$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234342e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3234342e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: 6mSQ3KzQH6dIkhA3D+cVxuQLjh6auSgOmymngWBKiWg= Subject key identifier: 09:AA:DC:39:FB:7D:75:0A:84:B4:E7:24:AD:64:2E:D8:7B:7E:BD:99 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 21D46DC71A0B6CBCE285E7F0B5B19263CABD3313 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234342e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:36 +0000 ROA not before: Fri 24 Apr 2026 07:00:36 +0000 ROA not after: Fri 23 Apr 2027 07:05:36 +0000 asID: 38019 IP address blocks: 139.220.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d4:6d:c7:1a:0b:6c:bc:e2:85:e7:f0:b5:b1:92:63:ca:bd:33:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:36 2026 GMT Not After : Apr 23 07:05:36 2027 GMT Subject: CN=09AADC39FB7D750A84B4E724AD642ED87B7EBD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:c4:66:e4:65:16:8a:ac:94:87:83:b3:e3: 45:f1:aa:92:40:b1:c3:5f:42:f1:d8:3c:9d:32:58: b9:37:4b:6c:30:76:51:b5:46:b1:e4:78:69:74:a5: 4d:eb:9a:ab:ee:0f:c8:de:b9:73:6a:6f:79:5f:68: c6:74:57:2d:3b:d7:d2:e0:2a:15:be:51:e8:b4:12: 27:f8:be:3d:3e:b5:db:71:29:c4:62:e5:89:63:33: 4d:31:13:3e:50:f7:a0:a0:ba:98:29:ce:ea:3c:5e: 4c:73:88:b8:01:58:9c:4c:8a:d5:13:43:31:0d:5c: 90:2f:c8:cc:51:3f:96:17:97:f9:fa:1f:d6:70:6e: 67:05:f1:b6:2e:9a:31:64:40:a6:a4:53:ac:d4:2c: fe:fb:f4:8b:23:dc:b1:be:7d:cb:84:ac:94:36:75: cf:d4:9e:2a:88:33:4b:d3:7c:71:65:7c:ae:f9:a2: 9b:be:e6:2c:da:65:d8:b1:28:a6:a8:64:75:4b:98: d2:69:48:b5:15:46:e9:2b:e6:a9:2f:e1:08:1b:22: 7d:b2:7f:77:7b:44:17:e4:1b:42:d6:75:dd:c5:fd: b9:f1:21:c3:d3:9f:ff:82:41:90:8b:0d:f5:8d:7d: 70:f5:80:8b:25:d3:b5:4e:58:4f:32:31:2b:89:51: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AA:DC:39:FB:7D:75:0A:84:B4:E7:24:AD:64:2E:D8:7B:7E:BD:99 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234342e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.244.0/23 Signature Algorithm: sha256WithRSAEncryption 60:37:f8:7b:cf:98:fd:25:39:c7:30:c3:ac:75:06:df:75:78: 37:8b:d3:e0:dc:31:85:e3:44:4e:eb:25:77:9c:70:85:70:86: 37:5e:e3:dd:99:cd:dc:a5:83:40:ec:d0:c0:96:33:1a:69:05: a2:94:ef:58:3e:f0:85:c9:62:60:52:7e:c8:7c:3d:68:78:e7: 5c:cf:93:ca:36:09:ec:a5:79:da:88:15:ef:3a:3e:41:74:3e: c0:8e:d3:be:56:0a:93:94:90:a2:a8:41:f0:6a:3c:c7:e5:d0: 98:b7:42:47:a7:57:fb:35:ab:15:03:1d:77:95:cc:03:8a:f3: 2f:51:7e:20:6a:96:82:c1:1f:aa:02:03:21:7a:d4:cb:20:41: 97:3c:3f:bb:a0:dc:ed:41:06:47:43:a5:52:dc:2d:09:8a:bd: cd:28:b8:24:78:a5:a1:f8:20:19:d2:79:6a:c7:7b:30:5e:81: 08:08:67:00:2a:51:98:80:5a:a8:89:1f:6a:ff:2c:74:f0:1e: 3f:70:23:06:6d:06:ce:62:09:88:44:8e:7b:c6:29:4f:12:78: f9:7c:2f:cb:40:61:a8:df:9f:81:9e:fc:e4:59:af:e1:8a:cd: 4d:85:0d:6a:78:7e:db:62:78:a7:ff:9d:ee:43:43:69:84:39: 42:d8:f1:45 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIdRtxxoLbLzihefwtbGSY8q9MxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwMzZaFw0yNzA0MjMwNzA1MzZaMDMxMTAvBgNV BAMTKDA5QUFEQzM5RkI3RDc1MEE4NEI0RTcyNEFENjQyRUQ4N0I3RUJEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwY8Rm5GUWiqyUh4Oz40XxqpJA scNfQvHYPJ0yWLk3S2wwdlG1RrHkeGl0pU3rmqvuD8jeuXNqb3lfaMZ0Vy0719Lg KhW+Uei0Eif4vj0+tdtxKcRi5YljM00xEz5Q96Cgupgpzuo8XkxziLgBWJxMitUT QzENXJAvyMxRP5YXl/n6H9ZwbmcF8bYumjFkQKakU6zULP779Isj3LG+fcuErJQ2 dc/UniqIM0vTfHFlfK75opu+5izaZdixKKaoZHVLmNJpSLUVRukr5qkv4QgbIn2y f3d7RBfkG0LWdd3F/bnxIcPTn/+CQZCLDfWNfXD1gIsl07VOWE8yMSuJUf1dAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUCarcOft9dQqEtOckrWQu2Ht+vZkwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzNDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc9DANBgkqhkiG9w0BAQsFAAOCAQEAYDf4e8+Y/SU5xzDDrHUG 33V4N4vT4NwxheNETusld5xwhXCGN17j3ZnN3KWDQOzQwJYzGmkFopTvWD7whcli YFJ+yHw9aHjnXM+TyjYJ7KV52ogV7zo+QXQ+wI7TvlYKk5SQoqhB8Go8x+XQmLdC R6dX+zWrFQMdd5XMA4rzL1F+IGqWgsEfqgIDIXrUyyBBlzw/u6Dc7UEGR0OlUtwt CYq9zSi4JHilofggGdJ5asd7MF6BCAhnACpRmIBaqIkfav8sdPAeP3AjBm0GzmIJ iESOe8YpTxJ4+Xwvy0BhqN+fgZ785Fmv4YrNTYUNanh+22J4p/+d7kNDaYQ5Qtjx RQ== -----END CERTIFICATE-----Generated at Wed May 13 13:42:58 2026 by rpki-client