$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139302e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3139302e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: CfIqrGIVG9Wsu5IoLvyYr+RPVbPOcfMXp8diWIfD8+Y= Subject key identifier: 70:83:DC:7D:34:70:09:7A:A5:21:69:A2:09:32:A1:6C:B9:C4:4D:D7 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 4EDD874BC5F2954900239FD1B57EEEFD42DDDA4B Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139302e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:01:17 +0000 ROA not before: Fri 24 Apr 2026 06:56:17 +0000 ROA not after: Fri 23 Apr 2027 07:01:17 +0000 asID: 38019 IP address blocks: 139.220.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:dd:87:4b:c5:f2:95:49:00:23:9f:d1:b5:7e:ee:fd:42:dd:da:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:56:17 2026 GMT Not After : Apr 23 07:01:17 2027 GMT Subject: CN=7083DC7D3470097AA52169A20932A16CB9C44DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:f7:a7:69:0b:72:e1:a7:8a:e8:a7:b1:e8: 77:1a:61:5b:98:16:58:5e:5f:a1:28:7d:51:c5:21: 6c:79:d4:ed:45:e6:ec:4e:cc:f0:79:94:51:72:71: 27:03:77:30:cb:54:c7:08:32:86:72:d2:09:64:68: 3d:b5:06:22:4e:d0:85:16:99:33:cf:34:e4:48:54: 76:43:00:8f:74:cb:bc:bd:e9:92:88:1b:e8:46:a1: 45:e3:0a:f1:f3:e5:ee:05:a1:ae:c0:75:ec:45:84: b5:64:26:20:b8:ae:15:8c:4b:37:04:91:ea:f9:29: fe:65:fb:b4:84:b9:72:da:c3:29:e5:ac:ee:18:ef: 6d:09:68:a5:4a:43:60:28:d7:d3:4a:d3:76:a2:d1: 28:27:3d:19:a0:f7:9a:7a:ed:98:3b:ba:ea:d7:dc: 57:75:cd:bc:b2:8c:d6:df:24:9b:08:13:b0:60:0b: 66:85:af:76:65:5f:f1:f8:37:ac:48:2e:81:10:26: c7:af:97:01:32:c4:14:19:10:bc:6b:6f:da:3d:81: 52:73:9e:c3:3b:0e:65:38:ef:a1:21:d7:fb:d2:3d: a4:a7:ea:a2:6e:77:b7:16:ce:a2:5b:12:c4:0c:49: 84:fa:3c:c1:ce:a9:81:03:71:43:ce:e8:db:1a:3c: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:DC:7D:34:70:09:7A:A5:21:69:A2:09:32:A1:6C:B9:C4:4D:D7 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139302e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.190.0/23 Signature Algorithm: sha256WithRSAEncryption b2:08:ac:6d:a1:f2:f0:26:0e:d5:74:06:9e:ac:7a:99:56:d4: 2e:3a:40:f6:66:96:f3:94:44:ce:ee:60:3f:d3:e7:96:5c:b3: 3d:69:94:9a:37:d3:d7:df:6a:8a:b0:4e:1c:a7:27:82:18:13: cb:b7:4b:7d:8f:56:85:43:2b:66:fe:e5:66:f8:ba:03:cf:b6: 25:00:e8:b0:11:d6:2e:25:8c:57:b0:5b:e0:5b:72:a4:a5:2e: 8d:f2:41:ff:11:8a:1a:51:4c:fa:3c:4d:d2:60:45:37:13:01: f3:1d:8a:cf:e4:05:e6:32:94:4f:96:11:39:0d:31:dc:ff:a1: e3:cc:67:24:17:2b:8a:4b:9f:73:46:67:4b:24:c4:4b:75:eb: ef:78:a6:4b:e8:e1:1f:89:a4:6e:b7:39:f5:fb:9c:97:a1:9c: 7e:6d:5e:ab:5a:98:cc:ec:5a:5d:dd:d4:04:26:db:fc:01:0f: a1:ee:1e:45:0d:f8:b3:ed:34:8b:dc:dc:de:c6:9d:99:2d:90: 50:01:1e:1d:43:d3:f6:55:7f:e4:41:2a:8f:fb:71:d2:31:8f: 60:89:10:a7:71:d2:3b:4e:ab:06:5f:29:b4:b5:25:2b:d0:39: 05:22:ae:75:20:9c:25:ff:1d:09:f6:35:ea:db:88:3e:a2:9b: d9:98:66:26 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUTt2HS8XylUkAI5/RtX7u/ULd2kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU2MTdaFw0yNzA0MjMwNzAxMTdaMDMxMTAvBgNV BAMTKDcwODNEQzdEMzQ3MDA5N0FBNTIxNjlBMjA5MzJBMTZDQjlDNDRERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGfenaQty4aeK6Kex6HcaYVuY FlheX6EofVHFIWx51O1F5uxOzPB5lFFycScDdzDLVMcIMoZy0glkaD21BiJO0IUW mTPPNORIVHZDAI90y7y96ZKIG+hGoUXjCvHz5e4Foa7AdexFhLVkJiC4rhWMSzcE ker5Kf5l+7SEuXLawynlrO4Y720JaKVKQ2Ao19NK03ai0SgnPRmg95p67Zg7uurX 3Fd1zbyyjNbfJJsIE7BgC2aFr3ZlX/H4N6xILoEQJsevlwEyxBQZELxrb9o9gVJz nsM7DmU476Eh1/vSPaSn6qJud7cWzqJbEsQMSYT6PMHOqYEDcUPO6NsaPHxhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUcIPcfTRwCXqlIWmiCTKhbLnETdcwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcvjANBgkqhkiG9w0BAQsFAAOCAQEAsgisbaHy8CYO1XQGnqx6 mVbULjpA9maW85REzu5gP9PnllyzPWmUmjfT199qirBOHKcnghgTy7dLfY9WhUMr Zv7lZvi6A8+2JQDosBHWLiWMV7Bb4FtypKUujfJB/xGKGlFM+jxN0mBFNxMB8x2K z+QF5jKUT5YROQ0x3P+h48xnJBcrikufc0ZnSyTES3Xr73imS+jhH4mkbrc59fuc l6Gcfm1eq1qYzOxaXd3UBCbb/AEPoe4eRQ34s+00i9zc3sadmS2QUAEeHUPT9lV/ 5EEqj/tx0jGPYIkQp3HSO06rBl8ptLUlK9A5BSKudSCcJf8dCfY16tuIPqKb2Zhm Jg== -----END CERTIFICATE-----Generated at Wed May 13 13:57:55 2026 by rpki-client