$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233382e302f32332d3234203d3e203234343030.roa File: 3232332e3136312e3233382e302f32332d3234203d3e203234343030.roa (raw, json) Hash identifier: 7oi3a+fhENw8R2xG3NgdsLm+R3EBTtq96GKohnSjIZo= Subject key identifier: 8C:92:87:6B:CC:51:2A:E5:90:9A:18:11:BE:78:AF:A0:D2:73:30:A3 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 3C24245D1385DF4D97FEFE63B409AFB75B427FC3 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233382e302f32332d3234203d3e203234343030.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 24400 IP address blocks: 223.161.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:24:24:5d:13:85:df:4d:97:fe:fe:63:b4:09:af:b7:5b:42:7f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=8C92876BCC512AE5909A1811BE78AFA0D27330A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:bd:fd:f9:d4:f5:6e:a8:4a:24:f3:ad:59: 89:46:be:ac:01:da:f7:22:c1:99:61:72:02:c2:f2: 06:fe:ca:8b:00:e9:cd:bb:25:b3:b0:05:8b:8e:6f: b6:9e:b7:75:4d:14:19:f0:66:83:f8:13:b3:b5:26: c2:cf:54:8a:56:a7:f1:a7:50:fe:17:02:41:f1:4c: 34:a4:c4:d4:df:c5:95:35:c9:c7:20:e0:ce:98:5b: 6d:fb:b0:50:f2:0c:1d:c5:f4:b3:26:8c:95:24:a4: 9c:b4:15:c0:23:11:55:e3:4b:07:69:88:64:86:17: fd:32:aa:0d:bc:93:74:00:7b:26:77:22:a8:13:0f: 43:58:ba:86:bf:6e:f0:f8:bf:99:a0:a2:44:bc:e3: 3e:8c:f2:19:6b:37:3e:58:8f:c2:ca:09:65:80:31: 56:4e:53:0e:30:6e:63:4c:8a:a2:29:a8:b8:a3:b4: 31:a6:3e:e3:ad:39:72:d3:9c:e2:ae:91:c7:a7:26: d1:bc:b3:f2:2d:53:fe:e4:e5:2c:2f:60:44:c3:dd: c6:2b:c6:d6:fb:34:51:75:8d:84:b4:d7:47:de:30: 68:21:0e:57:83:9a:58:3e:41:ab:76:a4:51:94:c8: 72:da:12:3f:01:65:3a:8e:41:f9:29:53:15:e0:f7: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:92:87:6B:CC:51:2A:E5:90:9A:18:11:BE:78:AF:A0:D2:73:30:A3 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3233382e302f32332d3234203d3e203234343030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.238.0/23 Signature Algorithm: sha256WithRSAEncryption 16:9f:cc:77:51:be:25:fe:7c:3b:55:b1:cc:9d:42:a6:85:25: 3e:8d:67:31:06:2c:24:cb:4f:48:f5:73:29:3f:57:23:cf:05: 3b:0c:34:1e:d4:f2:21:41:77:0f:82:fe:06:7d:36:81:d1:38: ad:70:7f:d2:98:21:7c:f7:cf:f9:2e:34:12:9d:d5:af:62:02: 5d:2a:de:e5:df:11:7a:0b:40:55:10:2d:bb:fe:11:0a:97:39: a5:d0:a1:3e:58:39:ea:32:62:29:32:b5:82:0d:55:98:1e:ca: 35:d5:69:6b:a5:cf:01:1d:1e:88:23:be:84:2b:0c:65:a4:e8: 90:69:d4:f5:70:2a:62:5c:6d:59:f6:40:be:9d:eb:df:c5:97: 66:9a:4f:1b:22:54:ca:ae:96:ed:ca:de:6d:1f:a9:70:18:d6: b1:0e:93:3a:73:62:93:04:ac:f6:dd:11:f2:70:c9:24:04:88: ab:5a:40:74:23:7b:cc:5b:48:0b:84:d7:30:1b:af:8e:0b:d6: a2:ed:a0:0d:8b:80:bd:2c:b5:8c:1f:b3:f0:08:5b:32:91:ee: 6f:36:44:57:18:60:f9:50:50:3f:19:f3:88:bf:93:a0:76:68: 09:09:4c:b5:4d:40:8c:87:8f:78:c6:f1:bc:8e:e0:96:c6:2d: 98:ea:54:e8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPCQkXROF302X/v5jtAmvt1tCf8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKDhDOTI4NzZCQ0M1MTJBRTU5MDlBMTgxMUJFNzhBRkEwRDI3MzMwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2b39+dT1bqhKJPOtWYlGvqwB 2vciwZlhcgLC8gb+yosA6c27JbOwBYuOb7aet3VNFBnwZoP4E7O1JsLPVIpWp/Gn UP4XAkHxTDSkxNTfxZU1yccg4M6YW237sFDyDB3F9LMmjJUkpJy0FcAjEVXjSwdp iGSGF/0yqg28k3QAeyZ3IqgTD0NYuoa/bvD4v5mgokS84z6M8hlrNz5Yj8LKCWWA MVZOUw4wbmNMiqIpqLijtDGmPuOtOXLTnOKukcenJtG8s/ItU/7k5SwvYETD3cYr xtb7NFF1jYS010feMGghDleDmlg+Qat2pFGUyHLaEj8BZTqOQfkpUxXg9ynXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUjJKHa8xRKuWQmhgRvnivoNJzMKMwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzMzM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNDM0MzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h7jANBgkqhkiG9w0BAQsFAAOCAQEAFp/Md1G+Jf58O1WxzJ1C poUlPo1nMQYsJMtPSPVzKT9XI88FOww0HtTyIUF3D4L+Bn02gdE4rXB/0pghfPfP +S40Ep3Vr2ICXSre5d8RegtAVRAtu/4RCpc5pdChPlg56jJiKTK1gg1VmB7KNdVp a6XPAR0eiCO+hCsMZaTokGnU9XAqYlxtWfZAvp3r38WXZppPGyJUyq6W7crebR+p cBjWsQ6TOnNikwSs9t0R8nDJJASIq1pAdCN7zFtIC4TXMBuvjgvWou2gDYuAvSy1 jB+z8AhbMpHubzZEVxhg+VBQPxnziL+ToHZoCQlMtU1AjIePeMbxvI7glsYtmOpU 6A== -----END CERTIFICATE-----Generated at Sat May 30 00:02:37 2026 by rpki-client