$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138362e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3138362e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: k9e5is8p5zNjXUQPy7mf1KfwTYFZycYtYR0bkRlJsAc= Subject key identifier: 3A:BB:16:7C:A2:00:71:B4:C3:E5:78:99:4A:C0:4E:4E:4D:E0:0D:1B Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 283AB2A28E238B637D07FD251694C1CCEDE06A5B Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138362e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:01:17 +0000 ROA not before: Fri 24 Apr 2026 06:56:17 +0000 ROA not after: Fri 23 Apr 2027 07:01:17 +0000 asID: 38019 IP address blocks: 139.220.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3a:b2:a2:8e:23:8b:63:7d:07:fd:25:16:94:c1:cc:ed:e0:6a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:56:17 2026 GMT Not After : Apr 23 07:01:17 2027 GMT Subject: CN=3ABB167CA20071B4C3E578994AC04E4E4DE00D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:60:4d:30:30:5b:f6:24:71:60:fb:f9:51: 46:6c:70:56:d4:52:c4:25:05:cc:8d:d6:aa:05:f0: 1b:5f:db:a0:64:c2:f6:df:81:c3:87:47:02:38:d4: bf:62:b3:7d:f4:0b:0f:b3:b8:c1:b5:be:65:26:24: 5e:62:6d:46:34:30:83:48:13:ad:de:aa:f0:21:38: 44:96:56:d9:f5:cf:b1:36:5d:87:e8:29:57:e6:3f: b5:6e:ec:0b:f1:18:32:5d:60:ff:9d:42:98:6e:21: a6:13:df:4f:07:41:37:bc:7a:c4:8d:f4:72:30:1f: 54:7c:7d:7f:41:54:90:23:b4:be:84:fa:cc:74:11: 57:74:68:32:ef:b2:9b:20:b5:a9:6d:07:50:35:c8: 3e:5b:50:b2:a3:94:04:68:4f:aa:89:b6:c5:c1:a1: 55:32:93:0d:bf:7e:45:28:2f:1d:35:6b:bc:94:8d: 29:d8:23:f4:54:c1:cf:51:b3:c3:ab:a3:4c:29:b0: 1b:38:c1:c0:0d:96:ba:3c:d8:3a:0d:84:34:a7:4b: 9a:a1:d1:86:4a:0e:0b:eb:07:cf:8d:38:88:bd:2e: 6e:50:00:4c:ce:74:d8:44:b6:48:9d:b8:a1:ae:ec: 6c:a4:56:ea:27:e9:20:3c:0f:2b:94:60:05:5a:03: f9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BB:16:7C:A2:00:71:B4:C3:E5:78:99:4A:C0:4E:4E:4D:E0:0D:1B X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3138362e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.186.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:7d:f4:3b:bd:a7:bb:fb:e4:e8:09:ec:7a:0a:d2:25:86:08: 90:7e:b8:d1:84:0d:58:da:6b:f6:72:3e:5a:ad:7f:b4:ef:17: 53:66:86:9c:e7:c7:b9:42:7e:2c:ec:3c:66:04:5b:d6:e8:99: 5d:96:c4:73:5d:cd:14:61:de:37:7f:e6:dc:e4:79:31:7b:84: 53:74:dc:ff:9c:de:67:c2:9e:0a:54:61:c3:d8:70:02:0a:38: 0f:8b:dc:d3:1e:c8:3a:56:1b:6a:5e:ac:05:c7:3c:8f:78:51: 4b:5e:59:2c:e0:35:3a:e3:8a:29:6e:43:51:af:c7:34:31:41: 14:97:4d:29:d7:d1:98:76:2d:f5:4f:a5:4d:78:11:9f:ad:89: 75:c6:3e:7b:be:c5:61:cc:07:61:e5:e9:5c:24:7e:ba:74:01: 00:b2:f7:a2:2c:5a:d0:cb:ec:e3:17:c3:a1:34:98:b8:d2:15: 0f:40:fa:d1:32:0b:53:24:9c:a2:c7:f2:9d:5c:1a:98:93:d6: fc:d0:82:23:ed:1b:93:79:0c:ef:60:69:26:75:33:84:80:fc: 09:f3:2a:36:4f:7f:08:cb:2c:fc:9c:f2:37:d5:f0:25:8c:ff: 2b:28:b3:b3:93:13:4c:30:c0:94:de:e0:8e:b3:11:c1:73:01: d0:ca:88:2e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKDqyoo4ji2N9B/0lFpTBzO3galswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU2MTdaFw0yNzA0MjMwNzAxMTdaMDMxMTAvBgNV BAMTKDNBQkIxNjdDQTIwMDcxQjRDM0U1Nzg5OTRBQzA0RTRFNERFMDBEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWtmBNMDBb9iRxYPv5UUZscFbU UsQlBcyN1qoF8Btf26BkwvbfgcOHRwI41L9is330Cw+zuMG1vmUmJF5ibUY0MINI E63eqvAhOESWVtn1z7E2XYfoKVfmP7Vu7AvxGDJdYP+dQphuIaYT308HQTe8esSN 9HIwH1R8fX9BVJAjtL6E+sx0EVd0aDLvspsgtaltB1A1yD5bULKjlARoT6qJtsXB oVUykw2/fkUoLx01a7yUjSnYI/RUwc9Rs8Oro0wpsBs4wcANlro82DoNhDSnS5qh 0YZKDgvrB8+NOIi9Lm5QAEzOdNhEtkiduKGu7GykVuon6SA8DyuUYAVaA/npAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUOrsWfKIAcbTD5XiZSsBOTk3gDRswHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzODM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcujANBgkqhkiG9w0BAQsFAAOCAQEATn30O72nu/vk6AnsegrS JYYIkH640YQNWNpr9nI+Wq1/tO8XU2aGnOfHuUJ+LOw8ZgRb1uiZXZbEc13NFGHe N3/m3OR5MXuEU3Tc/5zeZ8KeClRhw9hwAgo4D4vc0x7IOlYbal6sBcc8j3hRS15Z LOA1OuOKKW5DUa/HNDFBFJdNKdfRmHYt9U+lTXgRn62JdcY+e77FYcwHYeXpXCR+ unQBALL3oixa0Mvs4xfDoTSYuNIVD0D60TILUyScosfynVwamJPW/NCCI+0bk3kM 72BpJnUzhID8CfMqNk9/CMss/JzyN9XwJYz/Kyizs5MTTDDAlN7gjrMRwXMB0MqI Lg== -----END CERTIFICATE-----Generated at Wed May 13 14:25:17 2026 by rpki-client