$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e203535393930.roa File: 3133392e3135392e3136382e302f32322d3232203d3e203535393930.roa (raw, json) Hash identifier: /f0AnHU2a2a6HiXoso6tWa6HmsCe0BlkWqTMXwMI87w= Subject key identifier: 40:9A:1E:D6:66:EB:C3:E9:64:C4:3A:CC:08:3F:F7:4A:E0:02:CB:E6 Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 0DE46D589D22406D360448A010CCD600307B4CF7 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e203535393930.roa Signing time: Tue 16 Jun 2026 14:15:56 +0000 ROA not before: Tue 16 Jun 2026 14:10:56 +0000 ROA not after: Tue 15 Jun 2027 14:15:56 +0000 asID: 55990 IP address blocks: 139.159.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e4:6d:58:9d:22:40:6d:36:04:48:a0:10:cc:d6:00:30:7b:4c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 16 14:10:56 2026 GMT Not After : Jun 15 14:15:56 2027 GMT Subject: CN=409A1ED666EBC3E964C43ACC083FF74AE002CBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:74:5f:69:1c:aa:b2:e4:f5:06:bd:11:fd: 9f:ed:19:0f:d5:43:37:a4:d8:bc:71:5b:b1:40:44: 20:ab:05:41:04:37:cc:15:7d:ec:b3:91:fc:f1:cf: 66:5c:9e:1e:f6:5a:d0:08:c5:19:e0:13:b3:e4:95: f8:d5:d1:fd:8f:4b:9b:09:a5:46:cd:56:36:07:14: 82:d4:0d:bf:33:9c:89:72:e8:60:9e:07:be:51:b6: 70:91:c8:fe:82:ca:87:7e:e2:ff:2e:47:ac:02:ea: 2b:b4:13:88:2c:5a:c5:f3:22:9c:b5:d2:98:18:17: ab:10:9a:2c:ef:5c:4c:29:53:62:bd:50:49:f6:2b: 00:bf:74:12:53:3f:5b:59:a2:b8:fa:7b:6a:46:7e: 38:92:95:d5:15:ba:72:e3:92:1a:f7:42:69:27:97: a0:ea:b7:7b:f7:e6:7a:38:a8:0a:b8:c7:65:dd:86: ac:95:3e:93:23:9e:c0:a9:63:eb:3e:6a:20:04:ad: f4:09:27:16:26:73:ad:6f:27:1a:5d:0c:d9:3f:9b: 9d:02:1f:db:c8:f8:c8:a7:e9:e3:00:d0:1e:5a:74: 71:aa:f6:57:bd:f3:7e:0c:3a:f7:05:23:29:32:8e: ab:e8:3d:57:16:2a:ad:b9:bc:5b:a0:d4:7b:27:f3: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9A:1E:D6:66:EB:C3:E9:64:C4:3A:CC:08:3F:F7:4A:E0:02:CB:E6 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e203535393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.168.0/22 Signature Algorithm: sha256WithRSAEncryption d2:ae:cf:da:46:93:73:3f:2a:ac:0e:db:6f:99:d5:c0:ce:ab: a9:f4:c8:a2:3b:fd:66:44:a3:50:37:db:5d:ef:d4:ef:7d:93: 58:b6:bd:c3:e3:27:31:8e:89:44:84:ef:3a:75:be:ad:ad:c8: c4:e3:5d:56:eb:2d:9f:55:9b:be:5c:21:a5:4c:f4:2f:a7:c6: 0b:c6:78:4f:1b:08:16:0a:c7:a2:69:49:63:30:ee:b5:bc:e7: 9c:48:04:36:f8:84:52:63:70:c6:b0:1a:52:60:b2:7b:90:90: 77:9c:76:d1:57:29:9d:bc:4b:de:aa:e8:4c:ae:6d:15:88:fe: cd:0d:ac:29:e0:76:4e:4e:67:0c:93:89:d1:48:2d:f9:9f:5a: 52:e9:da:5c:f6:7c:ac:6e:4d:d5:86:d2:03:50:33:91:db:93: 52:93:0f:01:89:13:d1:3b:7f:75:6a:84:1d:aa:6c:27:76:ee: 5c:09:20:0d:5e:23:0b:1d:6a:4e:a0:71:76:ce:a7:7f:42:73: 4c:37:c4:b5:57:6d:01:bc:9e:e7:31:5b:37:a8:3b:0f:09:14: 81:76:a2:df:1a:0b:c8:7f:96:18:3e:28:45:b7:58:03:b6:9a: 1c:55:56:5b:7a:44:0d:8d:b7:d3:49:b5:8a:45:d3:86:ef:5b: 34:72:7b:7b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDeRtWJ0iQG02BEigEMzWADB7TPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MTYxNDEwNTZaFw0yNzA2MTUxNDE1NTZaMDMxMTAvBgNV BAMTKDQwOUExRUQ2NjZFQkMzRTk2NEM0M0FDQzA4M0ZGNzRBRTAwMkNCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDnRfaRyqsuT1Br0R/Z/tGQ/V Qzek2LxxW7FARCCrBUEEN8wVfeyzkfzxz2Zcnh72WtAIxRngE7PklfjV0f2PS5sJ pUbNVjYHFILUDb8znIly6GCeB75RtnCRyP6Cyod+4v8uR6wC6iu0E4gsWsXzIpy1 0pgYF6sQmizvXEwpU2K9UEn2KwC/dBJTP1tZorj6e2pGfjiSldUVunLjkhr3Qmkn l6Dqt3v35no4qAq4x2XdhqyVPpMjnsCpY+s+aiAErfQJJxYmc61vJxpdDNk/m50C H9vI+Min6eMA0B5adHGq9le9834MOvcFIykyjqvoPVcWKq25vFug1Hsn81pxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQJoe1mbrw+lkxDrMCD/3SuACy+YwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS8zMTMzMzkyZTMx MzUzOTJlMzEzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAoufqDANBgkqhkiG9w0BAQsFAAOCAQEA0q7P2kaTcz8qrA7bb5nV wM6rqfTIojv9ZkSjUDfbXe/U732TWLa9w+MnMY6JRITvOnW+ra3IxONdVustn1Wb vlwhpUz0L6fGC8Z4TxsIFgrHomlJYzDutbznnEgENviEUmNwxrAaUmCye5CQd5x2 0VcpnbxL3qroTK5tFYj+zQ2sKeB2Tk5nDJOJ0Ugt+Z9aUunaXPZ8rG5N1YbSA1Az kduTUpMPAYkT0Tt/dWqEHapsJ3buXAkgDV4jCx1qTqBxds6nf0JzTDfEtVdtAbye 5zFbN6g7DwkUgXai3xoLyH+WGD4oRbdYA7aaHFVWW3pEDY2300m1ikXThu9bNHJ7 ew== -----END CERTIFICATE-----Generated at Fri Jul 24 15:45:53 2026 by rpki-client