$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130352e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e3130352e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: Y/HRKKEIR7UleP09f7lkKz1BNIEUBa6vHIby0sRsre0= Subject key identifier: BB:DF:0C:34:B0:26:02:99:BE:A8:E3:1B:94:A6:88:4F:0F:72:0D:E0 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 0E4B9063F4704B6A4B9A4F4BF1207849B05176D2 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130352e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:44:09 +0000 ROA not before: Sun 28 Jun 2026 13:39:09 +0000 ROA not after: Sun 27 Jun 2027 13:44:09 +0000 asID: 63708 IP address blocks: 139.159.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4b:90:63:f4:70:4b:6a:4b:9a:4f:4b:f1:20:78:49:b0:51:76:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:39:09 2026 GMT Not After : Jun 27 13:44:09 2027 GMT Subject: CN=BBDF0C34B0260299BEA8E31B94A6884F0F720DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:39:50:b2:2c:6c:9a:bb:c5:a2:4b:56:17: e2:46:b1:77:8e:89:27:34:79:21:42:e2:90:84:89: 9f:43:b3:26:55:9a:d6:4e:77:b9:3f:e5:a6:83:cd: 47:37:0c:64:24:88:cb:bb:fb:80:7c:04:b7:43:d2: be:9d:a2:26:e0:bd:c4:6b:46:7c:1f:0d:09:b8:7b: 10:6c:60:fa:a3:3b:72:80:e7:b0:a8:59:7a:b8:54: 80:83:d4:b1:ac:c0:6f:47:ac:e5:f6:9b:84:b3:fc: cf:22:b4:12:bb:af:82:38:20:52:91:cb:a5:56:79: 0c:41:d4:b1:60:21:68:f5:c0:4d:60:4a:b7:56:76: 85:60:0f:2c:07:0d:07:6f:fd:5b:21:6b:e2:fe:db: e7:21:25:52:96:02:ae:ab:d4:ab:4d:52:7f:86:3c: a3:91:ad:5d:2c:4f:aa:80:59:f5:a8:a5:a7:49:6c: 98:8e:b6:c7:06:0c:98:b3:1f:2e:35:70:37:03:07: 5c:3c:98:4c:d2:5c:bd:68:d6:40:00:84:e2:8a:01: 60:e9:04:96:7a:1f:2b:11:53:0d:a5:49:20:9b:04: 5f:fc:83:24:7a:54:71:90:e8:ea:fa:f1:c1:c8:87: d4:74:f3:cd:e8:9a:cd:53:e1:ad:6b:b2:73:75:c1: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DF:0C:34:B0:26:02:99:BE:A8:E3:1B:94:A6:88:4F:0F:72:0D:E0 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130352e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.105.0/24 Signature Algorithm: sha256WithRSAEncryption aa:3f:20:12:c7:db:33:b4:a3:7e:cd:f5:44:94:1a:27:5b:48: b5:04:48:a1:c5:b6:f7:52:11:5b:d5:fb:4c:96:9e:21:b6:1d: 25:50:cf:e7:00:a0:05:d7:ed:94:d2:1c:24:fc:2a:68:94:2a: fe:a6:f0:64:d9:c7:60:73:48:45:92:1e:38:31:26:48:8c:f1: 39:0a:b9:23:01:bb:13:fd:2f:79:24:ea:fd:b2:22:0c:52:84: ac:0e:49:67:48:00:b6:2f:97:80:2b:d9:6b:1f:60:25:32:13: cf:4d:c0:0e:ef:9d:83:70:34:8e:a6:3c:7b:12:f5:15:22:36: 57:06:4a:24:c9:d3:03:03:ac:d9:d4:d6:d1:5d:e6:ec:ef:c1: d1:f3:8b:ae:ca:ba:ad:1e:ce:a3:57:88:dc:31:f0:84:97:1c: e3:57:ce:9e:7f:31:87:29:0f:6d:93:ed:cd:e0:49:db:73:aa: 32:13:a0:c7:6c:6d:6d:98:c3:f3:94:99:9d:ac:1e:c9:75:5a: af:27:3a:6c:7e:b3:1e:77:b7:cc:f9:10:b9:a9:3d:40:4a:cc: 9d:50:bf:83:9d:9b:e4:92:45:ef:6b:5b:06:7c:1d:c7:74:e7: 83:e0:23:cf:51:0e:33:f3:7d:d9:7e:ce:0b:31:a6:74:a1:7b: 91:d9:b1:ed -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDkuQY/RwS2pLmk9L8SB4SbBRdtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzM5MDlaFw0yNzA2MjcxMzQ0MDlaMDMxMTAvBgNV BAMTKEJCREYwQzM0QjAyNjAyOTlCRUE4RTMxQjk0QTY4ODRGMEY3MjBERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxjlQsixsmrvFoktWF+JGsXeO iSc0eSFC4pCEiZ9DsyZVmtZOd7k/5aaDzUc3DGQkiMu7+4B8BLdD0r6doibgvcRr RnwfDQm4exBsYPqjO3KA57CoWXq4VICD1LGswG9HrOX2m4Sz/M8itBK7r4I4IFKR y6VWeQxB1LFgIWj1wE1gSrdWdoVgDywHDQdv/Vsha+L+2+chJVKWAq6r1KtNUn+G PKORrV0sT6qAWfWopadJbJiOtscGDJizHy41cDcDB1w8mEzSXL1o1kAAhOKKAWDp BJZ6HysRUw2lSSCbBF/8gyR6VHGQ6Or68cHIh9R0883oms1T4a1rsnN1wVa7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUu98MNLAmApm+qOMblKaITw9yDeAwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIufaTANBgkqhkiG9w0BAQsFAAOCAQEAqj8gEsfbM7Sjfs31RJQa J1tItQRIocW291IRW9X7TJaeIbYdJVDP5wCgBdftlNIcJPwqaJQq/qbwZNnHYHNI RZIeODEmSIzxOQq5IwG7E/0veSTq/bIiDFKErA5JZ0gAti+XgCvZax9gJTITz03A Du+dg3A0jqY8exL1FSI2VwZKJMnTAwOs2dTW0V3m7O/B0fOLrsq6rR7Oo1eI3DHw hJcc41fOnn8xhykPbZPtzeBJ23OqMhOgx2xtbZjD85SZnaweyXVaryc6bH6zHne3 zPkQuak9QErMnVC/g52b5JJF72tbBnwdx3Tng+Ajz1EOM/N92X7OCzGmdKF7kdmx 7Q== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:59 2026 by rpki-client