$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134302e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3134302e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: Fqhbuc3GQ22039aWwqPh3Xh3rUTTZJhsbhTMNct8+Mo= Subject key identifier: A3:BC:C5:72:F1:5F:EA:46:94:FA:F3:17:78:3F:35:CF:C1:AC:22:1E Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 5EFA58F18E253CD6F4CEA35202D0957B0BCB8157 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134302e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:01:17 +0000 ROA not before: Fri 24 Apr 2026 06:56:17 +0000 ROA not after: Fri 23 Apr 2027 07:01:17 +0000 asID: 38019 IP address blocks: 139.220.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fa:58:f1:8e:25:3c:d6:f4:ce:a3:52:02:d0:95:7b:0b:cb:81:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:56:17 2026 GMT Not After : Apr 23 07:01:17 2027 GMT Subject: CN=A3BCC572F15FEA4694FAF317783F35CFC1AC221E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:c7:88:dc:a8:64:05:99:7f:d6:d4:21:43: 2a:c9:83:0f:2e:32:67:4a:de:39:74:11:55:d4:15: d4:7f:02:d9:fb:e0:5b:b7:57:23:89:80:10:09:61: 30:5f:81:b2:05:f5:55:fd:ae:c6:25:25:f6:2c:22: 80:d0:03:a0:f5:23:51:ad:55:8c:0e:1d:a2:0f:b0: fe:62:c1:f9:f1:7e:6b:ec:04:0e:df:7d:97:29:05: 40:5c:a9:ae:9f:bb:87:62:f8:67:a6:98:94:bf:76: 55:a0:56:72:ca:fe:c1:ff:28:38:99:75:40:4b:7c: cb:f2:08:d0:4a:4b:72:9f:3e:9c:2e:22:1e:bb:78: 60:b0:05:4f:61:ba:b5:73:9e:16:97:bc:f8:f2:44: 30:1d:a5:cf:c0:af:91:e1:be:93:01:a4:a8:08:23: b0:56:7b:c9:ab:cb:ea:6a:ae:2c:83:42:c7:84:f1: 4c:bd:ff:95:ca:a5:23:42:32:b2:82:c7:69:eb:c7: 48:7e:f2:1e:15:d6:8a:79:6b:d3:84:99:1d:4a:66: ad:15:ac:11:c2:1d:cb:81:e1:3c:a0:58:72:9c:6a: 3f:d6:34:43:e6:d9:a7:13:90:e3:80:73:a6:b2:81: 1b:58:e0:71:84:f3:8a:f8:2d:cc:f6:76:4f:cc:e6: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BC:C5:72:F1:5F:EA:46:94:FA:F3:17:78:3F:35:CF:C1:AC:22:1E X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3134302e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.140.0/23 Signature Algorithm: sha256WithRSAEncryption b7:4d:6c:e6:01:ea:41:14:15:9e:f2:bb:bb:26:77:bb:fd:d1: 60:7d:dd:09:f2:a9:c9:f2:41:b5:c3:b0:4a:79:f4:d4:e8:37: 6d:61:8f:98:bb:81:df:a9:ac:54:82:60:6f:b1:cf:84:95:1d: 23:ef:a1:9d:c6:dd:4c:b6:8c:65:b1:b2:79:a7:30:4b:2d:90: 52:f7:f5:4e:8a:eb:33:9b:df:8e:86:35:5c:41:79:a7:98:86: b8:3f:41:95:50:85:56:64:c3:d8:d2:0e:2b:93:e7:81:66:42: 39:cd:fe:55:8b:14:76:85:bf:ae:0b:fb:dc:88:ec:e9:4c:6f: 2b:4a:76:fe:41:49:c2:4d:b7:34:73:22:28:1d:9f:9b:b0:d9: 1d:01:b9:0d:72:1c:d9:47:e5:b0:69:72:8e:71:13:66:22:dc: 7f:c9:ac:3d:19:c2:9b:3c:7f:59:a5:c9:d2:05:d6:c6:d8:26: 04:16:fa:5c:30:d3:d3:a2:dd:0a:8b:c9:a5:e3:17:5b:da:af: 18:6f:ef:ca:ad:2c:17:42:68:59:75:a8:37:0a:76:8f:50:07: 01:34:a2:4a:db:60:59:47:f5:29:0d:1f:74:ee:a6:03:1a:74: 23:e0:36:60:32:e9:45:2b:6e:d9:a0:e9:d7:05:8d:eb:01:9d: 13:19:83:1c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUXvpY8Y4lPNb0zqNSAtCVewvLgVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU2MTdaFw0yNzA0MjMwNzAxMTdaMDMxMTAvBgNV BAMTKEEzQkNDNTcyRjE1RkVBNDY5NEZBRjMxNzc4M0YzNUNGQzFBQzIyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9f8eI3KhkBZl/1tQhQyrJgw8u MmdK3jl0EVXUFdR/Atn74Fu3VyOJgBAJYTBfgbIF9VX9rsYlJfYsIoDQA6D1I1Gt VYwOHaIPsP5iwfnxfmvsBA7ffZcpBUBcqa6fu4di+GemmJS/dlWgVnLK/sH/KDiZ dUBLfMvyCNBKS3KfPpwuIh67eGCwBU9hurVznhaXvPjyRDAdpc/Ar5HhvpMBpKgI I7BWe8mry+pqriyDQseE8Uy9/5XKpSNCMrKCx2nrx0h+8h4V1op5a9OEmR1KZq0V rBHCHcuB4TygWHKcaj/WNEPm2acTkOOAc6aygRtY4HGE84r4Lcz2dk/M5mMXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUo7zFcvFf6kaU+vMXeD81z8GsIh4wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcjDANBgkqhkiG9w0BAQsFAAOCAQEAt01s5gHqQRQVnvK7uyZ3 u/3RYH3dCfKpyfJBtcOwSnn01Og3bWGPmLuB36msVIJgb7HPhJUdI++hncbdTLaM ZbGyeacwSy2QUvf1TorrM5vfjoY1XEF5p5iGuD9BlVCFVmTD2NIOK5PngWZCOc3+ VYsUdoW/rgv73Ijs6UxvK0p2/kFJwk23NHMiKB2fm7DZHQG5DXIc2UflsGlyjnET ZiLcf8msPRnCmzx/WaXJ0gXWxtgmBBb6XDDT06LdCovJpeMXW9qvGG/vyq0sF0Jo WXWoNwp2j1AHATSiSttgWUf1KQ0fdO6mAxp0I+A2YDLpRStu2aDp1wWN6wGdExmD HA== -----END CERTIFICATE-----Generated at Wed May 13 13:53:48 2026 by rpki-client