$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231382e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3231382e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: uwENUy342bMcqMZ1pA6XnaPSldqr6xyR2qJm9vyDvnI= Subject key identifier: 38:F1:87:B1:74:C4:A1:6F:21:DE:D5:3C:76:44:D3:B3:06:1B:8B:7A Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 3415663E4F95F3627A1BCCA2B9688B0ED024D5DB Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231382e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:36 +0000 ROA not before: Fri 24 Apr 2026 07:00:36 +0000 ROA not after: Fri 23 Apr 2027 07:05:36 +0000 asID: 38019 IP address blocks: 139.220.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:15:66:3e:4f:95:f3:62:7a:1b:cc:a2:b9:68:8b:0e:d0:24:d5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:36 2026 GMT Not After : Apr 23 07:05:36 2027 GMT Subject: CN=38F187B174C4A16F21DED53C7644D3B3061B8B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:98:65:0d:1e:69:f4:46:fe:49:20:74:61: fc:0c:2c:bf:dc:22:f6:52:55:33:b8:13:5b:ff:f1: 54:15:b0:73:b3:08:c2:b8:e3:20:bb:40:9f:ed:4a: b5:41:14:c0:94:7f:0e:ce:c5:a9:b2:99:c4:5e:d0: 66:9d:95:b2:8f:51:8e:11:8c:dc:a2:1b:00:3e:d0: c3:fd:c4:31:c4:ec:39:ff:ad:b9:07:0d:61:2b:08: 39:b8:f2:f7:58:c9:ca:f2:5e:66:aa:fc:9e:20:78: 9f:6c:b0:07:22:5d:c3:36:0c:7a:c7:1e:5d:32:f6: 06:ce:1b:f7:a3:e9:21:c3:dc:1e:3e:4c:9e:6d:47: 38:95:dc:76:90:58:7a:b6:8d:3e:b1:1f:9a:a3:79: 94:e4:02:7e:66:f8:12:33:a6:c9:90:b5:a1:3d:a5: 76:47:c3:e7:5f:45:85:49:d0:b7:1f:2c:00:a0:5b: 1e:c5:f9:f8:ae:cf:67:18:d1:d9:9d:68:55:15:6b: 81:40:73:b1:79:83:30:0a:61:89:75:31:ad:87:ed: 0f:50:c5:f4:38:da:25:b2:6c:e7:31:04:1e:77:2f: 66:ac:b2:1f:a5:18:05:8d:d5:8c:ef:f9:77:a8:c1: 33:0b:b9:82:37:bf:5d:a0:b5:cb:33:34:d0:eb:d5: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F1:87:B1:74:C4:A1:6F:21:DE:D5:3C:76:44:D3:B3:06:1B:8B:7A X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3231382e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.218.0/23 Signature Algorithm: sha256WithRSAEncryption 33:37:ce:e5:a2:35:f3:d3:5f:50:59:a2:df:66:ca:23:d5:04: 0f:ba:78:c3:fe:ee:d5:72:ad:2a:04:6b:15:08:e9:a2:fe:e9: f8:d3:2e:c5:e1:7f:2f:90:a3:b8:e6:9c:43:fb:6f:b4:d8:59: e6:a4:a1:60:f9:9c:36:54:71:73:5b:23:c7:7a:4c:2a:4b:f3: 09:f7:d9:97:e7:6a:8f:14:34:12:71:16:e1:33:4e:0b:79:d6: a1:89:17:2e:e7:57:54:e1:b0:f5:5e:df:ae:2a:63:d1:40:aa: 8a:99:f7:2f:e5:e5:8a:67:4d:20:aa:71:72:ab:d6:93:44:82: 75:7b:f4:7f:4b:9a:89:ea:ae:01:44:c8:7f:51:c1:09:b6:75: 0b:ea:ac:34:e4:86:98:ff:35:66:27:98:8b:6f:6f:ad:76:a1: 61:39:47:77:b5:33:94:65:ba:10:3f:65:4e:c4:d5:d8:2e:5a: a0:98:f0:e7:45:51:ce:85:d1:ca:20:8b:59:64:a8:1e:59:43: a2:fd:d4:46:18:f0:04:32:30:98:f8:a7:0d:c4:e2:b3:fb:15: b2:81:84:02:05:fd:7f:8c:2a:cd:1e:63:10:f1:1b:37:18:bd: 41:e9:a2:f5:26:5f:56:da:a0:d8:e8:fc:7e:8a:33:f5:f8:23: 37:90:7b:47 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNBVmPk+V82J6G8yiuWiLDtAk1dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV BAMTKDM4RjE4N0IxNzRDNEExNkYyMURFRDUzQzc2NDREM0IzMDYxQjhCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoJhlDR5p9Eb+SSB0YfwMLL/c IvZSVTO4E1v/8VQVsHOzCMK44yC7QJ/tSrVBFMCUfw7OxamymcRe0GadlbKPUY4R jNyiGwA+0MP9xDHE7Dn/rbkHDWErCDm48vdYycryXmaq/J4geJ9ssAciXcM2DHrH Hl0y9gbOG/ej6SHD3B4+TJ5tRziV3HaQWHq2jT6xH5qjeZTkAn5m+BIzpsmQtaE9 pXZHw+dfRYVJ0LcfLACgWx7F+fiuz2cY0dmdaFUVa4FAc7F5gzAKYYl1Ma2H7Q9Q xfQ42iWybOcxBB53L2assh+lGAWN1Yzv+XeowTMLuYI3v12gtcszNNDr1ThZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUOPGHsXTEoW8h3tU8dkTTswYbi3owHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc2jANBgkqhkiG9w0BAQsFAAOCAQEAMzfO5aI189NfUFmi32bK I9UED7p4w/7u1XKtKgRrFQjpov7p+NMuxeF/L5CjuOacQ/tvtNhZ5qShYPmcNlRx c1sjx3pMKkvzCffZl+dqjxQ0EnEW4TNOC3nWoYkXLudXVOGw9V7fripj0UCqipn3 L+XlimdNIKpxcqvWk0SCdXv0f0uaiequAUTIf1HBCbZ1C+qsNOSGmP81ZieYi29v rXahYTlHd7UzlGW6ED9lTsTV2C5aoJjw50VRzoXRyiCLWWSoHllDov3URhjwBDIw mPinDcTis/sVsoGEAgX9f4wqzR5jEPEbNxi9Qemi9SZfVtqg2Oj8fooz9fgjN5B7 Rw== -----END CERTIFICATE-----Generated at Wed May 13 14:53:46 2026 by rpki-client