$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3230322e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3230322e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: 6fBslta2WjicUI9oVmWNcGybDB9jgsHY6aTQm5oVs5g= Subject key identifier: 06:A4:4A:ED:95:C1:2A:BC:0E:F5:AE:5D:C2:B7:93:96:66:85:2B:63 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 610465BD117C9E24C6995C162E274AA03E7871F4 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3230322e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:36 +0000 ROA not before: Fri 24 Apr 2026 07:00:36 +0000 ROA not after: Fri 23 Apr 2027 07:05:36 +0000 asID: 38019 IP address blocks: 139.220.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:04:65:bd:11:7c:9e:24:c6:99:5c:16:2e:27:4a:a0:3e:78:71:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:36 2026 GMT Not After : Apr 23 07:05:36 2027 GMT Subject: CN=06A44AED95C12ABC0EF5AE5DC2B7939666852B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:48:79:d9:0a:23:73:b2:c1:e2:3b:0a:7d: a4:bd:2c:a8:59:64:02:1f:c0:46:06:c4:0d:32:10: 92:8a:b6:22:d5:f5:44:e9:f8:6c:bf:75:ca:fe:85: 8e:b2:f4:16:ad:43:de:ae:e8:6f:16:68:82:5a:b2: 62:a1:5e:e8:be:a2:a8:a1:4f:04:d1:b5:b7:bc:74: 8b:32:c8:b5:c0:a1:0d:af:58:f9:8f:cb:db:cc:7a: d3:ef:5d:df:9a:24:88:24:0f:c3:71:1c:28:3b:87: fe:0e:5c:af:6b:d3:c8:ed:98:6a:be:09:cd:9c:4c: e7:8f:a3:11:70:df:43:fb:9d:01:fb:80:63:c8:07: 5c:2a:d3:4f:ea:cd:01:4d:0f:5b:58:43:08:18:c0: 5e:ba:f0:48:3e:b8:98:b9:62:77:aa:03:77:3f:fe: df:2e:14:a6:6f:78:05:dc:e6:54:c2:af:2b:be:d8: 00:91:18:14:1b:f3:87:07:c5:9b:b5:ea:b2:38:b7: 73:2d:49:42:33:19:37:ae:05:e7:d9:3f:01:aa:99: 9d:b9:ee:a4:1c:81:43:9c:33:39:30:54:2d:f8:67: 5a:53:aa:65:97:54:4a:29:86:50:41:f4:81:2f:ac: 7f:e8:93:ac:48:97:32:d7:b7:be:02:c6:be:f6:87: eb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A4:4A:ED:95:C1:2A:BC:0E:F5:AE:5D:C2:B7:93:96:66:85:2B:63 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3230322e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.202.0/23 Signature Algorithm: sha256WithRSAEncryption 70:fb:f1:af:60:e8:75:ff:64:46:af:c6:c3:6f:98:ff:40:9d: ca:c9:c9:54:43:db:69:8f:7d:d5:b5:5b:96:2c:bb:4d:a2:4d: d0:9c:c4:fd:92:db:d5:87:73:07:0c:bc:e6:8f:dc:9d:04:2b: b0:83:61:11:a0:33:c5:55:71:d4:dd:59:49:ba:84:c6:bb:99: 8b:0d:8b:af:1c:dd:4e:54:43:6c:9b:73:11:10:4f:22:b6:f9: 0c:fc:e7:eb:b1:28:a0:73:4f:6c:4e:c0:cc:ea:e2:b6:23:45: 26:0b:e0:92:55:eb:4d:96:0b:f0:21:58:c0:01:8b:1f:89:32: c2:00:fd:e2:0e:e1:a1:45:9e:5c:a0:47:02:bf:91:57:21:fa: b1:fe:e8:d9:eb:40:67:74:b7:60:19:69:08:87:31:37:2f:92: 69:ce:0a:f6:b4:9c:bd:0a:55:91:c3:58:32:a5:45:40:87:30: 8d:cc:ef:83:ef:d3:06:a4:99:9e:3a:c8:ca:4b:34:45:6a:2b: 39:52:bf:a0:7d:11:05:1e:83:70:30:b6:85:25:f2:d6:78:45: 20:83:81:19:9a:88:ed:51:b1:ba:1a:02:53:25:46:83:e5:cc: 19:76:49:c0:91:ad:4d:f3:66:2d:aa:ba:e7:6e:3d:a5:ed:19: a9:6d:80:87 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYQRlvRF8niTGmVwWLidKoD54cfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV BAMTKDA2QTQ0QUVEOTVDMTJBQkMwRUY1QUU1REMyQjc5Mzk2NjY4NTJCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3g0h52Qojc7LB4jsKfaS9LKhZ ZAIfwEYGxA0yEJKKtiLV9UTp+Gy/dcr+hY6y9BatQ96u6G8WaIJasmKhXui+oqih TwTRtbe8dIsyyLXAoQ2vWPmPy9vMetPvXd+aJIgkD8NxHCg7h/4OXK9r08jtmGq+ Cc2cTOePoxFw30P7nQH7gGPIB1wq00/qzQFND1tYQwgYwF668Eg+uJi5YneqA3c/ /t8uFKZveAXc5lTCryu+2ACRGBQb84cHxZu16rI4t3MtSUIzGTeuBefZPwGqmZ25 7qQcgUOcMzkwVC34Z1pTqmWXVEophlBB9IEvrH/ok6xIlzLXt74Cxr72h+s7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBqRK7ZXBKrwO9a5dwreTlmaFK2MwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcyjANBgkqhkiG9w0BAQsFAAOCAQEAcPvxr2Dodf9kRq/Gw2+Y /0CdysnJVEPbaY991bVbliy7TaJN0JzE/ZLb1YdzBwy85o/cnQQrsINhEaAzxVVx 1N1ZSbqExruZiw2LrxzdTlRDbJtzERBPIrb5DPzn67EooHNPbE7AzOritiNFJgvg klXrTZYL8CFYwAGLH4kywgD94g7hoUWeXKBHAr+RVyH6sf7o2etAZ3S3YBlpCIcx Ny+Sac4K9rScvQpVkcNYMqVFQIcwjczvg+/TBqSZnjrIyks0RWorOVK/oH0RBR6D cDC2hSXy1nhFIIOBGZqI7VGxuhoCUyVGg+XMGXZJwJGtTfNmLaq65249pe0ZqW2A hw== -----END CERTIFICATE-----Generated at Wed May 13 14:10:40 2026 by rpki-client