$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3133322e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3133322e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: Yal1GXlv9jjIsib/I3Tiwr/fSnf6zycDxs/KHuHbwhg= Subject key identifier: C5:55:BC:61:7C:5A:6F:D1:44:AB:78:58:88:B9:7D:B8:90:73:53:32 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 27AFA23472B622AC8FFC96624EBC24291DD534E9 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3133322e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:01:17 +0000 ROA not before: Fri 24 Apr 2026 06:56:17 +0000 ROA not after: Fri 23 Apr 2027 07:01:17 +0000 asID: 38019 IP address blocks: 139.220.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:af:a2:34:72:b6:22:ac:8f:fc:96:62:4e:bc:24:29:1d:d5:34:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:56:17 2026 GMT Not After : Apr 23 07:01:17 2027 GMT Subject: CN=C555BC617C5A6FD144AB785888B97DB890735332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:06:7d:84:bf:4f:e2:f2:61:a1:f2:7c:73: 0b:d2:ed:b3:60:be:c0:c5:9a:81:3c:85:20:2c:e7: 63:f5:2c:b0:62:47:78:78:fd:b1:0c:8a:c2:d1:b7: c4:bb:10:42:bb:ed:fd:ec:ae:d4:93:d6:94:9d:9f: 63:bc:e4:b0:c6:1f:e2:47:34:66:a9:3b:38:ca:59: 40:75:97:cc:c7:b8:dc:1f:22:65:6f:04:e2:0c:25: 8f:bd:f6:39:3a:fc:34:fc:f9:ab:c2:f0:01:d7:72: 1b:de:52:31:55:46:bb:37:ae:54:be:b5:a4:ec:47: 3b:d7:0b:0b:a3:6d:47:02:5f:dc:54:1c:5a:95:fc: a6:3e:69:67:b6:b7:41:b2:47:e9:be:94:5b:e5:0f: e1:ae:90:22:4b:f4:77:0c:8a:08:51:f8:6e:4b:6a: 73:d6:23:f6:7e:bf:22:6d:30:2b:25:97:b1:e3:f3: 5f:fa:a4:bb:78:ad:18:b1:a3:9a:74:31:e5:26:ad: 64:b5:56:13:b9:9e:11:89:95:29:ab:6f:61:27:7a: da:13:94:c2:4d:b2:17:84:32:ab:cb:48:bc:ce:ce: 15:41:9c:f4:6a:be:b3:48:90:f7:14:20:4f:b8:e7: 4b:9c:86:1a:e3:8b:c1:74:72:df:cb:1e:38:34:ba: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:55:BC:61:7C:5A:6F:D1:44:AB:78:58:88:B9:7D:B8:90:73:53:32 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3133322e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.132.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:3c:f6:a9:a4:ad:12:70:98:4d:ae:1b:c8:32:e1:09:c9:39: 49:08:75:4a:a4:60:25:70:54:ca:f4:77:71:e3:b9:9a:76:2c: b1:62:18:e1:cf:e2:dc:62:28:eb:d0:3e:f3:fa:b5:72:89:e7: c4:a9:94:2b:d3:be:95:ef:4f:91:cb:66:55:56:45:81:74:95: 1d:e8:21:c3:58:6c:fb:75:88:83:7e:8f:ad:59:e7:c4:5c:23: 34:e3:b3:ff:70:b7:4f:41:cf:a1:7f:85:20:3f:44:1a:1e:cc: 19:22:b5:85:5d:35:9a:68:0c:0b:b2:fa:a1:48:e5:f2:3c:79: 3d:f0:31:af:5d:8a:80:2c:65:53:a5:df:de:9e:a8:ae:14:df: f6:83:9d:ed:73:71:6e:e6:f9:a0:7a:12:13:66:f8:a5:ae:51: a7:34:3e:7b:92:99:84:f6:41:a4:cf:15:40:82:c2:82:35:17: 82:db:54:81:bb:84:4d:cf:d9:c8:78:79:aa:e7:5c:f7:b4:65: 6d:2f:5a:cf:a0:10:af:49:d3:6c:85:0a:14:10:92:d3:8f:17: e5:7f:95:b5:f5:30:29:db:94:47:06:4a:90:84:e4:3c:89:61: 1c:8d:db:91:fa:d9:ae:63:65:0c:34:5c:fd:ef:31:fa:80:15: 2e:e6:bf:19 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJ6+iNHK2IqyP/JZiTrwkKR3VNOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU2MTdaFw0yNzA0MjMwNzAxMTdaMDMxMTAvBgNV BAMTKEM1NTVCQzYxN0M1QTZGRDE0NEFCNzg1ODg4Qjk3REI4OTA3MzUzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR9AZ9hL9P4vJhofJ8cwvS7bNg vsDFmoE8hSAs52P1LLBiR3h4/bEMisLRt8S7EEK77f3srtST1pSdn2O85LDGH+JH NGapOzjKWUB1l8zHuNwfImVvBOIMJY+99jk6/DT8+avC8AHXchveUjFVRrs3rlS+ taTsRzvXCwujbUcCX9xUHFqV/KY+aWe2t0GyR+m+lFvlD+GukCJL9HcMighR+G5L anPWI/Z+vyJtMCsll7Hj81/6pLt4rRixo5p0MeUmrWS1VhO5nhGJlSmrb2EnetoT lMJNsheEMqvLSLzOzhVBnPRqvrNIkPcUIE+450uchhrji8F0ct/LHjg0ujMrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUxVW8YXxab9FEq3hYiLl9uJBzUzIwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvchDANBgkqhkiG9w0BAQsFAAOCAQEATTz2qaStEnCYTa4byDLh Cck5SQh1SqRgJXBUyvR3ceO5mnYssWIY4c/i3GIo69A+8/q1connxKmUK9O+le9P kctmVVZFgXSVHeghw1hs+3WIg36PrVnnxFwjNOOz/3C3T0HPoX+FID9EGh7MGSK1 hV01mmgMC7L6oUjl8jx5PfAxr12KgCxlU6Xf3p6orhTf9oOd7XNxbub5oHoSE2b4 pa5RpzQ+e5KZhPZBpM8VQILCgjUXgttUgbuETc/ZyHh5qudc97RlbS9az6AQr0nT bIUKFBCS048X5X+VtfUwKduURwZKkITkPIlhHI3bkfrZrmNlDDRc/e8x+oAVLua/ GQ== -----END CERTIFICATE-----Generated at Wed May 13 14:53:41 2026 by rpki-client