$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3135382e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3135382e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: meYeJuuSOIYXbyNeo8DWWa0sSxQYluiZYAfTHr55P/s= Subject key identifier: 45:D0:A8:05:97:F6:38:53:47:4D:A4:B2:E3:5A:28:D0:E3:12:49:7E Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 667B95A7BD6F56F724C1C464FE856E02C9EED243 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3135382e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:01:16 +0000 ROA not before: Fri 24 Apr 2026 06:56:16 +0000 ROA not after: Fri 23 Apr 2027 07:01:16 +0000 asID: 38019 IP address blocks: 139.220.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7b:95:a7:bd:6f:56:f7:24:c1:c4:64:fe:85:6e:02:c9:ee:d2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:56:16 2026 GMT Not After : Apr 23 07:01:16 2027 GMT Subject: CN=45D0A80597F63853474DA4B2E35A28D0E312497E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:c7:e7:ae:8d:5c:4e:c8:85:2a:6a:99:e0: 2e:05:99:5a:83:8d:7b:88:2d:9d:93:0c:8e:51:1d: 48:77:99:6e:5c:01:40:95:5d:76:b7:fe:e7:9b:98: 2e:d2:2c:3e:fd:b5:a8:53:b2:95:ff:e8:d1:7c:00: be:9f:b2:cd:5f:c5:c3:98:bc:99:2f:92:d2:50:7c: e9:15:64:6a:1b:33:34:d0:c8:67:da:00:9f:a0:26: b9:63:21:b5:ad:ce:c2:b4:f0:d7:6a:f3:61:b8:4f: 69:2e:86:fb:d0:4c:b2:47:e4:7d:ed:cd:c7:a6:5a: d9:ca:c0:cb:f1:89:fe:d2:25:90:72:43:58:65:4b: f2:20:fb:9f:ff:b5:5f:9e:0e:e5:86:13:23:bd:d2: 7e:f6:34:da:b7:c7:46:da:bb:d3:55:59:89:2e:83: 90:02:d1:43:78:84:7c:3d:a3:7e:5d:b1:51:6c:23: bc:59:13:b2:42:87:45:82:d8:56:2b:6f:f9:0b:9f: bf:ef:50:8b:40:b9:e2:ec:ed:09:ed:c7:6a:c9:df: 15:c7:0f:ed:87:6e:ad:88:04:b9:34:10:5f:01:16: c1:1f:36:f8:b9:81:53:7c:2d:06:c5:c1:46:3f:aa: ad:51:2d:66:af:8a:ae:dd:63:42:4a:b8:d8:29:a0: 69:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D0:A8:05:97:F6:38:53:47:4D:A4:B2:E3:5A:28:D0:E3:12:49:7E X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3135382e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.158.0/23 Signature Algorithm: sha256WithRSAEncryption 96:7a:c2:aa:00:2d:87:54:9e:87:ea:aa:b3:78:0b:ef:57:59: 69:3e:12:d9:dd:fd:a7:33:86:e2:54:61:fe:c1:df:2e:17:26: e1:e2:7c:88:2e:dd:f9:a2:ea:a6:32:d5:bf:00:9a:58:b5:cd: 42:f4:d8:0c:a1:dd:34:21:75:00:74:03:ba:d5:23:14:7f:89: af:46:ac:90:2a:99:17:de:7a:4e:71:68:f4:94:c7:a9:d7:02: 1a:74:27:75:68:53:71:41:fe:b9:14:38:e0:9f:ab:42:14:8f: e5:51:5f:72:67:9a:0b:38:20:07:d8:d2:61:3e:aa:49:c2:4c: 69:f9:3b:15:e9:38:c2:8a:0f:24:73:fb:12:6b:d7:62:2b:dc: 85:3d:3b:e8:49:80:ff:b4:fb:d4:fa:ad:4e:8a:0c:8b:32:22: 10:21:60:21:cb:f6:03:fc:fb:33:da:09:b2:41:89:0a:bd:1c: 28:98:a6:13:7e:fd:d7:2a:fe:9c:0f:eb:a2:06:9e:a7:c6:32: 6c:9b:d0:76:00:3c:c3:a4:4c:ea:40:f2:d2:03:12:12:3c:7a: 3a:77:fc:2b:4f:bf:c4:0f:7a:43:28:cf:90:21:00:20:c0:99: 12:57:29:35:7f:f9:15:3a:c8:93:72:5d:dd:5e:cd:72:c7:07: f8:31:2c:41 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZnuVp71vVvckwcRk/oVuAsnu0kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU2MTZaFw0yNzA0MjMwNzAxMTZaMDMxMTAvBgNV BAMTKDQ1RDBBODA1OTdGNjM4NTM0NzREQTRCMkUzNUEyOEQwRTMxMjQ5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrv8fnro1cTsiFKmqZ4C4FmVqD jXuILZ2TDI5RHUh3mW5cAUCVXXa3/uebmC7SLD79tahTspX/6NF8AL6fss1fxcOY vJkvktJQfOkVZGobMzTQyGfaAJ+gJrljIbWtzsK08Ndq82G4T2kuhvvQTLJH5H3t zcemWtnKwMvxif7SJZByQ1hlS/Ig+5//tV+eDuWGEyO90n72NNq3x0bau9NVWYku g5AC0UN4hHw9o35dsVFsI7xZE7JCh0WC2FYrb/kLn7/vUItAueLs7Qntx2rJ3xXH D+2Hbq2IBLk0EF8BFsEfNvi5gVN8LQbFwUY/qq1RLWaviq7dY0JKuNgpoGnPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQURdCoBZf2OFNHTaSy41oo0OMSSX4wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcnjANBgkqhkiG9w0BAQsFAAOCAQEAlnrCqgAth1Seh+qqs3gL 71dZaT4S2d39pzOG4lRh/sHfLhcm4eJ8iC7d+aLqpjLVvwCaWLXNQvTYDKHdNCF1 AHQDutUjFH+Jr0askCqZF956TnFo9JTHqdcCGnQndWhTcUH+uRQ44J+rQhSP5VFf cmeaCzggB9jSYT6qScJMafk7Fek4wooPJHP7EmvXYivchT076EmA/7T71PqtTooM izIiECFgIcv2A/z7M9oJskGJCr0cKJimE3791yr+nA/rogaep8YybJvQdgA8w6RM 6kDy0gMSEjx6Onf8K0+/xA96QyjPkCEAIMCZElcpNX/5FTrIk3Jd3V7NcscH+DEs QQ== -----END CERTIFICATE-----Generated at Wed May 13 14:11:11 2026 by rpki-client