$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3235342e302f32332d3233203d3e203338303139.roa File: 3133392e3232302e3235342e302f32332d3233203d3e203338303139.roa (raw, json) Hash identifier: +aBYtX6d8z7eACBi7dc//zjKbQmjpheGS6rh3G97EyU= Subject key identifier: 06:B6:25:7A:91:7B:A8:82:6B:AB:E1:3D:B8:CD:51:FF:DF:DD:4B:3E Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 2E0C0BD6ED7C8AA375DFC188A1C6A139882A5047 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3235342e302f32332d3233203d3e203338303139.roa Signing time: Fri 24 Apr 2026 07:05:45 +0000 ROA not before: Fri 24 Apr 2026 07:00:45 +0000 ROA not after: Fri 23 Apr 2027 07:05:45 +0000 asID: 38019 IP address blocks: 139.220.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0c:0b:d6:ed:7c:8a:a3:75:df:c1:88:a1:c6:a1:39:88:2a:50:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 07:00:45 2026 GMT Not After : Apr 23 07:05:45 2027 GMT Subject: CN=06B6257A917BA8826BABE13DB8CD51FFDFDD4B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:97:14:6c:1a:7c:f7:86:48:50:d6:ca:dc: 94:77:8b:df:d6:5f:38:59:0e:14:ac:55:57:27:57: 3c:c5:29:96:f9:1a:b1:f4:5b:64:f7:42:68:82:dd: 2d:4c:ff:fc:91:5b:c4:7b:f4:dd:14:f0:91:c8:6e: 64:2d:89:35:96:25:9c:d0:2a:bd:48:0f:3c:3e:c2: cc:ea:d8:70:af:e7:dc:db:ed:b1:24:a8:ca:e5:f5: 9c:0d:68:a1:0a:db:1a:a2:40:e7:49:5a:90:be:80: 1f:a1:20:46:aa:66:f6:96:25:40:da:ed:60:d0:23: 8f:2a:ea:41:7f:19:dd:ab:c2:11:6b:0c:42:46:41: dd:df:89:31:f8:17:c5:48:e4:cf:75:ef:4b:89:79: 89:45:79:f5:1c:85:6c:a5:42:fa:6c:f2:a5:f5:5f: f5:c7:e9:a1:44:4a:6d:08:e8:a3:1f:b0:c3:ed:ee: eb:18:23:1a:79:d9:41:4b:5c:3e:06:d2:d8:1a:24: a7:b0:50:ef:eb:5b:79:b3:d6:81:5c:a5:c9:b3:93: f2:62:2f:b2:58:52:f3:c5:90:d7:97:cd:46:53:7b: 08:09:40:02:ad:48:15:69:cf:49:fc:26:af:57:38: 2a:9f:c8:cd:b4:d1:3e:84:b8:55:30:7a:c2:89:8d: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B6:25:7A:91:7B:A8:82:6B:AB:E1:3D:B8:CD:51:FF:DF:DD:4B:3E X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3235342e302f32332d3233203d3e203338303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.254.0/23 Signature Algorithm: sha256WithRSAEncryption 37:37:b2:52:51:32:9e:ac:4c:47:16:99:3c:c9:5e:7b:e7:b4: 4d:70:25:d7:3a:6f:37:92:e7:01:45:18:f3:87:c8:f9:44:70: 96:ae:ce:ae:ff:49:6a:ce:8a:73:74:fa:c3:8b:71:93:3f:cc: be:07:ac:8c:03:a5:5e:c8:a7:83:3b:20:15:03:b3:f7:06:44: 7b:8e:87:7b:bf:9d:df:a5:99:17:ee:0e:70:3b:28:b0:b3:27: 99:09:6a:5d:f4:6b:fd:23:06:70:18:dc:be:70:5c:fc:af:0f: fd:31:20:86:a2:6a:82:54:09:e8:dd:a4:5d:fd:a4:3e:a3:9f: d7:ad:ff:bf:4b:82:e5:70:ff:58:d4:75:e1:33:dd:b2:fc:58: e9:c8:5e:a3:6a:fc:5c:ac:cf:8b:e8:e4:ae:2e:42:c6:b5:8f: e1:ac:82:3d:a1:94:b1:76:fc:d6:cc:5a:cf:55:08:e6:93:1c: b2:24:fa:92:7c:d4:ab:0a:76:0c:51:93:28:0b:f1:10:d1:f4: 62:8e:68:22:9d:ab:e8:6e:df:74:79:65:7b:92:77:46:22:9b: b5:6f:9a:db:23:17:49:8a:ad:d1:9c:f2:3c:30:39:0a:11:c4: 2c:b6:94:32:54:d7:d5:94:db:e2:85:67:1f:88:6a:92:7d:6b: d2:da:79:6e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULgwL1u18iqN138GIocahOYgqUEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNzAwNDVaFw0yNzA0MjMwNzA1NDVaMDMxMTAvBgNV BAMTKDA2QjYyNTdBOTE3QkE4ODI2QkFCRTEzREI4Q0Q1MUZGREZERDRCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSsZcUbBp894ZIUNbK3JR3i9/W XzhZDhSsVVcnVzzFKZb5GrH0W2T3QmiC3S1M//yRW8R79N0U8JHIbmQtiTWWJZzQ Kr1IDzw+wszq2HCv59zb7bEkqMrl9ZwNaKEK2xqiQOdJWpC+gB+hIEaqZvaWJUDa 7WDQI48q6kF/Gd2rwhFrDEJGQd3fiTH4F8VI5M9170uJeYlFefUchWylQvps8qX1 X/XH6aFESm0I6KMfsMPt7usYIxp52UFLXD4G0tgaJKewUO/rW3mz1oFcpcmzk/Ji L7JYUvPFkNeXzUZTewgJQAKtSBVpz0n8Jq9XOCqfyM200T6EuFUwesKJjU6TAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUBrYlepF7qIJrq+E9uM1R/9/dSz4wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzNTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMwMzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvc/jANBgkqhkiG9w0BAQsFAAOCAQEANzeyUlEynqxMRxaZPMle e+e0TXAl1zpvN5LnAUUY84fI+URwlq7Orv9Jas6Kc3T6w4txkz/MvgesjAOlXsin gzsgFQOz9wZEe46He7+d36WZF+4OcDsosLMnmQlqXfRr/SMGcBjcvnBc/K8P/TEg hqJqglQJ6N2kXf2kPqOf163/v0uC5XD/WNR14TPdsvxY6cheo2r8XKzPi+jkri5C xrWP4ayCPaGUsXb81sxaz1UI5pMcsiT6knzUqwp2DFGTKAvxENH0Yo5oIp2r6G7f dHlle5J3RiKbtW+a2yMXSYqt0ZzyPDA5ChHELLaUMlTX1ZTb4oVnH4hqkn1r0tp5 bg== -----END CERTIFICATE-----Generated at Wed May 13 14:43:18 2026 by rpki-client