$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233362e302f32332d3234203d3e2039383038.roa File: 3232332e3136312e3233362e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: 2L+M5jVATcgSIc9lSCXNkX5MvAy+GWxiIpaq/uMxKAc= Subject key identifier: E5:64:75:BB:81:2E:FB:FC:06:2F:0D:48:AD:CE:F7:19:7F:0C:EF:96 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 51105B74D5B5E3F383C84F46227D606E1EE4751A Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233362e302f32332d3234203d3e2039383038.roa Signing time: Wed 27 May 2026 07:34:57 +0000 ROA not before: Wed 27 May 2026 07:29:57 +0000 ROA not after: Wed 26 May 2027 07:34:57 +0000 asID: 9808 IP address blocks: 223.161.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:10:5b:74:d5:b5:e3:f3:83:c8:4f:46:22:7d:60:6e:1e:e4:75:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:57 2026 GMT Not After : May 26 07:34:57 2027 GMT Subject: CN=E56475BB812EFBFC062F0D48ADCEF7197F0CEF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:54:b1:6a:3a:1a:fa:0b:6e:e3:3d:7f:b3: 99:50:6d:c3:37:d6:ab:6a:ae:18:3c:59:80:89:d1: bf:21:f3:dc:8e:e6:31:b6:1c:36:af:9f:6a:96:06: 15:dc:ac:2a:84:62:f9:9c:59:c5:3d:84:32:bb:6c: a5:53:0b:08:9f:20:65:91:dc:8a:8b:34:7a:bf:f2: c2:44:a0:30:96:18:3a:dd:70:72:fa:50:7a:31:a4: b2:88:85:7e:32:9b:4b:d6:43:d1:c7:84:41:d5:d5: 73:6a:95:4c:75:4c:b1:e6:47:70:17:86:1b:70:f0: 16:5d:29:eb:dc:73:23:eb:63:8b:ff:7e:13:84:1f: c6:09:9e:0a:da:e0:f6:bd:00:db:d5:cf:16:f8:bf: 8e:5a:d3:66:ea:e9:6a:45:3d:e5:e1:de:b6:5a:6f: 91:2b:2b:73:00:35:b8:97:1f:81:f3:81:86:ac:ce: 55:d2:91:de:e9:b0:ed:9b:a9:7f:66:a9:ad:fb:88: 09:d2:63:cd:ed:22:47:1f:bc:1f:44:00:0a:24:29: 5f:f5:9d:6e:8d:1a:5e:fc:5a:ab:7d:3d:77:27:c1: 65:05:27:f3:fe:5f:02:3f:e1:16:ef:f8:02:34:e2: fa:7b:53:3b:9c:d9:4c:b3:e7:66:f9:47:3f:fd:f2: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:64:75:BB:81:2E:FB:FC:06:2F:0D:48:AD:CE:F7:19:7F:0C:EF:96 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233362e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.236.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:6c:11:18:41:8c:2d:42:eb:45:4e:34:f6:5e:45:b5:83:c4: 1a:53:67:58:97:e3:a5:fb:03:ca:fd:26:ce:53:8d:13:cf:31: f3:e3:44:6e:1e:72:e6:24:9d:98:78:91:16:15:c5:99:d1:45: f2:d6:0c:73:c9:d3:c6:d1:e0:cd:b5:ce:c8:65:39:1d:eb:47: fa:a5:0b:04:33:9c:47:16:ea:6d:31:b0:c2:d0:ce:85:9e:80: 31:2d:8e:ac:98:be:ff:7e:60:72:50:51:9a:d9:5f:9c:f0:6f: 66:3a:58:01:ce:20:da:84:51:b2:26:52:82:fe:81:3e:27:98: f5:02:50:c4:fd:4d:05:f5:69:b4:45:73:c2:d6:7c:89:f3:2f: 74:10:cd:98:bd:66:b4:95:c4:ce:38:c7:df:27:99:4e:6a:f0: 50:4d:7f:44:3b:69:9e:c1:7c:a4:d5:67:c6:d3:c8:fc:b4:1c: 3b:1e:75:c2:b1:e6:95:a3:3f:97:cc:2f:a4:5f:43:41:b8:5a: 7a:42:b1:bf:1c:4a:7d:3b:df:57:40:5d:2c:36:87:c1:52:d9: 70:2d:d2:fa:7e:70:df:07:71:c6:3f:87:f0:35:50:41:c5:2c: 57:46:f2:2b:8f:f9:13:94:42:28:9c:8a:47:4f:87:53:91:47: d6:23:0e:67 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUURBbdNW14/ODyE9GIn1gbh7kdRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTdaFw0yNzA1MjYwNzM0NTdaMDMxMTAvBgNV BAMTKEU1NjQ3NUJCODEyRUZCRkMwNjJGMEQ0OEFEQ0VGNzE5N0YwQ0VGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nVSxajoa+gtu4z1/s5lQbcM3 1qtqrhg8WYCJ0b8h89yO5jG2HDavn2qWBhXcrCqEYvmcWcU9hDK7bKVTCwifIGWR 3IqLNHq/8sJEoDCWGDrdcHL6UHoxpLKIhX4ym0vWQ9HHhEHV1XNqlUx1TLHmR3AX hhtw8BZdKevccyPrY4v/fhOEH8YJngra4Pa9ANvVzxb4v45a02bq6WpFPeXh3rZa b5ErK3MANbiXH4HzgYaszlXSkd7psO2bqX9mqa37iAnSY83tIkcfvB9EAAokKV/1 nW6NGl78Wqt9PXcnwWUFJ/P+XwI/4Rbv+AI04vp7Uzuc2Uyz52b5Rz/98qiBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU5WR1u4Eu+/wGLw1Irc73GX8M75YwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+h7DANBgkqhkiG9w0BAQsFAAOCAQEADWwRGEGMLULrRU409l5FtYPE GlNnWJfjpfsDyv0mzlONE88x8+NEbh5y5iSdmHiRFhXFmdFF8tYMc8nTxtHgzbXO yGU5HetH+qULBDOcRxbqbTGwwtDOhZ6AMS2OrJi+/35gclBRmtlfnPBvZjpYAc4g 2oRRsiZSgv6BPieY9QJQxP1NBfVptEVzwtZ8ifMvdBDNmL1mtJXEzjjH3yeZTmrw UE1/RDtpnsF8pNVnxtPI/LQcOx51wrHmlaM/l8wvpF9DQbhaekKxvxxKfTvfV0Bd LDaHwVLZcC3S+n5w3wdxxj+H8DVQQcUsV0byK4/5E5RCKJyKR0+HU5FH1iMOZw== -----END CERTIFICATE-----Generated at Fri May 29 23:00:59 2026 by rpki-client