$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130332e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e3130332e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: jhpfKk6QWasZI5w9Pwpf8UdiCqjatU2c7+WQ4690LoQ= Subject key identifier: 52:98:3B:7D:5E:D0:3A:BB:C1:DF:48:CF:06:3C:6A:F0:B9:2A:89:A2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 32FB1C590B6E4839F20F6A0E456C2B9DDCC4D319 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130332e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:43:04 +0000 ROA not before: Sun 28 Jun 2026 13:38:04 +0000 ROA not after: Sun 27 Jun 2027 13:43:04 +0000 asID: 63708 IP address blocks: 139.159.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fb:1c:59:0b:6e:48:39:f2:0f:6a:0e:45:6c:2b:9d:dc:c4:d3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:38:04 2026 GMT Not After : Jun 27 13:43:04 2027 GMT Subject: CN=52983B7D5ED03ABBC1DF48CF063C6AF0B92A89A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:59:c0:f6:bd:f5:41:ab:cd:87:23:c0:e9: cf:27:e7:12:43:ea:dc:54:43:8d:72:a1:9e:fe:9e: 60:5a:59:97:02:a9:22:63:08:4a:0e:1f:31:49:a5: af:b9:91:9b:b7:01:a7:89:7c:f8:d2:df:ce:00:8e: 4d:c4:5e:19:8d:33:c1:14:37:ad:66:9e:15:a8:3f: 75:9e:40:3a:2d:50:54:e0:3d:4f:78:8e:39:fe:82: 4c:27:68:56:aa:c8:a0:79:dc:40:4c:be:fd:f8:15: d1:f5:e9:ab:81:6e:20:cf:49:d0:c2:4c:20:98:df: 65:f5:3d:46:8c:15:b4:8f:45:20:4e:78:a9:db:ab: 46:d9:b1:90:96:62:87:90:fc:a4:85:1d:cf:67:c6: 66:ae:a6:7b:83:27:b1:2b:13:37:ea:b0:11:34:01: 81:d9:9e:c5:ee:5b:c9:68:c2:0f:8a:e5:47:3e:4d: d3:01:e1:ac:46:22:4f:50:a8:e0:35:2d:db:12:d8: 0c:6e:9e:77:f6:04:df:c7:5f:b3:a6:30:cb:8e:0b: b5:d4:a3:82:ad:0d:d0:a4:34:7b:02:03:a4:c8:48: a0:4e:5d:7a:70:d1:34:14:28:29:89:a2:83:d6:3b: e5:67:4b:cf:a9:0d:a9:7d:22:8e:f4:36:cb:ec:b1: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:3B:7D:5E:D0:3A:BB:C1:DF:48:CF:06:3C:6A:F0:B9:2A:89:A2 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130332e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.103.0/24 Signature Algorithm: sha256WithRSAEncryption af:da:67:1d:25:28:f7:bf:4d:1c:a5:51:d7:33:e2:29:58:bd: f0:b5:25:c4:78:a2:8f:4c:d1:b5:8e:34:15:35:dc:6a:8c:50: ba:e9:74:62:7e:cc:c9:d9:cb:68:c3:f1:f1:46:6c:21:51:4f: e8:a7:70:7a:4f:5f:88:f8:09:09:50:b3:1f:f6:41:fd:4e:23: 19:e2:83:56:fb:a7:95:69:96:ff:69:1f:37:ff:b4:84:41:45: a6:48:88:3c:2a:83:73:3f:df:34:02:86:44:92:92:6b:30:d2: e1:f2:5c:0a:76:fd:e3:f2:33:0c:ca:93:9d:e8:35:ca:d8:8a: 24:39:bc:6e:65:68:b3:7d:60:3b:74:0b:13:71:fa:a9:d6:c8: c5:de:d4:f6:56:28:10:c3:5c:d2:35:7d:01:e0:9e:21:fd:ca: bd:c6:c0:f6:ae:a5:98:6c:49:f2:83:fe:2d:1f:bb:f6:16:33: f5:ea:19:a3:cd:0f:46:93:7b:d8:b6:5a:39:ac:e0:c7:86:d8: bb:c5:10:6a:23:31:fc:b7:d6:c1:3a:7b:68:9d:df:75:68:4c: 1a:ff:7a:1f:e1:68:28:cf:4f:ea:85:63:0a:51:3b:76:91:b7: 2a:cf:2c:96:84:df:b7:91:55:5a:e5:8a:c3:c2:a3:d3:7d:ef: e2:d3:24:ce -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMvscWQtuSDnyD2oORWwrndzE0xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzM4MDRaFw0yNzA2MjcxMzQzMDRaMDMxMTAvBgNV BAMTKDUyOTgzQjdENUVEMDNBQkJDMURGNDhDRjA2M0M2QUYwQjkyQTg5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4p1nA9r31QavNhyPA6c8n5xJD 6txUQ41yoZ7+nmBaWZcCqSJjCEoOHzFJpa+5kZu3AaeJfPjS384Ajk3EXhmNM8EU N61mnhWoP3WeQDotUFTgPU94jjn+gkwnaFaqyKB53EBMvv34FdH16auBbiDPSdDC TCCY32X1PUaMFbSPRSBOeKnbq0bZsZCWYoeQ/KSFHc9nxmaupnuDJ7ErEzfqsBE0 AYHZnsXuW8lowg+K5Uc+TdMB4axGIk9QqOA1LdsS2Axunnf2BN/HX7OmMMuOC7XU o4KtDdCkNHsCA6TISKBOXXpw0TQUKCmJooPWO+VnS8+pDal9Io70NsvssXuHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUUpg7fV7QOrvB30jPBjxq8LkqiaIwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIufZzANBgkqhkiG9w0BAQsFAAOCAQEAr9pnHSUo979NHKVR1zPi KVi98LUlxHiij0zRtY40FTXcaoxQuul0Yn7MydnLaMPx8UZsIVFP6Kdwek9fiPgJ CVCzH/ZB/U4jGeKDVvunlWmW/2kfN/+0hEFFpkiIPCqDcz/fNAKGRJKSazDS4fJc Cnb94/IzDMqTneg1ytiKJDm8bmVos31gO3QLE3H6qdbIxd7U9lYoEMNc0jV9AeCe If3KvcbA9q6lmGxJ8oP+LR+79hYz9eoZo80PRpN72LZaOazgx4bYu8UQaiMx/LfW wTp7aJ3fdWhMGv96H+FoKM9P6oVjClE7dpG3Ks8sloTft5FVWuWKw8Kj033v4tMk zg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:48 2026 by rpki-client