$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130322e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e3130322e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: kC1xWwPv/msbk1bEB0tkdT5MJnnsiK1mSu4ol7LJar0= Subject key identifier: 96:BE:CD:65:C6:89:D7:69:72:6E:6B:B2:3E:07:7D:D7:8F:C1:F2:B4 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 6BE48D3D6F7E75EE4716D8C0CA41772558C1E58E Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130322e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:43:04 +0000 ROA not before: Sun 28 Jun 2026 13:38:04 +0000 ROA not after: Sun 27 Jun 2027 13:43:04 +0000 asID: 63708 IP address blocks: 139.159.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e4:8d:3d:6f:7e:75:ee:47:16:d8:c0:ca:41:77:25:58:c1:e5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:38:04 2026 GMT Not After : Jun 27 13:43:04 2027 GMT Subject: CN=96BECD65C689D769726E6BB23E077DD78FC1F2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:35:51:d7:ac:d3:70:9a:64:8c:fc:69:02: 64:03:9d:92:3d:85:a9:93:90:21:58:c2:93:af:a6: 3a:68:6d:16:c0:8d:8b:9e:1d:3c:e6:e4:43:2a:de: 2f:1a:c3:8e:b3:33:0b:78:d4:e7:a2:e4:01:bf:f0: c2:b8:51:38:83:07:2e:7d:08:14:1a:f5:b0:74:5d: 4a:6c:90:f7:8b:30:f9:15:a5:7e:d3:58:5a:e5:71: 92:d1:9f:ca:86:89:22:46:c5:cb:5b:12:11:10:79: 3d:70:50:f2:77:2c:b4:31:d4:21:ec:99:9f:40:d8: aa:dc:de:87:0b:49:94:dd:84:ec:13:a4:e4:4f:00: 5b:75:14:5f:3a:07:b6:31:1f:28:c5:75:3f:0f:80: 5e:b1:86:b1:1a:28:50:71:e8:45:c6:15:f1:42:ad: f3:14:5c:e0:26:8a:0c:83:26:79:a2:28:6d:66:18: d8:01:85:f9:55:a1:8c:06:08:de:f4:0c:f0:4d:d4: ad:ca:de:a0:de:75:14:86:63:9c:0a:3f:9f:77:db: 66:54:9f:63:ad:ab:05:62:a3:81:7a:6a:26:56:01: 22:ac:0c:3a:eb:20:13:14:88:d1:98:ec:07:e2:a4: 02:c1:7f:f2:18:75:75:4c:f4:5f:c9:37:a2:a6:3b: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BE:CD:65:C6:89:D7:69:72:6E:6B:B2:3E:07:7D:D7:8F:C1:F2:B4 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130322e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.102.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:fc:e2:e3:ff:d3:ee:14:cb:ff:e8:ef:22:3d:55:5a:8b:b3: 11:5f:13:6e:8e:ff:cd:bd:10:4d:df:27:9c:b6:1b:a4:ed:e1: a1:db:61:7d:fa:09:97:dc:f8:6a:4d:d8:74:61:9b:12:48:7c: 62:f3:99:06:47:43:d0:ac:2a:68:25:2d:99:c9:f1:0e:ed:a3: 08:0f:e1:e3:c3:cb:07:af:69:00:a2:7a:fe:d8:47:6b:f9:7d: 1c:76:92:81:03:d7:0e:46:ad:f2:0b:1b:2b:12:2c:d6:1b:43: 26:9f:d3:70:4a:bb:ab:6d:a3:f9:03:bd:75:50:00:60:cd:03: 21:96:ce:35:39:3e:7b:a9:b3:82:c7:38:66:18:6a:b7:ad:98: 51:7d:5f:8a:2e:dc:79:2b:c2:54:7e:16:ce:1a:1e:5c:2d:bd: 1f:1c:1f:6a:5b:21:6e:94:a3:5e:77:f8:f6:c4:db:a8:51:e7: 51:b1:13:1c:8d:3b:1f:af:ad:19:c1:60:4f:d2:ae:fa:ea:b5: 83:f2:03:65:bf:6b:0c:ec:22:d6:95:45:05:50:76:ab:3f:82: 16:e8:99:0c:1e:cb:11:22:87:34:1d:02:4c:d2:b7:0b:94:61: 1e:85:88:ca:0a:93:03:c6:a8:1d:21:80:3b:1e:eb:de:98:a8: 3e:31:58:a8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUa+SNPW9+de5HFtjAykF3JVjB5Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzM4MDRaFw0yNzA2MjcxMzQzMDRaMDMxMTAvBgNV BAMTKDk2QkVDRDY1QzY4OUQ3Njk3MjZFNkJCMjNFMDc3REQ3OEZDMUYyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDDVR16zTcJpkjPxpAmQDnZI9 hamTkCFYwpOvpjpobRbAjYueHTzm5EMq3i8aw46zMwt41Oei5AG/8MK4UTiDBy59 CBQa9bB0XUpskPeLMPkVpX7TWFrlcZLRn8qGiSJGxctbEhEQeT1wUPJ3LLQx1CHs mZ9A2Krc3ocLSZTdhOwTpORPAFt1FF86B7YxHyjFdT8PgF6xhrEaKFBx6EXGFfFC rfMUXOAmigyDJnmiKG1mGNgBhflVoYwGCN70DPBN1K3K3qDedRSGY5wKP59322ZU n2OtqwVio4F6aiZWASKsDDrrIBMUiNGY7AfipALBf/IYdXVM9F/JN6KmO8GZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUlr7NZcaJ12lybmuyPgd914/B8rQwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIufZjANBgkqhkiG9w0BAQsFAAOCAQEAm/zi4//T7hTL/+jvIj1V WouzEV8Tbo7/zb0QTd8nnLYbpO3hodthffoJl9z4ak3YdGGbEkh8YvOZBkdD0Kwq aCUtmcnxDu2jCA/h48PLB69pAKJ6/thHa/l9HHaSgQPXDkat8gsbKxIs1htDJp/T cEq7q22j+QO9dVAAYM0DIZbONTk+e6mzgsc4Zhhqt62YUX1fii7ceSvCVH4Wzhoe XC29HxwfalshbpSjXnf49sTbqFHnUbETHI07H6+tGcFgT9Ku+uq1g/IDZb9rDOwi 1pVFBVB2qz+CFuiZDB7LESKHNB0CTNK3C5RhHoWIygqTA8aoHSGAOx7r3pioPjFY qA== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:59 2026 by rpki-client