$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234342e302f32332d3234203d3e2039383038.roa File: 3232332e3136312e3234342e302f32332d3234203d3e2039383038.roa (raw, json) Hash identifier: cN75zYeIXu/JsPcqcamwJWQ7H2746OjRMmnmheb1WxI= Subject key identifier: A0:BA:AA:80:60:FE:12:8B:12:09:14:61:D0:BE:8D:0B:BD:A9:FF:80 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 6FB7F93AA7094DC57F84B6B908F5689D2BC68A35 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234342e302f32332d3234203d3e2039383038.roa Signing time: Wed 27 May 2026 07:34:53 +0000 ROA not before: Wed 27 May 2026 07:29:53 +0000 ROA not after: Wed 26 May 2027 07:34:53 +0000 asID: 9808 IP address blocks: 223.161.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b7:f9:3a:a7:09:4d:c5:7f:84:b6:b9:08:f5:68:9d:2b:c6:8a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:53 2026 GMT Not After : May 26 07:34:53 2027 GMT Subject: CN=A0BAAA8060FE128B12091461D0BE8D0BBDA9FF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:39:74:12:50:ca:bf:c7:4f:8a:2d:2b:dd:87: 7b:0f:e7:83:26:47:17:91:c4:b4:48:09:e3:70:2b: fe:6f:35:f9:d5:6e:a3:dc:be:f7:85:00:b9:a8:83: 6e:c0:ea:00:2a:9f:a7:c3:00:5f:7e:2d:92:34:81: 56:0b:44:93:94:8c:27:00:53:e7:d0:84:74:58:5d: 54:26:c2:50:98:c0:5a:6a:a8:36:60:46:6e:61:c7: f8:24:27:f5:bd:9f:e8:e3:9d:50:ef:3a:8d:02:fa: c9:59:65:69:6b:6c:5c:67:93:57:b8:87:90:1f:a0: 30:68:37:67:97:96:80:88:69:d8:bd:c4:4a:3a:01: 20:45:a8:33:f8:09:d0:d1:37:0b:97:56:17:c6:a5: c6:ff:07:cc:73:cd:9e:ae:95:57:ea:99:6d:dc:01: 60:b8:f4:9c:af:4d:0e:ab:06:b2:8e:9b:10:ef:d4: f3:a8:3f:0f:bc:90:7d:51:79:4e:a3:25:ba:c2:30: 13:2d:e1:87:62:82:64:4e:09:2c:70:a6:01:98:76: c2:f8:5b:d3:5b:65:d0:b8:54:c7:e1:d6:ab:f7:a0: 84:62:9b:e0:30:8e:11:42:69:90:f0:31:e3:2d:cd: 2f:fa:dc:c8:0f:c5:43:ce:de:03:b0:2d:ef:d9:d7: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:AA:80:60:FE:12:8B:12:09:14:61:D0:BE:8D:0B:BD:A9:FF:80 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3234342e302f32332d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.244.0/23 Signature Algorithm: sha256WithRSAEncryption 18:e2:12:90:18:48:96:54:10:36:86:af:ad:8f:9b:7f:bb:8a: 43:78:d8:5f:18:99:53:e9:94:15:2e:cd:f2:b9:51:92:fe:5b: 56:3f:a5:d6:98:c9:23:63:b4:99:ab:ef:fa:5a:a2:7d:76:8a: 2a:84:e8:93:f0:02:1e:bb:59:aa:58:fc:4c:a0:8f:21:34:6e: 13:b7:67:25:e8:1d:ea:00:45:34:b7:42:26:ad:ea:75:7c:61: b8:27:2e:21:ed:bc:0e:e6:c6:0c:03:41:89:e7:27:d6:9d:5a: de:14:27:63:5b:b8:4f:20:90:8f:62:6b:da:4d:a3:0e:68:1a: 25:d8:3a:64:06:18:aa:b8:07:a3:09:fe:95:8a:f3:c8:71:e4: 8c:82:30:e2:81:20:c1:b0:bb:eb:a9:c6:a2:9d:48:67:39:5f: d0:9a:74:cf:2b:5a:db:1d:ee:ef:de:72:b0:28:b4:a0:1a:67: 5a:7b:85:48:e7:a3:82:a8:9a:37:e5:27:bd:94:78:d4:35:8b: ed:be:71:d7:4b:18:13:13:6a:36:ad:88:df:d1:54:b9:96:df: 45:50:0f:7d:de:4f:9d:8c:18:40:50:fc:a0:dd:1d:6f:dd:50: 97:fb:be:c6:ad:be:b6:11:3c:3a:5d:ae:6a:e0:16:71:92:6a: 3d:35:d4:b1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUb7f5OqcJTcV/hLa5CPVonSvGijUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTNaFw0yNzA1MjYwNzM0NTNaMDMxMTAvBgNV BAMTKEEwQkFBQTgwNjBGRTEyOEIxMjA5MTQ2MUQwQkU4RDBCQkRBOUZGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLOXQSUMq/x0+KLSvdh3sP54Mm RxeRxLRICeNwK/5vNfnVbqPcvveFALmog27A6gAqn6fDAF9+LZI0gVYLRJOUjCcA U+fQhHRYXVQmwlCYwFpqqDZgRm5hx/gkJ/W9n+jjnVDvOo0C+slZZWlrbFxnk1e4 h5AfoDBoN2eXloCIadi9xEo6ASBFqDP4CdDRNwuXVhfGpcb/B8xzzZ6ulVfqmW3c AWC49JyvTQ6rBrKOmxDv1POoPw+8kH1ReU6jJbrCMBMt4YdigmROCSxwpgGYdsL4 W9NbZdC4VMfh1qv3oIRim+AwjhFCaZDwMeMtzS/63MgPxUPO3gOwLe/Z17hrAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUoLqqgGD+EosSCRRh0L6NC72p/4AwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzIzMzJlMzEz NjMxMmUzMjM0MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd+h9DANBgkqhkiG9w0BAQsFAAOCAQEAGOISkBhIllQQNoavrY+bf7uK Q3jYXxiZU+mUFS7N8rlRkv5bVj+l1pjJI2O0mavv+lqifXaKKoTok/ACHrtZqlj8 TKCPITRuE7dnJegd6gBFNLdCJq3qdXxhuCcuIe28DubGDANBiecn1p1a3hQnY1u4 TyCQj2Jr2k2jDmgaJdg6ZAYYqrgHown+lYrzyHHkjIIw4oEgwbC766nGop1IZzlf 0Jp0zyta2x3u795ysCi0oBpnWnuFSOejgqiaN+UnvZR41DWL7b5x10sYExNqNq2I 39FUuZbfRVAPfd5PnYwYQFD8oN0db91Ql/u+xq2+thE8Ol2uauAWcZJqPTXUsQ== -----END CERTIFICATE-----Generated at Sat May 30 00:46:04 2026 by rpki-client