lmkQvsUwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt+h6DANBgkqhkiG9w0BAQsFAAOCAQEAOE50NNw9ziEWa1gd1DImlD54 hSqoIu4T2Q9i0prstBRcXK8WJKhA8BD2tEBsN9yXgCUCCj2bkXlHzb61HRgypA4i yEZ99uUuJUentcJ7bKa1nVuxRA2/KzXfl9OBw5S3g2HWzMRC2d8HxvK/sRCkPDfI fEA0RLB9E48NEjxKgdXmNWURjuJasxDgQRHpUGeT/OD1N8LJgnAPKVIxp9smXXgI Y5mjYlAXnwdpt3s+9HNHc+f7eMC/AIbBZ6TAs5iGqtb75pQVnnlZ0SMrpYemkiWC YOY8aWLu78d8rSXNvqx0iehVEh2YED9S6y81WbxEqXqG/pxVgVUIxsTWXOuHXw== -----END CERTIFICATE-----Generated at Sat May 30 00:02:39 2026 by rpki-client