$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130362e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e3130362e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: UIQv1mA4sp0Ja1nj+FnOC4Rwma+IEtdo3LEFL7OQeO0= Subject key identifier: 19:90:C4:27:7F:37:9B:09:C0:83:ED:B3:CC:AB:D5:1C:CE:10:E5:B7 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 62966BB97F568953CF3BA3B9A6C2182016869AA5 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130362e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:44:09 +0000 ROA not before: Sun 28 Jun 2026 13:39:09 +0000 ROA not after: Sun 27 Jun 2027 13:44:09 +0000 asID: 63708 IP address blocks: 139.159.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:96:6b:b9:7f:56:89:53:cf:3b:a3:b9:a6:c2:18:20:16:86:9a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:39:09 2026 GMT Not After : Jun 27 13:44:09 2027 GMT Subject: CN=1990C4277F379B09C083EDB3CCABD51CCE10E5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:0b:f7:bc:87:b1:5f:07:34:1c:c8:bf:62: fd:ce:33:77:57:d2:97:7c:60:27:69:62:ca:d8:94: 38:c2:0e:27:3e:8f:48:f2:2c:5f:b4:b9:2c:bc:d1: 96:74:79:cd:b3:4c:99:23:27:dd:46:bd:70:7f:e9: 27:04:cd:6f:f8:b3:0d:59:19:87:40:a2:05:ad:ee: 94:d8:cb:00:19:2a:26:5a:67:21:23:b9:5d:69:56: 5b:be:af:4d:47:f0:ee:6f:98:f7:3c:53:1c:28:51: b9:22:29:01:d2:eb:d9:c4:e7:3e:df:c2:ba:fd:76: b6:d3:61:1b:bc:6d:a4:4e:ff:40:43:e4:d6:41:a8: 62:40:26:44:84:1e:3d:38:6f:45:cd:90:74:d6:93: 4b:3a:03:21:f1:0d:a6:63:3c:f9:43:ea:fb:d6:af: ad:f7:97:30:90:e8:8d:48:5a:b5:ff:b4:10:36:e1: 5d:77:61:dc:19:98:1a:69:de:cf:48:0b:a2:fe:20: 67:f9:45:d6:3a:6f:9b:09:d6:ef:ab:57:dd:b2:3a: 3d:f3:38:72:7b:79:61:02:af:00:5e:37:9f:cd:df: ec:bf:9b:c4:87:be:e6:89:1a:5a:8f:ea:09:16:10: c7:77:47:f7:89:93:cf:e5:95:17:bc:8d:d3:dc:95: f0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:C4:27:7F:37:9B:09:C0:83:ED:B3:CC:AB:D5:1C:CE:10:E5:B7 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130362e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.106.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:2b:26:7c:f5:75:3a:2d:83:6a:6d:dd:7b:67:85:73:cb:6e: 43:45:1f:90:69:4e:72:cf:df:53:59:4c:76:0d:df:2c:0d:cd: 5e:78:75:09:d5:93:30:86:ff:81:c3:a9:3d:12:25:a4:cd:57: d5:36:80:26:32:3c:ea:7a:c5:c0:11:87:3a:46:a6:9d:5a:ab: 09:f3:ca:b3:7e:d8:f4:12:9c:1d:ce:dc:37:11:50:2b:e0:fc: ef:41:a3:a7:04:a5:74:68:2e:c0:f7:5d:6f:23:95:d8:f6:91: 4c:f7:f1:28:50:86:a5:aa:ed:ac:a4:ab:1e:38:e5:bf:84:48: 18:85:4a:85:35:f0:ac:e9:ce:57:91:78:b8:57:7b:35:fe:2d: e1:08:81:93:58:da:fd:4e:aa:c8:dc:1e:1c:32:a7:dc:66:f7: cc:a2:53:dc:00:d9:7d:99:f8:5f:17:d1:b0:48:ff:88:4c:0e: eb:26:8c:84:d2:2a:a7:c4:5d:4b:3e:ed:c0:27:60:ed:a2:38: f9:7d:fe:46:79:53:79:27:f5:6a:eb:6c:2e:43:6d:67:05:66: 35:23:88:35:0d:e1:c2:16:dd:a3:ad:d1:e3:8f:d1:75:31:9d: 3e:16:76:4d:94:34:c2:30:ae:5a:fc:93:0f:5e:ea:f2:a5:05: 16:aa:f0:ea -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYpZruX9WiVPPO6O5psIYIBaGmqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzM5MDlaFw0yNzA2MjcxMzQ0MDlaMDMxMTAvBgNV BAMTKDE5OTBDNDI3N0YzNzlCMDlDMDgzRURCM0NDQUJENTFDQ0UxMEU1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqQv3vIexXwc0HMi/Yv3OM3dX 0pd8YCdpYsrYlDjCDic+j0jyLF+0uSy80ZZ0ec2zTJkjJ91GvXB/6ScEzW/4sw1Z GYdAogWt7pTYywAZKiZaZyEjuV1pVlu+r01H8O5vmPc8UxwoUbkiKQHS69nE5z7f wrr9drbTYRu8baRO/0BD5NZBqGJAJkSEHj04b0XNkHTWk0s6AyHxDaZjPPlD6vvW r633lzCQ6I1IWrX/tBA24V13YdwZmBpp3s9IC6L+IGf5RdY6b5sJ1u+rV92yOj3z OHJ7eWECrwBeN5/N3+y/m8SHvuaJGlqP6gkWEMd3R/eJk8/llRe8jdPclfCNAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGZDEJ383mwnAg+2zzKvVHM4Q5bcwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIufajANBgkqhkiG9w0BAQsFAAOCAQEAfSsmfPV1Oi2Dam3de2eF c8tuQ0UfkGlOcs/fU1lMdg3fLA3NXnh1CdWTMIb/gcOpPRIlpM1X1TaAJjI86nrF wBGHOkamnVqrCfPKs37Y9BKcHc7cNxFQK+D870GjpwSldGguwPddbyOV2PaRTPfx KFCGpartrKSrHjjlv4RIGIVKhTXwrOnOV5F4uFd7Nf4t4QiBk1ja/U6qyNweHDKn 3Gb3zKJT3ADZfZn4XxfRsEj/iEwO6yaMhNIqp8RdSz7twCdg7aI4+X3+RnlTeSf1 autsLkNtZwVmNSOINQ3hwhbdo63R44/RdTGdPhZ2TZQ0wjCuWvyTD17q8qUFFqrw 6g== -----END CERTIFICATE-----Generated at Tue Jul 21 23:26:00 2026 by rpki-client