$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139362e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3139362e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: o3XWfBVWhryPcRjm979Y2aMJGSmcI3A+RfCuqJkx4WY= Subject key identifier: 2A:6A:C3:DF:70:9A:33:1B:C9:56:9A:5D:AB:C4:AE:68:AA:71:34:BF Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 12700C4EC0E8DFD0FCE80A6F0BBB8323EA66BFF8 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139362e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:03:33 +0000 ROA not before: Fri 24 Apr 2026 06:58:33 +0000 ROA not after: Fri 23 Apr 2027 07:03:33 +0000 asID: 38019 IP address blocks: 139.220.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:70:0c:4e:c0:e8:df:d0:fc:e8:0a:6f:0b:bb:83:23:ea:66:bf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:58:33 2026 GMT Not After : Apr 23 07:03:33 2027 GMT Subject: CN=2A6AC3DF709A331BC9569A5DABC4AE68AA7134BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:e7:d7:53:4c:54:f6:29:6f:44:59:27:c0: 79:60:49:43:89:5c:11:4b:5a:37:43:46:a0:b5:47: ba:05:ff:f0:58:bd:ec:0b:f3:b4:c8:0c:ed:19:9d: ff:1c:1b:9a:29:46:f7:8b:07:dd:fc:dc:22:2b:44: 39:4d:08:5b:69:d3:30:79:d0:54:e5:6d:eb:0d:4b: c0:4c:20:3c:44:26:3a:80:21:70:62:e6:b7:c5:2e: ed:1a:e0:b5:5f:f1:41:54:ef:43:dc:d7:ab:68:43: bc:b4:4f:69:ed:61:32:ed:b0:ae:3a:b4:13:06:d1: 5a:1f:1b:28:55:ce:f8:d8:1d:ad:e6:4f:d9:dd:0f: 87:22:8e:49:9d:73:2b:a2:26:e1:7b:97:4e:8e:07: 6d:4e:5b:ec:f4:10:94:d8:4a:fb:7d:d6:6a:47:8d: 6b:e0:e4:0f:aa:19:c0:34:3d:84:a0:f1:c8:57:17: fd:d7:73:ae:c6:5f:1d:2e:06:bc:69:f4:39:91:68: cc:ff:d9:78:dd:2b:33:51:56:a7:bf:ca:92:6e:46: 3a:a5:b3:62:81:37:c4:31:bd:0f:11:3a:04:70:0c: b4:e9:72:3d:3d:93:ea:e8:0c:97:18:cd:b3:9d:c1: 7a:22:d0:00:86:8b:30:ca:8c:92:3b:92:f8:68:81: 3f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:C3:DF:70:9A:33:1B:C9:56:9A:5D:AB:C4:AE:68:AA:71:34:BF X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139362e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.196.0/23 Signature Algorithm: sha256WithRSAEncryption ba:50:50:1e:f9:95:7f:08:38:27:30:80:16:21:58:03:a3:c4: fc:b8:00:0d:86:ce:8c:bb:45:96:6a:25:3b:10:1c:fa:74:51: 08:69:30:e5:6e:f3:9e:ac:34:d9:6f:3c:27:c5:46:77:68:b3: 59:1f:b7:b5:22:1c:83:67:a0:ce:f9:34:1e:c7:b6:77:e7:db: 82:2c:22:48:c2:19:be:4d:62:26:5d:48:57:c8:8e:d7:b4:40: ec:f1:e3:7f:bb:81:b4:ea:ef:c3:0a:c6:4d:70:ab:fb:4c:9e: c0:22:28:e6:8c:7c:73:fe:5d:f8:ff:fa:27:f0:00:3b:87:4a: 4f:1f:d8:dd:ff:10:e8:db:8a:d9:a0:20:af:cf:94:2c:ea:a7: 26:9d:34:2b:5b:96:96:ed:e2:83:18:5d:84:b5:65:22:a8:22: 7e:80:8f:be:a6:c1:51:50:85:6d:13:e2:9f:85:94:e3:55:ea: 70:e0:9c:7d:8e:5a:3b:12:d4:c8:82:05:ad:de:4f:d3:f7:8f: 1d:cb:e4:b8:57:3d:78:43:9c:2d:94:f0:08:f1:c6:88:a0:51: e9:89:94:09:ce:f3:9f:61:6d:fd:25:ab:c5:70:3c:28:cf:86: 34:6c:12:82:10:83:a9:64:de:27:7e:c9:35:15:94:4a:d6:ee: 5d:4b:f1:a0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEnAMTsDo39D86ApvC7uDI+pmv/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU4MzNaFw0yNzA0MjMwNzAzMzNaMDMxMTAvBgNV BAMTKDJBNkFDM0RGNzA5QTMzMUJDOTU2OUE1REFCQzRBRTY4QUE3MTM0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiufXU0xU9ilvRFknwHlgSUOJ XBFLWjdDRqC1R7oF//BYvewL87TIDO0Znf8cG5opRveLB9383CIrRDlNCFtp0zB5 0FTlbesNS8BMIDxEJjqAIXBi5rfFLu0a4LVf8UFU70Pc16toQ7y0T2ntYTLtsK46 tBMG0VofGyhVzvjYHa3mT9ndD4cijkmdcyuiJuF7l06OB21OW+z0EJTYSvt91mpH jWvg5A+qGcA0PYSg8chXF/3Xc67GXx0uBrxp9DmRaMz/2XjdKzNRVqe/ypJuRjql s2KBN8QxvQ8ROgRwDLTpcj09k+roDJcYzbOdwXoi0ACGizDKjJI7kvhogT8xAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUKmrD33CaMxvJVppdq8SuaKpxNL8wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzOTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcxDANBgkqhkiG9w0BAQsFAAOCAQEAulBQHvmVfwg4JzCAFiFY A6PE/LgADYbOjLtFlmolOxAc+nRRCGkw5W7znqw02W88J8VGd2izWR+3tSIcg2eg zvk0Hse2d+fbgiwiSMIZvk1iJl1IV8iO17RA7PHjf7uBtOrvwwrGTXCr+0yewCIo 5ox8c/5d+P/6J/AAO4dKTx/Y3f8Q6NuK2aAgr8+ULOqnJp00K1uWlu3igxhdhLVl IqgifoCPvqbBUVCFbRPin4WU41XqcOCcfY5aOxLUyIIFrd5P0/ePHcvkuFc9eEOc LZTwCPHGiKBR6YmUCc7zn2Ft/SWrxXA8KM+GNGwSghCDqWTeJ37JNRWUStbuXUvx oA== -----END CERTIFICATE-----Generated at Wed May 13 14:10:52 2026 by rpki-client