$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3230342e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3230342e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: QX+I+lyWtOJph3wC3f7kP+X9YJcTWpqmn+HO6h/pIpA= Subject key identifier: 3B:85:69:49:25:09:3E:F5:76:15:BA:AE:28:0F:77:6B:59:65:51:92 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 1042CB57CE0E67EFE7308CF1644204E9D73D400D Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3230342e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:36 +0000 ROA not before: Fri 24 Apr 2026 07:00:36 +0000 ROA not after: Fri 23 Apr 2027 07:05:36 +0000 asID: 38019 IP address blocks: 139.220.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:42:cb:57:ce:0e:67:ef:e7:30:8c:f1:64:42:04:e9:d7:3d:40:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:36 2026 GMT Not After : Apr 23 07:05:36 2027 GMT Subject: CN=3B85694925093EF57615BAAE280F776B59655192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:22:77:69:b5:33:ac:7e:ed:25:3e:83:f6: 19:d2:2a:68:bc:d2:d1:0e:31:d9:c8:0a:87:96:d6: 74:7f:ef:c1:21:f9:7c:c1:1f:ff:f5:13:6b:21:63: 39:fa:98:93:68:51:29:ae:04:5a:65:96:1e:a8:73: 77:b4:96:4c:47:88:61:3f:f2:02:7f:26:b2:ea:cc: 10:2a:e3:01:e1:1b:34:22:a0:ec:7f:c9:46:0e:0c: 44:ac:fb:fa:66:27:dc:66:a4:20:44:76:b0:b6:72: da:46:fc:66:87:5d:25:9f:27:cd:b4:4f:25:28:52: e4:ee:26:ff:b5:5f:63:25:b7:e9:d5:09:24:b5:d1: 87:f0:ef:1e:d2:a8:87:b4:15:47:bd:fa:cc:ca:59: af:fc:39:5c:cd:62:21:be:37:d0:28:1d:02:cb:0a: 2a:cc:de:6d:3a:43:7e:08:77:29:c3:81:7b:b7:93: c5:10:8f:fb:3c:88:af:7f:06:ae:38:46:35:aa:54: 15:20:a5:9c:57:e0:10:1a:d7:bf:8c:8d:0a:44:61: f5:9f:69:d9:ce:7a:82:a9:7d:10:d7:88:83:0f:fa: 0a:ab:eb:f5:cc:53:f9:33:6e:21:8b:4a:d7:40:0e: 93:57:16:46:30:2b:71:3f:82:ca:08:c7:fb:8d:36: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:85:69:49:25:09:3E:F5:76:15:BA:AE:28:0F:77:6B:59:65:51:92 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3230342e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.204.0/23 Signature Algorithm: sha256WithRSAEncryption 84:09:aa:85:1c:8e:ef:4e:a6:05:8a:3c:b2:51:1a:0e:2d:2f: 83:a1:81:19:f4:37:d7:8e:7b:b9:43:fe:d7:95:44:94:ed:91: 47:13:9c:3f:67:1f:99:41:dd:e4:c5:00:a2:a8:51:66:cb:6b: 92:7d:62:f1:48:b6:ac:57:50:1e:84:96:8b:00:a5:2c:12:dc: c4:20:d7:af:81:78:05:55:72:3a:34:3d:92:25:08:36:e4:75: bd:06:da:ba:f7:94:9a:13:3e:62:c4:b9:c8:1c:0b:05:d6:42: ae:8e:ec:53:fb:db:02:3f:c3:38:44:c1:ea:86:dd:ef:b0:26: bc:2f:d0:08:b2:2c:26:66:2c:1f:11:85:f2:b3:34:d2:fb:65: 1b:77:03:a7:36:ce:e3:1a:67:15:52:1c:04:e8:e3:50:ba:85: 64:39:63:d0:75:fe:ab:66:e7:f9:c8:36:1e:ab:6f:a9:28:7f: 19:c6:be:f3:8e:f7:28:05:c6:c0:a5:51:88:fb:71:09:77:ae: d0:be:6c:99:eb:d2:bb:d1:3f:d7:be:d1:79:21:19:a4:84:f4: f7:94:95:ef:52:0b:4e:e1:01:ff:f0:f4:12:e6:d2:b0:52:26: 60:af:0e:2c:5b:8c:7b:44:44:a2:cd:01:97:4a:e1:16:61:0d: 34:da:99:a8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEELLV84OZ+/nMIzxZEIE6dc9QA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV BAMTKDNCODU2OTQ5MjUwOTNFRjU3NjE1QkFBRTI4MEY3NzZCNTk2NTUxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSSJ3abUzrH7tJT6D9hnSKmi8 0tEOMdnICoeW1nR/78Eh+XzBH//1E2shYzn6mJNoUSmuBFpllh6oc3e0lkxHiGE/ 8gJ/JrLqzBAq4wHhGzQioOx/yUYODESs+/pmJ9xmpCBEdrC2ctpG/GaHXSWfJ820 TyUoUuTuJv+1X2Mlt+nVCSS10Yfw7x7SqIe0FUe9+szKWa/8OVzNYiG+N9AoHQLL CirM3m06Q34IdynDgXu3k8UQj/s8iK9/Bq44RjWqVBUgpZxX4BAa17+MjQpEYfWf adnOeoKpfRDXiIMP+gqr6/XMU/kzbiGLStdADpNXFkYwK3E/gsoIx/uNNjdpAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUO4VpSSUJPvV2FbquKA93a1llUZIwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvczDANBgkqhkiG9w0BAQsFAAOCAQEAhAmqhRyO706mBYo8slEa Di0vg6GBGfQ31457uUP+15VElO2RRxOcP2cfmUHd5MUAoqhRZstrkn1i8Ui2rFdQ HoSWiwClLBLcxCDXr4F4BVVyOjQ9kiUINuR1vQbauveUmhM+YsS5yBwLBdZCro7s U/vbAj/DOETB6obd77AmvC/QCLIsJmYsHxGF8rM00vtlG3cDpzbO4xpnFVIcBOjj ULqFZDlj0HX+q2bn+cg2HqtvqSh/Gca+8473KAXGwKVRiPtxCXeu0L5smevSu9E/ 177ReSEZpIT095SV71ILTuEB//D0EubSsFImYK8OLFuMe0REos0Bl0rhFmENNNqZ qA== -----END CERTIFICATE-----Generated at Wed May 13 12:27:05 2026 by rpki-client