$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137302e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3137302e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: 1KtXc3wHaRJo58NxBxLPtFezfLrM6NhX8cpKI1rCcGA= Subject key identifier: 81:28:43:83:F9:AC:3C:4D:F3:E3:4B:14:9D:F9:D3:58:9B:E2:9F:DF Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 0AE1350C42236A5FD478DB3D37B387EB1E738F4F Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137302e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:01:18 +0000 ROA not before: Fri 24 Apr 2026 06:56:18 +0000 ROA not after: Fri 23 Apr 2027 07:01:18 +0000 asID: 38019 IP address blocks: 139.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e1:35:0c:42:23:6a:5f:d4:78:db:3d:37:b3:87:eb:1e:73:8f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:56:18 2026 GMT Not After : Apr 23 07:01:18 2027 GMT Subject: CN=81284383F9AC3C4DF3E34B149DF9D3589BE29FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:f7:75:81:3c:d9:12:de:5d:d2:8a:b3:ae: f7:54:66:7d:39:ee:37:d7:41:8f:4c:ec:9e:58:58: e0:e2:10:76:8d:02:61:7c:31:78:50:ca:f6:d0:52: 90:3f:40:1f:28:74:5f:41:18:d5:90:ff:17:4f:cd: c8:4c:8f:6c:a6:c7:08:b2:ad:01:45:32:62:d3:99: 4e:e5:50:17:46:1d:a3:7d:7a:65:3a:9e:33:76:41: de:01:26:62:cc:8d:27:96:16:25:ca:a0:86:f1:23: 09:ca:dc:70:5d:97:b6:bf:fe:a1:85:4a:a0:87:11: 0e:ba:c4:f4:c2:b4:36:f8:a0:f9:3a:09:39:aa:8d: 0d:c7:2e:5f:09:bd:e7:a7:a1:05:56:41:f6:02:0d: b9:ef:47:58:72:96:00:da:63:6e:d8:2e:cd:9b:0e: ba:ab:53:0d:c8:7d:10:24:75:56:94:df:83:fa:60: 72:12:67:a6:2b:6d:7d:9b:23:96:0d:cf:93:cd:15: 59:a4:6f:16:7b:7d:70:a6:44:d8:94:2f:f5:37:a4: 03:59:77:aa:ea:69:69:89:cb:d3:1d:21:d6:54:d8: 4c:ef:1d:e5:38:b9:ac:37:6c:64:c2:7f:44:bb:16: 22:54:5a:33:ea:37:17:f3:97:b3:26:36:4e:cb:d7: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:43:83:F9:AC:3C:4D:F3:E3:4B:14:9D:F9:D3:58:9B:E2:9F:DF X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3137302e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.170.0/23 Signature Algorithm: sha256WithRSAEncryption 07:89:50:8e:59:f5:12:ba:18:e5:f2:7d:cf:03:30:f9:d2:0e: 3d:8a:c0:c1:3a:54:7a:0a:ae:14:c1:7e:f1:97:f1:50:77:2f: f5:2d:da:fe:de:c7:21:80:f6:30:14:81:8e:b4:54:42:45:b4: 94:fa:38:23:e1:c7:f3:b9:0c:95:fa:86:e3:ec:70:d1:cd:b3: 9b:b6:da:c3:c1:28:3c:0e:06:ab:50:f1:4c:92:be:7a:5b:c2: 4e:ff:21:56:f4:44:ad:24:3d:8e:0e:00:8e:d5:a4:8c:78:80: 03:64:5e:f5:f1:f5:30:44:e6:41:88:46:99:a3:4f:91:78:33: 05:45:46:ff:65:5e:d5:98:ba:ee:85:74:1e:f8:0c:27:e6:7b: 48:31:a6:a1:e5:78:96:0f:00:fb:8c:bd:2f:82:d8:40:5c:00: a8:69:22:9f:b8:f5:6e:10:52:90:0d:e1:99:fc:e5:f7:07:7e: 9a:0b:1b:69:8a:fd:48:4e:b1:8e:f6:8f:5d:59:e5:80:04:80: 13:1f:79:e7:15:de:62:69:ff:b2:a3:22:3f:f7:49:32:e0:c5: 1c:a1:09:15:84:ee:00:7d:6f:19:88:9d:ef:56:cc:88:e5:67: f4:cc:41:11:b2:09:5d:28:ec:ef:db:59:c0:52:d3:79:4c:a5: 5c:4a:e3:4f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCuE1DEIjal/UeNs9N7OH6x5zj08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU2MThaFw0yNzA0MjMwNzAxMThaMDMxMTAvBgNV BAMTKDgxMjg0MzgzRjlBQzNDNERGM0UzNEIxNDlERjlEMzU4OUJFMjlGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpfd1gTzZEt5d0oqzrvdUZn05 7jfXQY9M7J5YWODiEHaNAmF8MXhQyvbQUpA/QB8odF9BGNWQ/xdPzchMj2ymxwiy rQFFMmLTmU7lUBdGHaN9emU6njN2Qd4BJmLMjSeWFiXKoIbxIwnK3HBdl7a//qGF SqCHEQ66xPTCtDb4oPk6CTmqjQ3HLl8JveenoQVWQfYCDbnvR1hylgDaY27YLs2b DrqrUw3IfRAkdVaU34P6YHISZ6YrbX2bI5YNz5PNFVmkbxZ7fXCmRNiUL/U3pANZ d6rqaWmJy9MdIdZU2EzvHeU4uaw3bGTCf0S7FiJUWjPqNxfzl7MmNk7L19vBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUgShDg/msPE3z40sUnfnTWJvin98wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcqjANBgkqhkiG9w0BAQsFAAOCAQEAB4lQjln1EroY5fJ9zwMw +dIOPYrAwTpUegquFMF+8ZfxUHcv9S3a/t7HIYD2MBSBjrRUQkW0lPo4I+HH87kM lfqG4+xw0c2zm7baw8EoPA4Gq1DxTJK+elvCTv8hVvRErSQ9jg4AjtWkjHiAA2Re 9fH1METmQYhGmaNPkXgzBUVG/2Ve1Zi67oV0HvgMJ+Z7SDGmoeV4lg8A+4y9L4LY QFwAqGkin7j1bhBSkA3hmfzl9wd+mgsbaYr9SE6xjvaPXVnlgASAEx955xXeYmn/ sqMiP/dJMuDFHKEJFYTuAH1vGYid71bMiOVn9MxBEbIJXSjs79tZwFLTeUylXErj Tw== -----END CERTIFICATE-----Generated at Wed May 13 14:43:19 2026 by rpki-client