$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3132382e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: 5P0ROIChBmTqSBMnxsyYkfODLwsgxjVliF3X5rjGxgM= Subject key identifier: 9A:AC:04:00:39:B0:25:C7:C8:1A:DA:2F:03:B1:55:FA:25:8B:E3:F3 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 228BF13215D1090FEDDAA92FFE2281DF797C24DB Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:01:17 +0000 ROA not before: Fri 24 Apr 2026 06:56:17 +0000 ROA not after: Fri 23 Apr 2027 07:01:17 +0000 asID: 38019 IP address blocks: 139.220.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8b:f1:32:15:d1:09:0f:ed:da:a9:2f:fe:22:81:df:79:7c:24:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:56:17 2026 GMT Not After : Apr 23 07:01:17 2027 GMT Subject: CN=9AAC040039B025C7C81ADA2F03B155FA258BE3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:84:d9:14:80:57:21:9d:4c:06:60:c8:11: 25:e5:2c:dd:e3:65:ac:39:6a:26:3a:d7:e4:10:96: 3a:4f:e1:bf:db:2e:80:92:dc:bb:99:c0:58:02:75: b0:01:fb:79:9a:23:f5:dc:ef:37:9f:2c:8c:12:ab: 79:e6:3d:4b:bc:31:cc:29:ab:c1:e6:67:f1:9d:f6: b0:29:4a:70:21:ff:6c:c9:68:e4:0b:f8:f4:0b:6d: a1:cc:32:31:8d:d9:44:ed:89:06:92:65:e8:de:b4: 8d:81:8a:29:0d:0b:4b:3d:e0:8b:b2:f8:4c:69:fc: cf:f4:bf:f2:f0:2b:a3:34:ee:10:c6:82:54:3a:ba: 0c:9f:05:09:65:56:2a:8f:55:e6:e9:4a:3e:ac:be: e1:9e:78:1a:57:f4:79:ed:3d:9b:eb:cc:1d:4a:97: bf:79:50:61:e7:57:a2:fb:19:5d:c4:30:09:b8:4c: c0:ad:78:81:e5:13:ad:96:08:ca:18:89:04:53:5d: cd:56:d7:5f:5a:50:6f:a7:2c:af:2a:4e:68:b5:3e: 23:52:9b:ef:06:e7:e2:0a:a3:a8:29:73:6a:ff:8a: 20:25:7e:c3:2a:9d:a3:c8:9d:1d:72:93:2e:4d:b7: 38:8d:68:a1:88:ff:97:c9:3b:8a:53:17:36:c0:b0: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AC:04:00:39:B0:25:C7:C8:1A:DA:2F:03:B1:55:FA:25:8B:E3:F3 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.128.0/23 Signature Algorithm: sha256WithRSAEncryption 83:a5:40:01:8f:96:38:25:95:b4:7f:21:5b:8d:2f:34:c2:3b: f8:1d:2e:36:2e:be:28:c1:28:ef:a6:ee:69:f6:73:3e:93:81: 23:78:db:66:2a:43:87:a2:db:48:16:5a:99:7a:85:80:05:c4: a7:83:cd:53:96:16:34:c4:5d:b9:eb:c4:4d:24:f6:ae:d9:62: af:d6:1b:90:0b:1e:88:05:8d:b4:b7:ce:4e:c2:37:52:8c:c0: b6:2b:82:1c:77:db:5b:83:bc:55:66:d4:1e:ab:17:c9:d0:9c: 5b:a4:5e:b2:bf:47:5d:26:d6:46:7f:18:58:40:c5:2a:48:f6: 49:b8:2d:04:2b:83:de:0c:f6:b1:89:44:39:8b:ba:bf:39:ec: 3c:49:e9:dc:04:16:c4:b8:3d:30:70:3b:75:0c:11:65:81:17: af:a0:85:49:51:91:50:11:d3:97:70:84:39:55:44:23:31:26: c4:0a:fb:55:e7:5d:25:d5:f0:fd:0d:69:9f:b1:87:07:7d:4f: 92:86:c3:64:7c:1f:5d:d2:12:1c:99:55:6d:e4:2c:f3:f1:21: 15:a2:ab:dc:5d:44:cd:22:3c:69:33:82:3c:d2:29:92:5c:3b: 22:62:25:3f:af:a4:1b:a8:a7:36:1a:dd:20:a1:1e:26:0d:51: 63:b0:98:b5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIovxMhXRCQ/t2qkv/iKB33l8JNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU2MTdaFw0yNzA0MjMwNzAxMTdaMDMxMTAvBgNV BAMTKDlBQUMwNDAwMzlCMDI1QzdDODFBREEyRjAzQjE1NUZBMjU4QkUzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmYTZFIBXIZ1MBmDIESXlLN3j Zaw5aiY61+QQljpP4b/bLoCS3LuZwFgCdbAB+3maI/Xc7zefLIwSq3nmPUu8Mcwp q8HmZ/Gd9rApSnAh/2zJaOQL+PQLbaHMMjGN2UTtiQaSZejetI2BiikNC0s94Iuy +Exp/M/0v/LwK6M07hDGglQ6ugyfBQllViqPVebpSj6svuGeeBpX9HntPZvrzB1K l795UGHnV6L7GV3EMAm4TMCteIHlE62WCMoYiQRTXc1W119aUG+nLK8qTmi1PiNS m+8G5+IKo6gpc2r/iiAlfsMqnaPInR1yky5NtziNaKGI/5fJO4pTFzbAsOc1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmqwEADmwJcfIGtovA7FV+iWL4/MwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzMjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcgDANBgkqhkiG9w0BAQsFAAOCAQEAg6VAAY+WOCWVtH8hW40v NMI7+B0uNi6+KMEo76buafZzPpOBI3jbZipDh6LbSBZamXqFgAXEp4PNU5YWNMRd uevETST2rtlir9YbkAseiAWNtLfOTsI3UozAtiuCHHfbW4O8VWbUHqsXydCcW6Re sr9HXSbWRn8YWEDFKkj2SbgtBCuD3gz2sYlEOYu6vznsPEnp3AQWxLg9MHA7dQwR ZYEXr6CFSVGRUBHTl3CEOVVEIzEmxAr7VeddJdXw/Q1pn7GHB31PkobDZHwfXdIS HJlVbeQs8/EhFaKr3F1EzSI8aTOCPNIpklw7ImIlP6+kG6inNhrdIKEeJg1RY7CY tQ== -----END CERTIFICATE-----Generated at Wed May 13 13:17:02 2026 by rpki-client