$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233322e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3233322e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: MX/UQxXfOah/ZCjnZt+OVqN0zH80iLP1sQWstkyzjS0= Subject key identifier: 33:12:02:04:B5:BE:5B:C8:52:B1:B4:31:46:92:74:31:04:85:4A:1B Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 11EE1E51684786EE3D931813F9EDE271BB8C2E94 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233322e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:37 +0000 ROA not before: Fri 24 Apr 2026 07:00:37 +0000 ROA not after: Fri 23 Apr 2027 07:05:37 +0000 asID: 38019 IP address blocks: 139.220.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ee:1e:51:68:47:86:ee:3d:93:18:13:f9:ed:e2:71:bb:8c:2e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:37 2026 GMT Not After : Apr 23 07:05:37 2027 GMT Subject: CN=33120204B5BE5BC852B1B4314692743104854A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:23:db:52:5a:99:55:5d:c9:14:fd:31:2d: 73:6b:a2:64:04:63:67:61:1a:8a:b4:25:6c:06:d8: 74:93:9a:2c:a2:5e:d2:f9:6d:dc:3f:d7:99:43:ae: f5:de:c8:72:80:eb:86:ff:a0:59:31:9d:07:97:ef: 64:ca:16:c4:ce:00:f0:27:c3:0f:b4:2b:f7:68:d5: 88:ce:7e:c8:98:ff:66:b1:23:5a:1d:c1:6a:9c:b3: 0f:cc:ad:c1:c0:ce:aa:26:bd:e2:fd:d9:00:5c:6b: 93:21:f1:6f:d6:64:ca:7f:ec:40:be:4e:7b:e1:a6: 86:e2:64:da:d6:67:0a:b7:8a:cf:5a:5d:ed:4a:fa: 6e:e2:56:fd:4a:be:5e:5f:ed:9a:dd:76:3a:b5:58: 68:c2:bc:0e:76:7c:1f:8f:67:cf:c7:41:bf:62:91: 54:2d:df:34:d1:93:f7:28:0b:aa:d8:58:5d:58:ec: a0:e8:06:12:f3:8b:2e:2f:a6:e7:45:36:39:42:7b: a8:91:26:bb:28:f0:fd:3a:6d:47:31:62:a1:58:f6: 7a:b2:54:f1:4f:e8:c1:45:09:a8:0e:fd:df:96:5a: a6:ef:1c:d0:41:d3:37:80:54:4c:56:cf:57:9e:68: be:7f:f8:e6:15:d4:1d:73:0f:58:b9:09:76:62:c5: ff:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:02:04:B5:BE:5B:C8:52:B1:B4:31:46:92:74:31:04:85:4A:1B X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3233322e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.232.0/23 Signature Algorithm: sha256WithRSAEncryption a8:ae:df:8e:53:e4:73:e2:1f:24:8f:8b:ed:27:44:de:30:e4: 74:0e:b9:f9:a5:8b:d6:00:c5:4d:98:e2:25:57:a0:6f:ef:0e: 07:25:00:0d:87:26:c7:bb:46:4c:9c:89:96:2e:09:2b:5d:2f: 2c:2e:34:94:78:18:23:07:4a:1f:1a:d7:4c:d7:40:31:71:62: 2b:a2:66:55:68:13:93:e9:d0:da:d9:4b:a1:1b:e9:8a:56:6e: bd:f0:a8:08:c9:e4:f1:e3:3f:27:8c:5c:45:b0:24:37:e8:2e: 75:6b:9f:34:41:ed:d1:38:ba:e1:ea:7c:5b:71:5c:83:14:f5: 21:e8:df:d4:47:b3:01:a1:0b:05:32:8c:1b:c5:d6:f1:11:e5: 6b:18:52:11:37:57:40:76:8b:2e:0f:ea:c8:88:57:4e:9e:e6: 7c:ab:8b:bd:fa:f8:f7:95:05:c0:ec:1f:d2:b7:49:38:d0:c5: 21:39:20:a0:30:41:b6:b7:75:8c:61:6f:80:13:dc:53:ba:7d: 9f:3d:4f:c2:40:af:70:55:ee:a1:d7:37:27:3a:2f:66:f7:5b: d9:d1:f9:52:c5:31:4c:db:c0:f5:f3:7a:54:1d:5d:07:2d:86: ef:1e:87:ef:5d:a7:62:e0:82:5b:ef:33:ee:76:1c:8c:dc:8e: d0:66:89:02 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEe4eUWhHhu49kxgT+e3icbuMLpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzdaFw0yNzA0MjMwNzA1MzdaMDMxMTAvBgNV BAMTKDMzMTIwMjA0QjVCRTVCQzg1MkIxQjQzMTQ2OTI3NDMxMDQ4NTRBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJdiPbUlqZVV3JFP0xLXNromQE Y2dhGoq0JWwG2HSTmiyiXtL5bdw/15lDrvXeyHKA64b/oFkxnQeX72TKFsTOAPAn ww+0K/do1YjOfsiY/2axI1odwWqcsw/MrcHAzqomveL92QBca5Mh8W/WZMp/7EC+ TnvhpobiZNrWZwq3is9aXe1K+m7iVv1Kvl5f7Zrddjq1WGjCvA52fB+PZ8/HQb9i kVQt3zTRk/coC6rYWF1Y7KDoBhLziy4vpudFNjlCe6iRJrso8P06bUcxYqFY9nqy VPFP6MFFCagO/d+WWqbvHNBB0zeAVExWz1eeaL5/+OYV1B1zD1i5CXZixf8zAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUMxICBLW+W8hSsbQxRpJ0MQSFShswHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc6DANBgkqhkiG9w0BAQsFAAOCAQEAqK7fjlPkc+IfJI+L7SdE 3jDkdA65+aWL1gDFTZjiJVegb+8OByUADYcmx7tGTJyJli4JK10vLC40lHgYIwdK HxrXTNdAMXFiK6JmVWgTk+nQ2tlLoRvpilZuvfCoCMnk8eM/J4xcRbAkN+gudWuf NEHt0Ti64ep8W3FcgxT1Iejf1EezAaELBTKMG8XW8RHlaxhSETdXQHaLLg/qyIhX Tp7mfKuLvfr495UFwOwf0rdJONDFITkgoDBBtrd1jGFvgBPcU7p9nz1PwkCvcFXu odc3JzovZvdb2dH5UsUxTNvA9fN6VB1dBy2G7x6H712nYuCCW+8z7nYcjNyO0GaJ Ag== -----END CERTIFICATE-----Generated at Wed May 13 13:02:44 2026 by rpki-client