$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234322e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3234322e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: AzxnO5woezpn29QoBoxaMrmcslrb02ISa/HbZqaZSNM= Subject key identifier: 01:F5:0D:B9:AB:BB:C8:3D:61:31:5A:DC:A0:1B:49:2F:06:0B:88:8C Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 4AF29BC47F32FE14D6FD2BC1D61B143D83E34129 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234322e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:37 +0000 ROA not before: Fri 24 Apr 2026 07:00:37 +0000 ROA not after: Fri 23 Apr 2027 07:05:37 +0000 asID: 38019 IP address blocks: 139.220.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f2:9b:c4:7f:32:fe:14:d6:fd:2b:c1:d6:1b:14:3d:83:e3:41:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:37 2026 GMT Not After : Apr 23 07:05:37 2027 GMT Subject: CN=01F50DB9ABBBC83D61315ADCA01B492F060B888C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:f5:d1:58:25:4d:56:0d:42:d4:48:1d:74: 9b:ac:86:91:08:f7:95:f4:f2:5f:46:fe:4c:12:f0: 41:b0:17:44:36:c5:bf:6e:92:ed:08:99:86:34:92: 58:95:77:a2:39:20:c0:9a:ae:1b:db:d5:f9:28:6d: 30:67:e8:c3:d7:39:91:a9:e4:a4:2b:b8:64:9d:07: ed:b2:0e:11:41:8a:57:da:b6:3d:c9:38:66:8b:1e: 16:65:0e:91:f1:6a:2d:30:b4:98:38:23:4b:fe:bd: 01:b3:2f:91:55:89:5a:ce:52:ab:11:48:6b:f6:8b: 81:41:b6:c4:9e:62:06:e4:b8:a4:a1:a5:06:25:fd: be:43:42:4b:89:f8:90:c0:bc:3b:16:39:1d:ca:20: 00:b1:7f:f9:29:67:ca:4a:bb:44:5b:ea:be:e5:5c: 0e:7c:57:ae:16:0c:f5:a0:f9:63:a8:f7:3f:bc:79: f5:0c:61:79:63:49:47:c0:05:27:e5:4c:4a:c0:d3: 19:59:07:ff:fe:02:a6:01:a7:14:a3:1f:57:38:b0: 6a:34:d1:42:d1:5c:a3:d4:31:fd:72:78:cb:93:9c: 3b:38:3e:dc:4d:3b:1a:cd:84:51:4a:c5:53:a4:65: 90:9a:fe:29:59:9a:23:35:5a:6d:b6:77:3b:1e:58: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F5:0D:B9:AB:BB:C8:3D:61:31:5A:DC:A0:1B:49:2F:06:0B:88:8C X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234322e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.242.0/23 Signature Algorithm: sha256WithRSAEncryption 13:91:9e:2d:18:a3:d4:1c:c0:1a:ad:62:45:59:1d:a9:ed:3d: a5:ac:1c:5e:2f:ec:7f:c5:ab:28:8e:48:7b:7d:10:fd:35:c0: 8c:cd:62:d1:f7:8e:cf:be:07:b1:bb:8d:da:c8:7c:1a:0b:ef: 17:f2:19:ef:b2:22:e3:f2:f6:c9:d0:11:22:bd:00:1f:c3:c1: ae:de:13:49:0c:18:94:63:af:78:4d:47:ee:de:e9:f9:b7:22: 4c:81:c7:02:3b:68:b2:66:22:4b:71:44:4f:2e:83:b0:04:f0: 21:aa:ab:2a:a5:dd:8e:18:a1:61:93:94:3d:f6:3d:af:35:45: d6:54:4e:58:70:30:7a:78:dc:0f:b2:ef:27:3b:87:8b:50:e8: 87:4f:eb:f5:b1:9e:93:5c:81:74:fb:20:8f:6c:d3:18:cf:06: da:9b:6f:5f:c1:2a:0f:e0:4d:ee:05:09:99:7f:b5:39:d9:49: 87:71:35:d3:d8:ce:85:d9:3b:aa:f9:1a:8e:46:88:80:51:62: 57:1a:1b:34:bf:0b:a0:ff:be:8c:b7:7c:0a:db:28:ef:9c:36: 8d:2f:ef:d5:33:1c:6c:35:f2:f5:c9:5e:7d:f2:3a:d5:de:61: 66:09:aa:35:30:50:15:3e:d8:22:0f:3e:6f:b9:db:fe:d1:97: 4a:93:29:9b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSvKbxH8y/hTW/SvB1hsUPYPjQSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzdaFw0yNzA0MjMwNzA1MzdaMDMxMTAvBgNV BAMTKDAxRjUwREI5QUJCQkM4M0Q2MTMxNUFEQ0EwMUI0OTJGMDYwQjg4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkvXRWCVNVg1C1EgddJushpEI 95X08l9G/kwS8EGwF0Q2xb9uku0ImYY0kliVd6I5IMCarhvb1fkobTBn6MPXOZGp 5KQruGSdB+2yDhFBilfatj3JOGaLHhZlDpHxai0wtJg4I0v+vQGzL5FViVrOUqsR SGv2i4FBtsSeYgbkuKShpQYl/b5DQkuJ+JDAvDsWOR3KIACxf/kpZ8pKu0Rb6r7l XA58V64WDPWg+WOo9z+8efUMYXljSUfABSflTErA0xlZB//+AqYBpxSjH1c4sGo0 0ULRXKPUMf1yeMuTnDs4PtxNOxrNhFFKxVOkZZCa/ilZmiM1Wm22dzseWOV7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUAfUNuau7yD1hMVrcoBtJLwYLiIwwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzNDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc8jANBgkqhkiG9w0BAQsFAAOCAQEAE5GeLRij1BzAGq1iRVkd qe09pawcXi/sf8WrKI5Ie30Q/TXAjM1i0feOz74HsbuN2sh8GgvvF/IZ77Ii4/L2 ydARIr0AH8PBrt4TSQwYlGOveE1H7t7p+bciTIHHAjtosmYiS3FETy6DsATwIaqr KqXdjhihYZOUPfY9rzVF1lROWHAwenjcD7LvJzuHi1Doh0/r9bGek1yBdPsgj2zT GM8G2ptvX8EqD+BN7gUJmX+1OdlJh3E109jOhdk7qvkajkaIgFFiVxobNL8LoP++ jLd8Ctso75w2jS/v1TMcbDXy9cleffI61d5hZgmqNTBQFT7YIg8+b7nb/tGXSpMp mw== -----END CERTIFICATE-----Generated at Wed May 13 16:48:24 2026 by rpki-client