$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130302e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e3130302e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: NPOTNrn95Yc2Ya8GBluii5cYdKteEeJcHcNZDgONax4= Subject key identifier: 7A:1E:51:DD:9F:5F:58:F2:3A:E9:FA:F6:54:05:A9:34:E6:16:1E:87 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 6845DF8EFFC0462DA8E74F5769B6A44B51D069D0 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130302e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:43:04 +0000 ROA not before: Sun 28 Jun 2026 13:38:04 +0000 ROA not after: Sun 27 Jun 2027 13:43:04 +0000 asID: 63708 IP address blocks: 139.159.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:45:df:8e:ff:c0:46:2d:a8:e7:4f:57:69:b6:a4:4b:51:d0:69:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:38:04 2026 GMT Not After : Jun 27 13:43:04 2027 GMT Subject: CN=7A1E51DD9F5F58F23AE9FAF65405A934E6161E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ea:19:aa:5b:3c:3c:a7:97:79:38:f7:0a:3c: f9:83:c2:11:54:05:ec:21:76:85:2f:ed:1b:2a:75: 35:4b:19:eb:cc:37:48:21:fe:6a:1e:16:eb:1f:4a: 67:03:3f:2a:c7:95:80:a1:fa:ec:13:5a:73:45:66: 37:b6:c0:65:60:e4:db:92:87:15:00:9e:01:a5:fb: 3e:69:32:e0:45:13:34:e5:f3:03:5a:37:18:5e:f8: 59:37:9e:6d:96:3c:48:9f:df:ad:cc:21:c0:ba:17: b7:52:c8:49:db:17:55:c2:75:48:ff:36:75:3c:7d: f4:83:d2:ae:d9:68:1c:f1:23:2e:e8:32:c1:2c:fa: 2b:b9:3c:d4:5e:10:75:9d:2f:a2:3d:4e:da:33:81: 27:15:80:ac:d6:73:79:ed:37:8a:c7:0d:74:17:62: 3b:61:ff:c7:0b:cd:c1:2e:ce:cf:14:6b:bd:66:ec: 73:31:a3:c4:42:e5:e6:58:34:33:fe:45:88:81:05: c8:5e:ce:d6:7a:b8:4c:3f:7f:28:af:6e:e9:87:28: e6:96:de:1f:d3:15:9f:56:fc:db:c7:fc:5e:da:91: a6:11:d6:39:fe:d2:74:17:18:df:66:23:69:aa:03: da:da:ec:ff:55:32:2c:eb:11:46:ee:9e:7c:d1:26: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1E:51:DD:9F:5F:58:F2:3A:E9:FA:F6:54:05:A9:34:E6:16:1E:87 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130302e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.100.0/24 Signature Algorithm: sha256WithRSAEncryption 08:68:79:f5:61:9e:96:d1:1c:de:85:45:77:b6:77:88:c5:bb: 4c:d9:3a:d1:05:3b:92:0a:9d:aa:57:95:23:9f:e1:f8:d9:4d: 31:5c:16:39:88:85:6b:b7:97:02:f1:80:19:16:d4:2b:0f:2c: 05:42:26:cf:79:84:cf:97:68:a7:9a:14:2f:56:e5:18:2f:19: 16:0a:af:37:97:36:07:d9:32:85:67:e8:9b:23:58:bd:e8:00: c3:60:43:10:69:32:3c:25:cf:ea:21:1e:88:31:dc:72:c0:5b: 90:49:8b:a1:d7:76:81:89:f0:d6:2c:16:2f:85:b3:26:2c:7c: 9b:7e:a7:65:d1:d0:c9:5e:0d:4e:0e:74:b2:bf:25:91:9b:c2: c0:aa:56:e4:26:8c:10:f8:2d:f4:a0:71:44:8e:df:61:6e:87: 82:cd:7e:04:6d:12:12:e5:4e:f6:ed:d7:e9:5b:36:4b:95:10: 47:b8:11:2a:f3:61:26:81:ed:bf:e9:4e:1c:b0:32:5b:ef:d3: 9b:c1:1b:44:75:44:bb:eb:61:a5:fe:ce:0a:98:93:7e:a8:e2: a3:92:c3:69:c3:96:8c:f4:6d:48:0a:ea:2f:5e:d0:66:81:17: 5c:9a:3e:e6:51:b6:e2:46:e6:57:ef:40:bc:d0:1b:52:7a:83: e4:ee:29:36 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaEXfjv/ARi2o509XabakS1HQadAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzM4MDRaFw0yNzA2MjcxMzQzMDRaMDMxMTAvBgNV BAMTKDdBMUU1MUREOUY1RjU4RjIzQUU5RkFGNjU0MDVBOTM0RTYxNjFFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv6hmqWzw8p5d5OPcKPPmDwhFU BewhdoUv7RsqdTVLGevMN0gh/moeFusfSmcDPyrHlYCh+uwTWnNFZje2wGVg5NuS hxUAngGl+z5pMuBFEzTl8wNaNxhe+Fk3nm2WPEif363MIcC6F7dSyEnbF1XCdUj/ NnU8ffSD0q7ZaBzxIy7oMsEs+iu5PNReEHWdL6I9TtozgScVgKzWc3ntN4rHDXQX Yjth/8cLzcEuzs8Ua71m7HMxo8RC5eZYNDP+RYiBBcheztZ6uEw/fyivbumHKOaW 3h/TFZ9W/NvH/F7akaYR1jn+0nQXGN9mI2mqA9ra7P9VMizrEUbunnzRJue3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUeh5R3Z9fWPI66fr2VAWpNOYWHocwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIufZDANBgkqhkiG9w0BAQsFAAOCAQEACGh59WGeltEc3oVFd7Z3 iMW7TNk60QU7kgqdqleVI5/h+NlNMVwWOYiFa7eXAvGAGRbUKw8sBUImz3mEz5do p5oUL1blGC8ZFgqvN5c2B9kyhWfomyNYvegAw2BDEGkyPCXP6iEeiDHccsBbkEmL odd2gYnw1iwWL4WzJix8m36nZdHQyV4NTg50sr8lkZvCwKpW5CaMEPgt9KBxRI7f YW6Hgs1+BG0SEuVO9u3X6Vs2S5UQR7gRKvNhJoHtv+lOHLAyW+/Tm8EbRHVEu+th pf7OCpiTfqjio5LDacOWjPRtSArqL17QZoEXXJo+5lG24kbmV+9AvNAbUnqD5O4p Ng== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:48 2026 by rpki-client