$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32332d3233203d3e20313338343231.roa File: 3133392e3135392e3130382e302f32332d3233203d3e20313338343231.roa (raw, json) Hash identifier: rsd8hv6JPmkROh9GULWwX6M33deol6uYMMfNJByQ57g= Subject key identifier: 51:82:BC:C4:03:7B:33:73:BE:3F:EE:77:06:DF:C8:A4:31:F5:73:C3 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 6C8DCB35314584CB14E69308C8C42752E80A1CD4 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32332d3233203d3e20313338343231.roa Signing time: Sun 28 Jun 2026 13:45:00 +0000 ROA not before: Sun 28 Jun 2026 13:40:00 +0000 ROA not after: Sun 27 Jun 2027 13:45:00 +0000 asID: 138421 IP address blocks: 139.159.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8d:cb:35:31:45:84:cb:14:e6:93:08:c8:c4:27:52:e8:0a:1c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:40:00 2026 GMT Not After : Jun 27 13:45:00 2027 GMT Subject: CN=5182BCC4037B3373BE3FEE7706DFC8A431F573C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:a6:88:45:fb:3b:61:82:83:de:7f:53:ea: 22:f7:34:cf:e8:b8:a4:3b:6a:f0:a5:da:0e:9c:31: 59:04:29:3f:6c:6b:1a:3f:39:3e:c4:5a:a3:3a:8d: be:d2:49:a2:8b:0f:12:3b:d1:e4:74:8c:67:e4:c0: ed:30:ca:73:d7:e5:af:c7:c0:f1:d0:75:5b:97:89: 62:56:93:01:4e:bf:ca:6d:57:b7:5f:ef:e6:7e:55: f3:5e:ef:53:c8:ea:ac:65:57:f1:aa:5f:6f:63:dc: ed:df:6f:c7:c9:2e:3a:2f:f2:55:77:cb:fa:c6:4d: 2f:9b:d8:a2:3b:8c:12:76:87:ba:b2:a9:99:6b:29: 8b:fc:b3:65:6b:80:dc:b7:8a:d9:7e:8d:7f:f4:65: 46:d8:62:81:b4:2d:57:60:1c:dc:6d:e0:af:27:72: b2:cf:a1:5f:39:76:c8:3b:49:a8:67:d9:bc:76:d6: 71:44:d5:3c:c5:d4:44:ca:27:6b:ee:1a:4e:8a:1a: dc:50:04:08:ae:6d:13:39:a4:6a:df:16:ff:20:8a: 13:36:f8:0e:33:0c:44:15:60:47:9f:1b:f9:05:bb: ce:31:f2:a4:31:2d:8e:72:3b:ec:bb:f8:8d:42:6d: fd:78:28:e9:96:22:81:78:cb:d6:a0:ad:a7:d6:f1: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:82:BC:C4:03:7B:33:73:BE:3F:EE:77:06:DF:C8:A4:31:F5:73:C3 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32332d3233203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.108.0/23 Signature Algorithm: sha256WithRSAEncryption 84:c8:5e:5e:40:f9:e5:16:3e:7e:df:32:fd:87:a6:e7:ef:2e: be:41:20:00:b4:50:38:1a:3a:67:92:e0:51:ec:1d:6c:22:18: a6:3c:7c:68:f2:3f:7f:ba:38:7e:18:01:64:80:62:8c:72:a4: b7:79:6c:9f:37:44:c8:5e:29:62:c6:36:cb:b2:21:c9:fb:67: a2:82:b3:11:fc:86:a7:f7:ae:58:1e:aa:c0:79:0a:55:b6:5c: 0c:66:a8:1f:4a:6f:82:d0:97:52:38:73:0e:a0:5f:c4:79:86: 63:e3:e7:cc:9d:d6:ba:9f:3b:e1:ed:f9:d4:3c:be:88:f0:41: cb:3e:29:b5:7f:b9:1e:60:93:10:19:d6:cc:81:6a:a9:01:16: fa:35:39:ea:d7:38:aa:50:d3:ab:58:46:ba:22:21:37:b9:9a: 07:0d:dc:d0:0f:46:94:1a:e9:f1:27:8a:5f:77:19:c4:09:51: 6d:c3:9c:b6:d1:27:59:21:23:7d:7b:30:cc:c6:4b:e8:0f:6c: 0a:11:ad:42:34:6b:cd:06:78:8c:f2:f9:29:e0:2e:c4:3c:1f: bf:4d:92:d7:ee:21:74:48:b2:8d:6b:14:ce:11:ba:b0:94:9e: d2:3d:e7:09:16:22:0c:e7:e3:3c:39:a6:90:7a:bb:5f:74:0e: 9d:a2:e3:21 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUbI3LNTFFhMsU5pMIyMQnUugKHNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQwMDBaFw0yNzA2MjcxMzQ1MDBaMDMxMTAvBgNV BAMTKDUxODJCQ0M0MDM3QjMzNzNCRTNGRUU3NzA2REZDOEE0MzFGNTczQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uKaIRfs7YYKD3n9T6iL3NM/o uKQ7avCl2g6cMVkEKT9saxo/OT7EWqM6jb7SSaKLDxI70eR0jGfkwO0wynPX5a/H wPHQdVuXiWJWkwFOv8ptV7df7+Z+VfNe71PI6qxlV/GqX29j3O3fb8fJLjov8lV3 y/rGTS+b2KI7jBJ2h7qyqZlrKYv8s2VrgNy3itl+jX/0ZUbYYoG0LVdgHNxt4K8n crLPoV85dsg7Sahn2bx21nFE1TzF1ETKJ2vuGk6KGtxQBAiubRM5pGrfFv8gihM2 +A4zDEQVYEefG/kFu84x8qQxLY5yO+y7+I1Cbf14KOmWIoF4y9agrafW8avNAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUUYK8xAN7M3O+P+53Bt/IpDH1c8MwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0LzEvMzEzMzM5MmUz MTM1MzkyZTMxMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYufbDANBgkqhkiG9w0BAQsFAAOCAQEAhMheXkD55RY+ft8y /Yem5+8uvkEgALRQOBo6Z5LgUewdbCIYpjx8aPI/f7o4fhgBZIBijHKkt3lsnzdE yF4pYsY2y7IhyftnooKzEfyGp/euWB6qwHkKVbZcDGaoH0pvgtCXUjhzDqBfxHmG Y+PnzJ3Wup874e351Dy+iPBByz4ptX+5HmCTEBnWzIFqqQEW+jU56tc4qlDTq1hG uiIhN7maBw3c0A9GlBrp8SeKX3cZxAlRbcOcttEnWSEjfXswzMZL6A9sChGtQjRr zQZ4jPL5KeAuxDwfv02S1+4hdEiyjWsUzhG6sJSe0j3nCRYiDOfjPDmmkHq7X3QO naLjIQ== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:49 2026 by rpki-client