$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231302e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3231302e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: yJJwVfIOplOp4mqFkMZYvFLzlpnH0PIAONDaJhXKDLI= Subject key identifier: 64:11:D4:0C:22:29:42:C7:EC:DA:0F:81:5B:47:C0:E5:D5:C4:E1:67 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 6444194333A1AD06D243C4DF5BCB7D6610E65128 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231302e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:03:33 +0000 ROA not before: Fri 24 Apr 2026 06:58:33 +0000 ROA not after: Fri 23 Apr 2027 07:03:33 +0000 asID: 38019 IP address blocks: 139.220.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:44:19:43:33:a1:ad:06:d2:43:c4:df:5b:cb:7d:66:10:e6:51:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 06:58:33 2026 GMT Not After : Apr 23 07:03:33 2027 GMT Subject: CN=6411D40C222942C7ECDA0F815B47C0E5D5C4E167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:90:a9:8a:6b:cc:0c:11:46:a1:af:59:76: d6:8a:6b:45:54:46:07:a4:81:d4:80:3c:38:20:9f: 23:d4:0c:c7:1f:51:50:5b:d3:05:5b:66:35:f3:e7: 1d:a5:0f:13:b8:de:6e:aa:82:61:f8:3c:a1:dd:7a: fb:1c:ee:0d:e2:58:c0:39:86:d9:36:22:cb:a5:d5: c8:ba:94:ea:1b:97:fb:b1:db:04:bd:8e:61:ad:d9: 4d:8f:1d:92:e7:ec:08:d5:56:fb:22:81:1c:d2:f9: 33:38:81:52:4e:3c:36:db:ed:f4:35:bb:ee:d6:33: f8:8c:42:84:1c:5a:c1:3f:f7:12:84:fe:36:cf:d7: a6:5e:11:2d:52:f6:d2:ca:d4:00:ce:63:26:99:83: cc:39:7f:a8:c2:9f:83:fe:ea:3b:60:1e:0b:01:62: ec:41:02:29:36:65:12:7b:8b:60:25:9c:54:db:37: 83:58:86:9c:29:cc:02:d5:ea:ff:c2:36:58:0e:7a: 93:ee:72:a6:99:83:31:43:88:a4:83:59:f7:87:a5: a1:83:56:86:0f:ff:63:e9:54:44:ca:a3:f9:bf:3a: 1f:9f:2e:e1:71:b7:61:cd:72:e3:a0:a2:d2:27:0c: 54:8a:56:81:32:09:02:1d:01:0d:4f:d9:79:41:d4: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:11:D4:0C:22:29:42:C7:EC:DA:0F:81:5B:47:C0:E5:D5:C4:E1:67 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231302e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.210.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:1e:08:46:ad:25:4a:bf:3f:d8:79:15:84:8e:a9:54:36:c3: 9e:95:c1:6e:05:a5:8d:7d:18:75:d7:21:65:80:47:45:e7:f6: 3d:cd:67:e4:d4:12:cf:1e:0e:78:cf:d2:f5:77:b7:af:1e:28: b1:a1:56:a0:19:0d:f2:2a:7b:40:82:f7:0f:0b:7c:3d:4a:fc: fd:63:bf:11:64:ef:f3:82:8c:d8:d2:9f:2c:51:86:84:01:0e: 13:46:9d:2c:bd:f4:50:15:fd:11:24:ba:5a:0a:dc:36:fe:86: 6c:28:e9:7b:18:58:b6:30:7c:3f:66:e5:75:9e:cf:a1:44:cb: a3:71:45:f6:3c:ed:23:05:81:25:93:3b:36:aa:12:19:f4:bc: 49:4e:9d:d3:6d:55:46:21:18:61:24:aa:94:16:27:b0:50:bd: 40:85:22:28:3c:0a:1f:b4:39:ae:5d:90:41:05:a7:66:29:c1: cf:b2:9a:bc:a9:e3:84:26:7b:31:f8:00:fa:43:7c:2f:fb:75: 70:68:ad:e2:0f:4a:11:ef:af:7d:66:d4:26:12:a9:57:70:81: ed:f5:96:43:3d:a2:4f:99:b6:e8:e7:65:bb:be:23:e0:07:5c: 82:ea:f0:14:84:a3:bf:17:ba:24:e0:38:0a:a2:40:e9:b6:b1: 4f:f1:0e:44 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZEQZQzOhrQbSQ8TfW8t9ZhDmUSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNjU4MzNaFw0yNzA0MjMwNzAzMzNaMDMxMTAvBgNV BAMTKDY0MTFENDBDMjIyOTQyQzdFQ0RBMEY4MTVCNDdDMEU1RDVDNEUxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsZJCpimvMDBFGoa9ZdtaKa0VU RgekgdSAPDggnyPUDMcfUVBb0wVbZjXz5x2lDxO43m6qgmH4PKHdevsc7g3iWMA5 htk2Isul1ci6lOobl/ux2wS9jmGt2U2PHZLn7AjVVvsigRzS+TM4gVJOPDbb7fQ1 u+7WM/iMQoQcWsE/9xKE/jbP16ZeES1S9tLK1ADOYyaZg8w5f6jCn4P+6jtgHgsB YuxBAik2ZRJ7i2AlnFTbN4NYhpwpzALV6v/CNlgOepPucqaZgzFDiKSDWfeHpaGD VoYP/2PpVETKo/m/Oh+fLuFxt2HNcuOgotInDFSKVoEyCQIdAQ1P2XlB1KfXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUZBHUDCIpQsfs2g+BW0fA5dXE4WcwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc0jANBgkqhkiG9w0BAQsFAAOCAQEADB4IRq0lSr8/2HkVhI6p VDbDnpXBbgWljX0YddchZYBHRef2Pc1n5NQSzx4OeM/S9Xe3rx4osaFWoBkN8ip7 QIL3Dwt8PUr8/WO/EWTv84KM2NKfLFGGhAEOE0adLL30UBX9ESS6WgrcNv6GbCjp exhYtjB8P2bldZ7PoUTLo3FF9jztIwWBJZM7NqoSGfS8SU6d021VRiEYYSSqlBYn sFC9QIUiKDwKH7Q5rl2QQQWnZinBz7KavKnjhCZ7MfgA+kN8L/t1cGit4g9KEe+v fWbUJhKpV3CB7fWWQz2iT5m26Odlu74j4AdcgurwFISjvxe6JOA4CqJA6baxT/EO RA== -----END CERTIFICATE-----Generated at Wed May 13 12:43:22 2026 by rpki-client