$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232342e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3232342e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: 3nk9SZSU+P/gJ6xo52jhCsen+iVsubJIdkcuZG0MH3g= Subject key identifier: 0B:44:1F:F0:ED:9B:9E:C0:0E:71:D2:DE:68:D5:4E:77:1F:B9:EB:E6 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 1265B315A060510333F640D977F7CDF60B9ACA00 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232342e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:36 +0000 ROA not before: Fri 24 Apr 2026 07:00:36 +0000 ROA not after: Fri 23 Apr 2027 07:05:36 +0000 asID: 38019 IP address blocks: 139.220.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:65:b3:15:a0:60:51:03:33:f6:40:d9:77:f7:cd:f6:0b:9a:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:36 2026 GMT Not After : Apr 23 07:05:36 2027 GMT Subject: CN=0B441FF0ED9B9EC00E71D2DE68D54E771FB9EBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:02:48:13:65:64:25:62:7c:ad:cb:8a:01: 0b:41:c7:4d:98:36:cb:81:0a:1b:07:60:0c:09:63: 66:21:f7:8f:d5:79:d3:15:c1:4a:8f:cf:1c:e2:4a: 79:b6:b0:01:51:77:1c:22:a9:fd:22:1f:22:03:8d: 7b:43:6b:cd:7a:8a:db:49:ee:53:b5:43:20:90:89: b3:33:ef:81:5d:e5:ce:7b:c3:c0:dd:dd:82:9c:ce: 0e:e5:ff:5e:92:0f:5c:d8:80:07:74:85:1d:5f:39: ed:98:63:01:0d:4a:63:d3:e1:88:54:66:f7:a6:00: 8c:37:5c:08:16:db:03:ba:5b:38:74:e0:7b:11:47: 59:13:01:c4:76:dd:a4:cd:8a:c7:94:be:bb:68:ef: ee:df:3f:b1:36:91:b0:b0:c9:c3:b8:2b:15:e4:51: 86:26:8b:d5:45:16:56:61:20:4b:68:49:a8:25:0f: eb:0e:bd:f2:ea:ab:ef:bb:73:52:60:8d:84:0d:35: 42:4f:16:46:84:52:21:bc:97:34:d8:e4:90:a2:79: d1:5c:ec:84:da:82:40:54:41:a4:c7:84:4d:f1:9f: b1:86:fc:b5:dd:ca:7b:ef:5d:e4:1c:1e:23:61:9f: 82:9f:36:c5:69:8c:8e:21:57:cd:2f:25:66:0f:a9: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:44:1F:F0:ED:9B:9E:C0:0E:71:D2:DE:68:D5:4E:77:1F:B9:EB:E6 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232342e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.224.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:ea:77:58:e6:c6:5c:79:68:36:bc:8a:06:00:b7:de:1f:35: 74:32:14:90:34:dc:3b:ec:03:d0:ec:ef:f6:4c:47:1d:4f:a8: e8:67:72:e2:d2:70:42:2d:ac:d1:75:e0:19:a5:c2:15:1a:cd: 87:01:ba:c3:cc:6f:fe:9f:3a:53:f1:91:d5:a7:40:23:4a:68: 31:7c:d0:91:1c:46:c8:7f:ab:c0:9d:0d:7c:b5:bc:6a:32:aa: e0:cb:c6:a6:3a:2a:c5:7a:fb:45:81:da:7b:49:98:33:1f:0f: 6c:5b:ba:e5:68:d6:2e:26:4e:5d:36:05:8c:98:84:3c:ff:9e: 04:10:4c:aa:d8:e5:ce:d6:3f:05:36:7d:62:60:d3:85:7a:0f: 93:2f:88:c8:09:d8:8f:91:df:6c:6d:70:30:e0:f2:ec:2d:11: 0e:55:1d:fb:d9:c0:29:4a:68:ce:23:6c:45:ca:63:ee:98:75: 7d:b4:d4:00:51:76:e0:88:bd:4c:02:3e:aa:ed:03:0c:2e:e4: e9:1d:64:60:13:23:7b:f1:f3:21:58:49:35:2f:15:7a:21:e4: eb:18:62:24:69:4f:65:f9:dd:02:a2:4d:d7:1e:ce:d9:19:a2: cd:45:c1:f0:67:76:ca:da:b4:41:bd:12:57:99:59:55:85:16: ed:aa:71:df -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEmWzFaBgUQMz9kDZd/fN9guaygAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV BAMTKDBCNDQxRkYwRUQ5QjlFQzAwRTcxRDJERTY4RDU0RTc3MUZCOUVCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cwJIE2VkJWJ8rcuKAQtBx02Y NsuBChsHYAwJY2Yh94/VedMVwUqPzxziSnm2sAFRdxwiqf0iHyIDjXtDa816ittJ 7lO1QyCQibMz74Fd5c57w8Dd3YKczg7l/16SD1zYgAd0hR1fOe2YYwENSmPT4YhU ZvemAIw3XAgW2wO6Wzh04HsRR1kTAcR23aTNiseUvrto7+7fP7E2kbCwycO4KxXk UYYmi9VFFlZhIEtoSaglD+sOvfLqq++7c1JgjYQNNUJPFkaEUiG8lzTY5JCiedFc 7ITagkBUQaTHhE3xn7GG/LXdynvvXeQcHiNhn4KfNsVpjI4hV80vJWYPqY03AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUC0Qf8O2bnsAOcdLeaNVOdx+56+YwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc4DANBgkqhkiG9w0BAQsFAAOCAQEAnep3WObGXHloNryKBgC3 3h81dDIUkDTcO+wD0Ozv9kxHHU+o6Gdy4tJwQi2s0XXgGaXCFRrNhwG6w8xv/p86 U/GR1adAI0poMXzQkRxGyH+rwJ0NfLW8ajKq4MvGpjoqxXr7RYHae0mYMx8PbFu6 5WjWLiZOXTYFjJiEPP+eBBBMqtjlztY/BTZ9YmDThXoPky+IyAnYj5HfbG1wMODy 7C0RDlUd+9nAKUpoziNsRcpj7ph1fbTUAFF24Ii9TAI+qu0DDC7k6R1kYBMje/Hz IVhJNS8VeiHk6xhiJGlPZfndAqJN1x7O2RmizUXB8Gd2ytq0Qb0SV5lZVYUW7apx 3w== -----END CERTIFICATE-----Generated at Wed May 13 12:40:08 2026 by rpki-client