$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232382e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3232382e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: T61GAthuZCHeSDMtfBO9dnRH2FVculC/dgzNZUldLgE= Subject key identifier: 88:5C:A6:B6:5E:2F:DB:3B:60:B9:56:BA:25:8A:3A:07:91:AE:AB:C9 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 45D46CAC85B4139C5EF6874D4DB8A24ADFE39DFA Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232382e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:36 +0000 ROA not before: Fri 24 Apr 2026 07:00:36 +0000 ROA not after: Fri 23 Apr 2027 07:05:36 +0000 asID: 38019 IP address blocks: 139.220.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d4:6c:ac:85:b4:13:9c:5e:f6:87:4d:4d:b8:a2:4a:df:e3:9d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:36 2026 GMT Not After : Apr 23 07:05:36 2027 GMT Subject: CN=885CA6B65E2FDB3B60B956BA258A3A0791AEABC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:fa:30:b0:1f:06:31:14:5f:44:8f:03:23: e8:e8:b1:a2:ce:c8:4e:bf:81:f6:7d:79:32:9e:cc: 31:ee:dd:bf:cf:9e:fc:8e:15:47:d6:be:33:43:d3: b5:c9:0f:03:34:6f:e4:53:68:b2:1c:e3:9e:50:73: fa:7c:eb:b1:84:8a:0b:97:0b:7f:1e:5a:d1:e1:ef: 29:43:82:94:aa:4f:aa:70:ed:3b:1f:7a:b7:1f:7c: 65:cf:71:57:1e:54:86:64:88:71:29:c1:c1:78:69: 0d:a9:83:54:2a:b7:c7:42:94:d3:90:e1:6b:d7:57: 38:99:1f:0f:d8:7a:1f:b9:82:43:ca:3c:f9:8d:dd: 14:1f:63:5d:4f:99:d4:5c:39:01:87:b2:86:f4:a4: dc:5a:0d:7e:99:6f:de:e1:e3:d7:fa:a0:f4:c6:29: 58:ea:30:ac:13:1d:19:75:0b:26:bd:74:55:ff:47: 89:31:c7:8d:d8:8f:87:14:bc:7e:40:83:94:ae:96: ca:2b:a9:16:2e:05:2a:fb:10:bb:5e:20:f7:26:fc: 8c:dd:2b:bc:12:33:74:91:68:e0:59:a6:ee:78:36: f8:58:1f:cb:74:36:5b:64:fb:26:96:7d:9a:7d:bc: 76:12:a5:fc:59:8e:32:a8:72:55:45:25:01:fe:10: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5C:A6:B6:5E:2F:DB:3B:60:B9:56:BA:25:8A:3A:07:91:AE:AB:C9 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3232382e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.228.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:ff:a4:93:c9:1f:cd:fe:c0:f8:d1:30:75:af:d4:52:cf:b1: 02:52:7d:d2:8f:fc:df:13:fb:be:b6:94:85:d4:ae:a6:27:5c: f4:6e:61:5f:2e:56:0a:8f:95:e2:56:18:1b:25:dc:87:f0:84: 19:37:4a:60:da:f2:0f:85:f3:6c:bb:aa:22:08:53:5a:4e:22: 3d:3a:8c:d8:ea:d0:39:0a:26:e9:c3:c1:fb:cd:8c:ff:4e:02: aa:e6:f7:ab:25:fd:c3:e1:8f:00:ea:4a:03:3d:03:83:11:43: e5:5b:81:45:88:1e:41:32:1c:3e:f1:65:ec:40:17:cd:64:52: 03:f2:57:20:a1:15:c9:84:e0:ca:bd:b9:e6:fd:32:91:32:7a: 84:bc:0b:c0:76:23:3a:02:54:e8:c4:11:ba:47:64:1f:4b:28: 40:82:30:49:e9:b2:f1:0b:c8:53:5b:ac:67:c5:d7:3c:6f:2d: b8:5a:62:de:84:c6:51:7e:77:73:1d:9c:27:cd:22:62:9a:14: 0b:6e:dd:3f:fb:5e:a7:c8:48:c3:6a:e7:c9:31:41:ef:5a:e5: d5:63:49:5e:94:e0:2f:5d:14:70:f9:3a:6c:17:f4:e1:0d:fc: d7:b3:7f:8a:1a:39:e9:6d:b3:a3:7b:0f:7a:32:7e:82:82:de: 18:32:b2:39 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURdRsrIW0E5xe9odNTbiiSt/jnfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV BAMTKDg4NUNBNkI2NUUyRkRCM0I2MEI5NTZCQTI1OEEzQTA3OTFBRUFCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+fowsB8GMRRfRI8DI+josaLO yE6/gfZ9eTKezDHu3b/PnvyOFUfWvjND07XJDwM0b+RTaLIc455Qc/p867GEiguX C38eWtHh7ylDgpSqT6pw7TsfercffGXPcVceVIZkiHEpwcF4aQ2pg1Qqt8dClNOQ 4WvXVziZHw/Yeh+5gkPKPPmN3RQfY11PmdRcOQGHsob0pNxaDX6Zb97h49f6oPTG KVjqMKwTHRl1Cya9dFX/R4kxx43Yj4cUvH5Ag5SulsorqRYuBSr7ELteIPcm/Izd K7wSM3SRaOBZpu54NvhYH8t0Nltk+yaWfZp9vHYSpfxZjjKoclVFJQH+EMXhAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUiFymtl4v2ztguVa6JYo6B5Guq8kwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc5DANBgkqhkiG9w0BAQsFAAOCAQEAG/+kk8kfzf7A+NEwda/U Us+xAlJ90o/83xP7vraUhdSupidc9G5hXy5WCo+V4lYYGyXch/CEGTdKYNryD4Xz bLuqIghTWk4iPTqM2OrQOQom6cPB+82M/04Cqub3qyX9w+GPAOpKAz0DgxFD5VuB RYgeQTIcPvFl7EAXzWRSA/JXIKEVyYTgyr255v0ykTJ6hLwLwHYjOgJU6MQRukdk H0soQIIwSemy8QvIU1usZ8XXPG8tuFpi3oTGUX53cx2cJ80iYpoUC27dP/tep8hI w2rnyTFB71rl1WNJXpTgL10UcPk6bBf04Q3817N/iho56W2zo3sPejJ+goLeGDKy OQ== -----END CERTIFICATE-----Generated at Wed May 13 13:20:31 2026 by rpki-client