$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130312e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e3130312e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: XlGdb9CWTilG80xu5EvI9nRtNiLhdMTQRZKIGsix3Sg= Subject key identifier: DC:50:5B:BA:AC:A5:E2:EE:F6:A8:8F:72:9E:8A:52:14:A7:BF:A3:31 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 121C5A54F9E7FF15ED6AABD44002E1E095E98AFA Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130312e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:43:04 +0000 ROA not before: Sun 28 Jun 2026 13:38:04 +0000 ROA not after: Sun 27 Jun 2027 13:43:04 +0000 asID: 63708 IP address blocks: 139.159.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1c:5a:54:f9:e7:ff:15:ed:6a:ab:d4:40:02:e1:e0:95:e9:8a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:38:04 2026 GMT Not After : Jun 27 13:43:04 2027 GMT Subject: CN=DC505BBAACA5E2EEF6A88F729E8A5214A7BFA331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:4e:9c:36:23:a6:c0:40:22:7a:6e:01:37: ce:13:3b:7e:1b:6a:11:61:32:30:66:1a:88:e8:44: d6:ae:fb:2e:01:39:2e:b8:f4:e0:d2:2b:aa:8c:18: 5e:5d:b0:77:b5:00:8f:29:b7:03:d0:91:19:de:7f: e3:13:70:30:61:b5:ae:eb:ef:76:4d:59:68:05:4b: 9c:7f:74:50:7e:75:6d:a6:a4:6b:c6:b5:7d:1f:17: dc:38:8c:b7:17:6d:40:26:03:e1:60:50:9c:eb:25: aa:48:0a:89:d5:48:54:fd:d1:e0:eb:c6:8f:b5:c9: 39:da:5d:11:fe:84:73:1a:5e:09:a2:c3:8a:ed:48: fc:fa:82:eb:a8:a9:f3:9b:79:57:fd:bb:43:6e:18: d3:b6:a6:5d:4a:93:b2:95:4c:4d:34:05:01:ac:2c: a4:48:d9:2d:d7:3e:40:d5:20:4f:90:82:4a:86:2b: 83:07:e4:05:32:5d:1a:34:0f:ae:4e:0d:66:92:9c: 17:3f:cc:90:d5:ba:70:62:ad:a0:80:a3:08:9b:85: 0f:b5:a1:27:23:f9:ca:eb:10:fa:c1:c7:cb:21:da: 3e:49:9b:60:72:a0:a8:25:33:13:63:13:b7:50:2c: 33:24:8f:de:d7:f1:c1:70:3c:f8:a8:dd:8a:85:30: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:5B:BA:AC:A5:E2:EE:F6:A8:8F:72:9E:8A:52:14:A7:BF:A3:31 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130312e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.101.0/24 Signature Algorithm: sha256WithRSAEncryption 22:87:0a:ba:71:89:a3:de:97:f3:e6:b1:f6:0b:3a:f7:56:cf: d7:5c:2d:14:cf:28:dc:9a:dc:11:78:fb:5f:46:06:12:42:ef: af:de:d5:98:25:a8:4a:9e:e5:e2:ae:88:aa:e1:72:69:d5:c4: 56:f2:88:21:57:f1:e7:49:cf:00:c8:29:3c:c5:82:80:01:ac: 82:b3:59:85:7f:41:77:5c:d6:92:a7:b4:9f:5c:3d:ac:68:24: d8:10:1c:e1:2f:5e:e9:55:46:05:80:f4:c3:5a:62:4b:ec:71: d6:c2:39:08:3e:b0:dd:33:72:95:96:a9:7f:0a:91:82:14:2a: 75:fe:f8:be:28:54:b4:28:85:3f:01:c7:70:c2:40:2d:92:c0: 39:29:f3:77:c5:04:0a:8f:47:68:83:fd:08:fa:4b:65:75:24: 28:3e:ef:15:29:d7:bc:45:85:d4:78:41:b8:1d:70:34:d1:0c: 6e:a3:94:1f:ec:3f:e9:8f:0d:31:44:ee:85:35:5b:ce:41:e8: 00:fc:3c:d8:6a:11:58:fe:c4:5b:e4:86:f4:bf:d6:52:e4:b5: eb:a8:a6:fb:dc:09:fa:24:c4:5a:1c:48:7d:11:a6:cc:8c:d1: 37:cf:3a:2c:ce:40:9e:74:50:2a:82:f8:63:d6:9e:04:07:fa: c1:b3:d2:06 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEhxaVPnn/xXtaqvUQALh4JXpivowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzM4MDRaFw0yNzA2MjcxMzQzMDRaMDMxMTAvBgNV BAMTKERDNTA1QkJBQUNBNUUyRUVGNkE4OEY3MjlFOEE1MjE0QTdCRkEzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUU6cNiOmwEAiem4BN84TO34b ahFhMjBmGojoRNau+y4BOS649ODSK6qMGF5dsHe1AI8ptwPQkRnef+MTcDBhta7r 73ZNWWgFS5x/dFB+dW2mpGvGtX0fF9w4jLcXbUAmA+FgUJzrJapIConVSFT90eDr xo+1yTnaXRH+hHMaXgmiw4rtSPz6guuoqfObeVf9u0NuGNO2pl1Kk7KVTE00BQGs LKRI2S3XPkDVIE+QgkqGK4MH5AUyXRo0D65ODWaSnBc/zJDVunBiraCAowibhQ+1 oScj+crrEPrBx8sh2j5Jm2ByoKglMxNjE7dQLDMkj97X8cFwPPio3YqFMFzJAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU3FBbuqyl4u72qI9ynopSFKe/ozEwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIufZTANBgkqhkiG9w0BAQsFAAOCAQEAIocKunGJo96X8+ax9gs6 91bP11wtFM8o3JrcEXj7X0YGEkLvr97VmCWoSp7l4q6IquFyadXEVvKIIVfx50nP AMgpPMWCgAGsgrNZhX9Bd1zWkqe0n1w9rGgk2BAc4S9e6VVGBYD0w1piS+xx1sI5 CD6w3TNylZapfwqRghQqdf74vihUtCiFPwHHcMJALZLAOSnzd8UECo9HaIP9CPpL ZXUkKD7vFSnXvEWF1HhBuB1wNNEMbqOUH+w/6Y8NMUTuhTVbzkHoAPw82GoRWP7E W+SG9L/WUuS166im+9wJ+iTEWhxIfRGmzIzRN886LM5AnnRQKoL4Y9aeBAf6wbPS Bg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:59 2026 by rpki-client