$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e20313338343231.roa File: 3133392e3135392e3131302e302f32342d3234203d3e20313338343231.roa (raw, json) Hash identifier: JG+ofHqZWv6Nya0a81SKNr/OXpdilEnT5N6Jq+liVKY= Subject key identifier: 83:6B:3F:93:15:B3:74:C1:4A:EC:49:98:7E:80:9E:5C:00:9E:AC:6D Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 25A624D2D545E29FC0C0C59580E78002B1C0358B Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e20313338343231.roa Signing time: Sun 28 Jun 2026 13:46:21 +0000 ROA not before: Sun 28 Jun 2026 13:41:21 +0000 ROA not after: Sun 27 Jun 2027 13:46:21 +0000 asID: 138421 IP address blocks: 139.159.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:24:d2:d5:45:e2:9f:c0:c0:c5:95:80:e7:80:02:b1:c0:35:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:41:21 2026 GMT Not After : Jun 27 13:46:21 2027 GMT Subject: CN=836B3F9315B374C14AEC49987E809E5C009EAC6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:62:df:d5:b1:85:30:ae:b5:74:35:43:63: d8:70:08:1e:74:f2:cf:85:e0:ba:af:5d:4f:a6:1b: ae:17:3d:47:f5:47:f7:d5:5d:15:96:05:f4:fa:e6: f0:75:5e:56:0d:a4:d0:ef:36:6f:c2:11:11:02:54: e1:84:6b:c2:47:ba:79:81:5a:d3:c7:67:36:0d:91: 29:03:94:86:50:b5:04:40:48:63:4e:fa:88:25:10: 69:b2:c1:c1:d5:19:55:44:89:f3:7c:21:39:0e:7e: 06:5d:98:93:60:79:39:79:c3:b9:be:26:c9:96:73: ee:0b:4f:89:2e:c0:31:e9:8c:cd:c0:36:32:63:ea: 52:02:8b:ed:0c:07:73:2a:7f:47:1d:db:3a:a0:46: e9:dc:c2:ce:91:67:36:57:99:52:39:37:96:c7:ed: 13:29:23:ec:6d:4a:bd:11:8c:fd:1a:f5:e9:8d:a7: 36:b7:b6:0d:8a:05:9a:05:74:52:b7:d9:fe:c2:68: 14:c7:96:5f:d8:d5:bb:30:18:22:36:81:11:8e:d8: 9f:91:1e:ba:7d:f0:7d:a0:0d:ce:65:98:90:c8:63: f9:55:ef:be:1c:db:8f:9a:80:cf:01:e3:14:56:55: a0:d8:ee:d7:7c:10:3f:79:46:64:f7:44:97:63:39: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6B:3F:93:15:B3:74:C1:4A:EC:49:98:7E:80:9E:5C:00:9E:AC:6D X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.110.0/24 Signature Algorithm: sha256WithRSAEncryption 17:e4:93:0d:51:8b:85:73:96:2d:16:84:0b:84:88:36:ca:ed: f8:40:1a:2b:b6:5d:7b:a4:68:e2:7c:ba:a2:c1:73:54:57:6e: 37:b1:6a:06:4e:7e:6a:6d:1b:4a:9e:e9:23:0c:c5:f5:3b:98: cc:9a:87:d3:69:52:2b:49:8f:4f:8d:83:30:62:17:99:e0:47: 04:29:fa:78:2f:78:c7:ea:f8:15:c2:cf:5d:3a:2a:01:8f:14: 09:2f:71:92:0e:52:85:4c:61:53:4c:66:dc:93:6a:ad:3f:5b: 8f:47:50:87:4d:5b:a2:ba:ae:12:93:20:80:54:f3:1d:36:da: d7:2e:df:67:9c:d8:6c:2f:e5:0a:ab:9c:27:09:98:e1:f5:51: cf:c3:6a:dc:42:a1:00:fe:fd:48:0b:d8:b9:f7:55:ca:60:4f: b0:69:3e:97:5e:b5:e6:73:27:3f:c2:06:04:29:29:bc:ae:57: f2:75:3c:bb:35:2b:8b:ab:e6:44:99:ba:69:f3:52:89:6f:46: 69:10:bf:07:b0:04:42:e3:41:95:a4:7b:92:89:ee:6e:6a:3c: c5:d9:00:8a:e8:26:37:c6:09:a3:f3:5b:67:75:89:71:a2:d7: 5c:60:4d:a6:83:0d:dd:fe:8d:b8:f4:67:38:7b:7d:e8:3c:6c: f2:ed:10:d6 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUJaYk0tVF4p/AwMWVgOeAArHANYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQxMjFaFw0yNzA2MjcxMzQ2MjFaMDMxMTAvBgNV BAMTKDgzNkIzRjkzMTVCMzc0QzE0QUVDNDk5ODdFODA5RTVDMDA5RUFDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO+mLf1bGFMK61dDVDY9hwCB50 8s+F4LqvXU+mG64XPUf1R/fVXRWWBfT65vB1XlYNpNDvNm/CERECVOGEa8JHunmB WtPHZzYNkSkDlIZQtQRASGNO+oglEGmywcHVGVVEifN8ITkOfgZdmJNgeTl5w7m+ JsmWc+4LT4kuwDHpjM3ANjJj6lICi+0MB3Mqf0cd2zqgRuncws6RZzZXmVI5N5bH 7RMpI+xtSr0RjP0a9emNpza3tg2KBZoFdFK32f7CaBTHll/Y1bswGCI2gRGO2J+R Hrp98H2gDc5lmJDIY/lV774c24+agM8B4xRWVaDY7td8ED95RmT3RJdjOWBPAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUg2s/kxWzdMFK7EmYfoCeXACerG0wHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0LzEvMzEzMzM5MmUz MTM1MzkyZTMxMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIufbjANBgkqhkiG9w0BAQsFAAOCAQEAF+STDVGLhXOWLRaE C4SINsrt+EAaK7Zde6Ro4ny6osFzVFduN7FqBk5+am0bSp7pIwzF9TuYzJqH02lS K0mPT42DMGIXmeBHBCn6eC94x+r4FcLPXToqAY8UCS9xkg5ShUxhU0xm3JNqrT9b j0dQh01borquEpMggFTzHTba1y7fZ5zYbC/lCqucJwmY4fVRz8Nq3EKhAP79SAvY ufdVymBPsGk+l1615nMnP8IGBCkpvK5X8nU8uzUri6vmRJm6afNSiW9GaRC/B7AE QuNBlaR7konubmo8xdkAiugmN8YJo/NbZ3WJcaLXXGBNpoMN3f6NuPRnOHt96Dxs 8u0Q1g== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:59 2026 by rpki-client