$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136342e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3136342e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: WU+/SZQOvuAJCteOjiDIlg4VYZLCY5RgrdzMTq69UsE= Subject key identifier: 06:5F:0E:6C:0D:76:70:55:08:3F:FD:BE:BA:3C:94:78:DE:23:CD:90 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 6ED30DC14E6D83794BD63A034EC5939745A4C64B Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136342e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:03:34 +0000 ROA not before: Fri 24 Apr 2026 06:58:34 +0000 ROA not after: Fri 23 Apr 2027 07:03:34 +0000 asID: 38019 IP address blocks: 139.220.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d3:0d:c1:4e:6d:83:79:4b:d6:3a:03:4e:c5:93:97:45:a4:c6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:58:34 2026 GMT Not After : Apr 23 07:03:34 2027 GMT Subject: CN=065F0E6C0D767055083FFDBEBA3C9478DE23CD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:05:5a:17:3d:cf:83:1d:06:b9:ec:c6:a1: f3:a0:f6:9d:48:03:5d:be:69:7f:69:26:3f:0a:19: 56:bc:78:ce:a2:d5:e2:0c:b2:a7:26:b6:42:79:ed: ae:f4:fc:57:30:65:3a:7f:10:e0:ac:09:62:2a:33: 45:f7:e1:b3:9b:a5:ac:86:fd:79:7f:3d:fe:01:9a: 28:74:a6:73:41:c6:65:77:9a:84:4b:1f:f6:30:ef: e7:36:21:86:98:6c:cd:58:da:56:ca:5d:02:f9:15: 2d:f1:6d:4d:4a:01:0a:cc:28:e2:2b:e4:5d:64:2b: 7c:f8:ac:58:9a:22:63:f9:88:28:ce:57:4f:37:88: 93:62:1d:8e:5a:29:8f:79:10:e8:9d:1c:6e:9d:64: 56:78:07:99:5c:75:86:c0:21:7c:01:0c:c0:97:43: e0:c8:eb:ba:a7:07:4c:f9:de:eb:b0:fa:10:52:be: 02:68:56:d5:be:b8:a4:3f:f6:e4:04:87:8a:c7:29: 89:f3:f7:46:4a:f3:2b:9c:a6:e6:5f:11:e2:0a:fa: dd:c8:bd:7e:47:b8:0f:b7:ed:f6:0a:cb:34:74:6c: f0:23:bf:40:46:d3:35:35:eb:6e:ee:ab:c3:29:f1: 07:60:c9:9b:04:98:5d:9c:e0:66:be:3e:a0:74:88: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5F:0E:6C:0D:76:70:55:08:3F:FD:BE:BA:3C:94:78:DE:23:CD:90 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3136342e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.164.0/23 Signature Algorithm: sha256WithRSAEncryption 18:d6:78:aa:e8:30:3c:32:09:eb:0a:d8:bf:19:be:6e:dd:7e: 1a:0f:d4:f7:3d:3b:38:00:43:05:35:e1:f2:d7:cd:52:74:a8: fb:5a:6d:3f:50:e1:3e:50:ef:59:74:05:57:f1:19:27:0b:55: e4:27:0b:15:ae:e6:f9:01:ad:68:73:f3:42:e4:83:83:b3:80: 2d:fd:66:98:ae:c2:1c:7b:4b:40:26:50:5b:f2:f2:d8:ac:74: fa:f9:25:8c:ea:bd:2b:9b:b9:83:d6:21:c8:9a:8e:c6:7e:dd: f7:59:dc:84:23:fe:4d:79:17:c1:b9:3a:70:3f:0b:f1:2e:bb: 91:0f:0e:be:85:8d:d3:27:bf:c2:7a:d7:37:26:8e:14:9e:8a: 40:eb:8d:f3:ad:35:57:6c:53:5b:83:5a:e0:8b:3f:5e:94:42: 16:b5:67:31:77:d9:68:3c:2f:7e:c0:19:fd:1e:58:f4:45:22: 1e:64:c6:d4:f6:01:93:3f:14:c6:d1:01:96:44:6c:1a:1b:74: ba:33:01:e9:64:e7:38:62:ae:91:66:dd:9f:35:a6:cd:03:fa: ea:33:4f:38:5f:7a:89:30:84:2b:2c:dd:45:7f:67:8d:fd:39: 1c:10:11:e8:be:f0:e2:28:9c:49:28:8c:c4:66:a0:56:0c:4c: 44:59:78:dd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbtMNwU5tg3lL1joDTsWTl0WkxkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU4MzRaFw0yNzA0MjMwNzAzMzRaMDMxMTAvBgNV BAMTKDA2NUYwRTZDMEQ3NjcwNTUwODNGRkRCRUJBM0M5NDc4REUyM0NEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevgVaFz3Pgx0GuezGofOg9p1I A12+aX9pJj8KGVa8eM6i1eIMsqcmtkJ57a70/FcwZTp/EOCsCWIqM0X34bObpayG /Xl/Pf4Bmih0pnNBxmV3moRLH/Yw7+c2IYaYbM1Y2lbKXQL5FS3xbU1KAQrMKOIr 5F1kK3z4rFiaImP5iCjOV083iJNiHY5aKY95EOidHG6dZFZ4B5lcdYbAIXwBDMCX Q+DI67qnB0z53uuw+hBSvgJoVtW+uKQ/9uQEh4rHKYnz90ZK8yucpuZfEeIK+t3I vX5HuA+37fYKyzR0bPAjv0BG0zU1627uq8Mp8QdgyZsEmF2c4Ga+PqB0iHvdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBl8ObA12cFUIP/2+ujyUeN4jzZAwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcpDANBgkqhkiG9w0BAQsFAAOCAQEAGNZ4qugwPDIJ6wrYvxm+ bt1+Gg/U9z07OABDBTXh8tfNUnSo+1ptP1DhPlDvWXQFV/EZJwtV5CcLFa7m+QGt aHPzQuSDg7OALf1mmK7CHHtLQCZQW/Ly2Kx0+vkljOq9K5u5g9YhyJqOxn7d91nc hCP+TXkXwbk6cD8L8S67kQ8OvoWN0ye/wnrXNyaOFJ6KQOuN8601V2xTW4Na4Is/ XpRCFrVnMXfZaDwvfsAZ/R5Y9EUiHmTG1PYBkz8UxtEBlkRsGht0ujMB6WTnOGKu kWbdnzWmzQP66jNPOF96iTCEKyzdRX9njf05HBAR6L7w4iicSSiMxGagVgxMRFl4 3Q== -----END CERTIFICATE-----Generated at Wed May 13 13:20:35 2026 by rpki-client