$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa File: 3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa (raw, json) Hash identifier: PCFpQrf8nxtNqfK504+syAhqp+cmyYh5/cMAzVYmIew= Subject key identifier: CA:BC:00:1D:12:DA:18:FF:B0:87:79:D1:0E:65:7A:13:DC:75:EC:47 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 79B91A5BBC57F656BF5466A8904EA780D6EE7D61 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa Signing time: Wed 27 May 2026 07:34:56 +0000 ROA not before: Wed 27 May 2026 07:29:56 +0000 ROA not after: Wed 26 May 2027 07:34:56 +0000 asID: 24445 IP address blocks: 223.161.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b9:1a:5b:bc:57:f6:56:bf:54:66:a8:90:4e:a7:80:d6:ee:7d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:56 2026 GMT Not After : May 26 07:34:56 2027 GMT Subject: CN=CABC001D12DA18FFB08779D10E657A13DC75EC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:55:23:d7:d0:b1:66:9b:6d:61:91:ca:7a: 8d:de:b2:e4:b3:cf:99:ec:c1:3a:99:6a:63:bf:03: c9:8c:e3:ac:15:22:28:26:19:7c:a1:f1:33:7f:49: 77:a6:ca:48:96:5c:a0:68:42:a2:d0:c8:6a:41:cc: 6d:86:36:87:fb:0e:6e:1a:3d:41:4b:a8:95:39:f2: 57:1d:fb:75:db:e9:da:3e:3d:fa:53:e7:d5:32:0d: 04:40:11:10:94:4f:98:ad:7a:20:1b:01:1d:81:f8: e1:21:bf:56:ef:1d:3e:b8:9d:f8:d9:de:6c:41:bc: a8:ba:de:1b:21:65:a3:dd:8e:a2:e6:2a:91:b2:d5: 9d:f9:f4:72:a8:48:f7:60:f5:43:d0:66:95:62:fd: 3a:e2:f9:b7:5e:a6:e3:e9:f0:51:78:79:2c:5c:cb: e5:05:75:75:b7:34:8c:79:3b:1c:e9:1d:ce:e5:00: 30:c3:62:6a:c8:10:4d:8f:ed:51:ce:ff:86:97:22: aa:42:3b:26:f9:92:17:c2:48:de:f9:d4:01:2c:72: 9c:a3:97:3c:cc:ad:fe:18:da:99:04:8b:a5:20:fa: 97:0d:c3:35:fe:da:45:4e:e7:7a:41:cd:2d:27:95: 6c:b5:e8:1e:de:c8:c2:d1:b6:97:40:75:50:35:11: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BC:00:1D:12:DA:18:FF:B0:87:79:D1:0E:65:7A:13:DC:75:EC:47 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136312e3235302e302f32332d3234203d3e203234343435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.161.250.0/23 Signature Algorithm: sha256WithRSAEncryption 91:07:23:a1:2d:bf:ee:65:5d:42:43:d7:4f:53:82:1f:d3:e8: 09:84:db:17:7e:64:47:ef:36:b9:ba:cf:24:bc:7c:7f:2f:8d: d2:9b:3f:8c:f6:0f:d5:60:f5:2c:af:d2:ae:b1:5f:31:15:65: d2:3c:e4:ec:44:a6:79:b9:e8:f7:c1:2a:c2:e2:7b:57:d2:ae: 99:da:85:0a:f9:f7:f8:39:18:af:7d:b6:f4:95:25:4b:04:cb: 53:7c:76:79:6c:3f:51:38:0d:33:f0:8b:40:37:e6:54:5b:25: b1:ee:5c:8b:11:ac:bb:f4:73:cf:83:31:d0:25:76:26:0e:b3: 7c:aa:54:9e:0e:bf:b2:65:a9:6d:6a:1d:e8:1c:87:a3:a9:de: 40:f3:0e:02:0c:e1:03:96:2f:08:2e:ad:b7:99:18:33:b6:da: 1b:f3:fe:04:2d:2e:e6:9d:26:51:44:3f:44:1c:91:41:d1:96: 14:2f:04:e0:96:54:43:01:5d:ec:68:9f:a5:ac:34:2a:f0:91: e3:51:f7:dd:c3:05:18:0d:80:33:37:45:23:02:2c:9d:3b:f3: b0:13:a8:77:4d:8e:fd:43:7b:a5:37:af:77:2b:84:e5:1f:30: 61:70:0a:72:15:b7:c8:97:3c:32:72:ab:54:7a:a6:f0:bb:b5: 62:ed:12:6e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUebkaW7xX9la/VGaokE6ngNbufWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTZaFw0yNzA1MjYwNzM0NTZaMDMxMTAvBgNV BAMTKENBQkMwMDFEMTJEQTE4RkZCMDg3NzlEMTBFNjU3QTEzREM3NUVDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS6lUj19CxZpttYZHKeo3esuSz z5nswTqZamO/A8mM46wVIigmGXyh8TN/SXemykiWXKBoQqLQyGpBzG2GNof7Dm4a PUFLqJU58lcd+3Xb6do+PfpT59UyDQRAERCUT5iteiAbAR2B+OEhv1bvHT64nfjZ 3mxBvKi63hshZaPdjqLmKpGy1Z359HKoSPdg9UPQZpVi/Tri+bdepuPp8FF4eSxc y+UFdXW3NIx5OxzpHc7lADDDYmrIEE2P7VHO/4aXIqpCOyb5khfCSN751AEscpyj lzzMrf4Y2pkEi6Ug+pcNwzX+2kVO53pBzS0nlWy16B7eyMLRtpdAdVA1EWu3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUyrwAHRLaGP+wh3nRDmV6E9x17EcwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI3ODY1NjEvMC8zMjMyMzMyZTMx MzYzMTJlMzIzNTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNDM0MzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAd+h+jANBgkqhkiG9w0BAQsFAAOCAQEAkQcjoS2/7mVdQkPXT1OC H9PoCYTbF35kR+82ubrPJLx8fy+N0ps/jPYP1WD1LK/SrrFfMRVl0jzk7ESmebno 98EqwuJ7V9KumdqFCvn3+DkYr3229JUlSwTLU3x2eWw/UTgNM/CLQDfmVFslse5c ixGsu/Rzz4Mx0CV2Jg6zfKpUng6/smWpbWod6ByHo6neQPMOAgzhA5YvCC6tt5kY M7baG/P+BC0u5p0mUUQ/RByRQdGWFC8E4JZUQwFd7Gifpaw0KvCR41H33cMFGA2A MzdFIwIsnTvzsBOod02O/UN7pTevdyuE5R8wYXAKchW3yJc8MnKrVHqm8Lu1Yu0S bg== -----END CERTIFICATE-----Generated at Sat May 30 00:03:10 2026 by rpki-client