$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232362e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3232362e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: +STB17fHQIY90r9k+pPr8waHDjZlSaWviB7ff+k0ddk= Subject key identifier: 5A:A2:5F:6E:2A:2F:19:AD:F5:26:DB:C7:92:B4:DE:6C:69:48:8D:93 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 227F1D8E75B6A9C50EEA94ABD61D97F388E7D54B Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232362e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:36 +0000 ROA not before: Fri 24 Apr 2026 07:00:36 +0000 ROA not after: Fri 23 Apr 2027 07:05:36 +0000 asID: 38019 IP address blocks: 139.220.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7f:1d:8e:75:b6:a9:c5:0e:ea:94:ab:d6:1d:97:f3:88:e7:d5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:36 2026 GMT Not After : Apr 23 07:05:36 2027 GMT Subject: CN=5AA25F6E2A2F19ADF526DBC792B4DE6C69488D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:1b:55:19:47:7f:36:70:fe:1b:a8:31:22: 10:d6:2d:75:32:e2:3a:6b:d8:ac:ad:ac:18:99:b8: f8:e9:0d:b6:3e:76:5b:13:78:d6:d6:ea:25:86:3f: 2f:a8:56:f1:8c:fb:0c:e0:e0:5b:88:ae:84:26:14: e6:8f:09:49:3d:61:6b:5d:49:67:ca:8b:15:17:92: 39:34:9c:03:b0:ea:96:9a:13:58:ff:f9:ca:61:87: 99:46:c3:77:2a:f8:3b:0c:5b:d9:46:cb:72:d8:21: 20:34:5a:29:3c:ab:cb:ff:b5:9b:4b:44:7a:6a:14: 23:28:3f:dc:11:69:28:2d:c0:c6:3e:3e:bf:c8:8d: 21:15:85:1d:98:0e:f3:17:30:99:2e:94:01:b6:31: b6:f3:4c:c9:0d:9e:b5:75:f9:6c:c4:1b:b0:97:76: b9:34:79:14:e5:c5:a2:b8:97:2f:8b:69:2c:74:97: 1b:3e:84:52:d8:8e:92:a7:65:dc:50:fd:1c:72:7b: 4e:d5:b1:08:68:16:67:7e:b2:2d:9d:26:66:5c:89: b3:dd:76:1a:53:55:a8:d5:e1:94:0e:dd:e0:27:e7: df:9d:61:a8:38:32:42:64:2f:44:e9:e8:d9:75:ee: 9e:ab:50:b2:b5:a2:ba:a2:c9:31:48:94:20:b4:b3: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A2:5F:6E:2A:2F:19:AD:F5:26:DB:C7:92:B4:DE:6C:69:48:8D:93 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232362e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.226.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:ef:75:3f:d6:a5:0d:19:1d:66:3e:9c:ac:1b:fe:fa:cd:88: c0:92:24:1e:4f:70:f5:78:6c:d5:99:b5:e2:67:27:8b:bd:fb: 38:a5:1a:81:5a:b5:a8:5c:f2:82:a7:3d:65:46:67:db:28:c0: fb:a8:44:4a:83:93:76:3f:87:c5:10:ad:8b:29:5e:96:fe:c7: 6e:57:08:cb:97:b6:22:5c:7d:3f:f4:b8:98:21:34:43:43:7e: c8:6d:78:bb:69:99:11:66:41:f6:56:b8:f7:d9:f4:5d:49:2e: 5a:a9:28:ce:2b:e6:9d:5d:03:5e:97:fa:62:96:03:31:19:81: 80:88:f4:7f:43:a3:35:3a:72:49:9c:60:4d:03:7c:ee:9a:4b: 77:0a:db:e5:e7:b9:67:e4:1b:49:da:f7:24:da:77:af:d7:ed: 26:3d:ef:80:7b:c0:03:cb:76:d2:87:26:c8:f4:95:3c:e1:8e: af:6d:df:86:6a:ce:fc:6b:e4:2a:bf:bc:35:8d:5f:e2:e9:05: 39:c7:53:09:2d:c6:34:43:15:65:1b:15:28:cf:81:ad:cc:72: 0e:05:53:46:ae:60:cd:98:63:1a:df:2b:2c:96:7e:62:74:9e: 7a:2c:db:07:66:06:4d:33:cd:52:c6:7b:80:ac:84:f1:70:0e: d0:9b:2d:06 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIn8djnW2qcUO6pSr1h2X84jn1UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV BAMTKDVBQTI1RjZFMkEyRjE5QURGNTI2REJDNzkyQjRERTZDNjk0ODhEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfBtVGUd/NnD+G6gxIhDWLXUy 4jpr2KytrBiZuPjpDbY+dlsTeNbW6iWGPy+oVvGM+wzg4FuIroQmFOaPCUk9YWtd SWfKixUXkjk0nAOw6paaE1j/+cphh5lGw3cq+DsMW9lGy3LYISA0Wik8q8v/tZtL RHpqFCMoP9wRaSgtwMY+Pr/IjSEVhR2YDvMXMJkulAG2MbbzTMkNnrV1+WzEG7CX drk0eRTlxaK4ly+LaSx0lxs+hFLYjpKnZdxQ/Rxye07VsQhoFmd+si2dJmZcibPd dhpTVajV4ZQO3eAn59+dYag4MkJkL0Tp6Nl17p6rULK1orqiyTFIlCC0s5o3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUWqJfbiovGa31JtvHkrTebGlIjZMwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc4jANBgkqhkiG9w0BAQsFAAOCAQEAj+91P9alDRkdZj6crBv+ +s2IwJIkHk9w9Xhs1Zm14mcni737OKUagVq1qFzygqc9ZUZn2yjA+6hESoOTdj+H xRCtiylelv7HblcIy5e2Ilx9P/S4mCE0Q0N+yG14u2mZEWZB9la499n0XUkuWqko zivmnV0DXpf6YpYDMRmBgIj0f0OjNTpySZxgTQN87ppLdwrb5ee5Z+QbSdr3JNp3 r9ftJj3vgHvAA8t20ocmyPSVPOGOr23fhmrO/GvkKr+8NY1f4ukFOcdTCS3GNEMV ZRsVKM+BrcxyDgVTRq5gzZhjGt8rLJZ+YnSeeizbB2YGTTPNUsZ7gKyE8XAO0Jst Bg== -----END CERTIFICATE-----Generated at Wed May 13 13:24:43 2026 by rpki-client