$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa File: 3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: snV3azoFL4rtLpaYx5tFVMOhCkVdF8EyXNHDTrKg/Ic= Subject key identifier: 89:30:E5:BC:42:35:9A:99:EC:FA:06:48:43:34:10:2C:F4:29:79:32 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 6C9A20E2CB517B6E5F58714103576596E3DA1736 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa Signing time: Wed 27 May 2026 07:34:58 +0000 ROA not before: Wed 27 May 2026 07:29:58 +0000 ROA not after: Wed 26 May 2027 07:34:58 +0000 asID: 9808 IP address blocks: 223.161.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9a:20:e2:cb:51:7b:6e:5f:58:71:41:03:57:65:96:e3:da:17:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:58 2026 GMT Not After : May 26 07:34:58 2027 GMT Subject: CN=8930E5BC42359A99ECFA06484334102CF4297932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:63:64:70:92:1f:80:99:ac:86:08:7a:ef: 61:ab:94:55:70:47:96:6b:05:9d:36:b0:8f:0d:01: 72:98:1d:e6:18:eb:e8:b0:ad:cc:33:a8:b0:6e:cc: 4b:66:bf:12:38:1b:16:d7:c1:d6:f6:b6:aa:0b:dc: 2c:82:f3:43:3e:c6:82:ca:7c:1b:ba:7c:53:0b:95: f0:a0:08:23:c8:7b:f0:83:41:6a:51:75:78:d3:a3: 87:85:df:e8:e3:92:51:5f:3e:fe:98:c7:2d:91:7d: 92:93:2d:23:45:c6:6b:77:3c:06:13:8e:fe:74:cb: df:4f:46:a0:91:ca:f8:cb:6c:25:26:24:73:cd:45: f6:73:12:27:3e:e8:14:b5:cb:86:fc:6c:49:ed:48: 23:48:e3:24:74:3e:16:3d:ae:7e:05:e1:3d:e8:3a: 8d:6e:3b:e7:9e:37:27:1f:a3:e6:2a:7f:ef:29:d6: de:6c:b3:2f:12:64:75:ea:a1:a3:54:38:08:21:aa: 08:d7:4d:89:b6:5e:55:fb:ed:b7:07:b8:d9:8d:b6: 7a:ee:18:b9:17:98:c0:f7:e8:76:02:de:e0:93:55: b9:27:ac:33:ea:26:de:ae:30:d5:dd:c4:66:d6:c6: 34:c6:22:6f:a9:88:d4:ee:dd:8d:4f:0a:ba:92:bf: 11:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:30:E5:BC:42:35:9A:99:EC:FA:06:48:43:34:10:2C:F4:29:79:32 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234322e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.242.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:89:0d:c9:27:c9:16:91:0d:68:d9:e6:f4:6a:2f:0a:54:26: 86:ff:8e:40:90:33:af:44:de:59:97:db:36:7b:6f:32:9f:d7: f0:5a:4d:43:f4:fc:67:be:dd:0e:27:f1:15:9c:ee:02:4b:59: 86:2c:c9:67:be:ac:fe:94:66:cd:1e:ff:32:b9:b9:f1:c0:6b: 4d:f6:50:43:11:89:4c:1d:35:1b:eb:9e:f6:93:42:47:d7:5f: cb:f0:8a:1b:d8:d0:bb:19:18:2a:4f:a0:d5:a3:10:7f:73:a8: 5a:87:89:40:61:33:31:37:c4:e9:be:e1:42:49:75:5c:ff:4d: 6a:29:8e:e4:eb:14:91:0a:81:a3:c9:59:90:0b:42:69:c5:c4: 4d:26:5c:8e:35:38:e7:7d:bc:70:ad:e9:53:77:3c:02:4f:14: 0d:79:bc:78:be:e9:6d:46:f1:6c:da:df:be:91:4c:58:d0:53: a4:5d:b8:6a:5e:5d:7a:17:8e:e0:ee:e6:f9:13:ef:25:12:66: 15:77:a6:c9:c1:24:c4:03:9b:8a:59:24:55:e8:41:c6:62:55: 35:00:5c:25:18:09:b5:8c:15:f9:f2:33:68:e8:42:9f:eb:9f: f1:18:fa:86:38:ea:33:15:62:3b:1f:bd:d8:3d:a7:51:92:01: 9c:fc:ce:3a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUbJog4stRe25fWHFBA1dlluPaFzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NThaFw0yNzA1MjYwNzM0NThaMDMxMTAvBgNV BAMTKDg5MzBFNUJDNDIzNTlBOTlFQ0ZBMDY0ODQzMzQxMDJDRjQyOTc5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLmNkcJIfgJmshgh672GrlFVw R5ZrBZ02sI8NAXKYHeYY6+iwrcwzqLBuzEtmvxI4GxbXwdb2tqoL3CyC80M+xoLK fBu6fFMLlfCgCCPIe/CDQWpRdXjTo4eF3+jjklFfPv6Yxy2RfZKTLSNFxmt3PAYT jv50y99PRqCRyvjLbCUmJHPNRfZzEic+6BS1y4b8bEntSCNI4yR0PhY9rn4F4T3o Oo1uO+eeNycfo+Yqf+8p1t5ssy8SZHXqoaNUOAghqgjXTYm2XlX77bcHuNmNtnru GLkXmMD36HYC3uCTVbknrDPqJt6uMNXdxGbWxjTGIm+piNTu3Y1PCrqSvxG7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiTDlvEI1mpns+gZIQzQQLPQpeTIwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjM0MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+h8jANBgkqhkiG9w0BAQsFAAOCAQEAXYkNySfJFpENaNnm9GovClQm hv+OQJAzr0TeWZfbNntvMp/X8FpNQ/T8Z77dDifxFZzuAktZhizJZ76s/pRmzR7/ Mrm58cBrTfZQQxGJTB01G+ue9pNCR9dfy/CKG9jQuxkYKk+g1aMQf3OoWoeJQGEz MTfE6b7hQkl1XP9NaimO5OsUkQqBo8lZkAtCacXETSZcjjU45328cK3pU3c8Ak8U DXm8eL7pbUbxbNrfvpFMWNBTpF24al5deheO4O7m+RPvJRJmFXemycEkxAObilkk VehBxmJVNQBcJRgJtYwV+fIzaOhCn+uf8Rj6hjjqMxViOx+92D2nUZIBnPzOOg== -----END CERTIFICATE-----Generated at Fri May 29 23:00:26 2026 by rpki-client