$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e3131302e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: u2Xez3m0bNfnhMU7GsmzxlGjpd4PoiGBy06vMNIQco0= Subject key identifier: 29:1E:28:4B:4A:8B:1A:F6:A4:78:F0:17:C9:76:DC:FE:3A:D7:51:BA Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 435A5BCEE616AD1BE34477E8682E6FA119C75D25 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:46:21 +0000 ROA not before: Sun 28 Jun 2026 13:41:21 +0000 ROA not after: Sun 27 Jun 2027 13:46:21 +0000 asID: 63708 IP address blocks: 139.159.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5a:5b:ce:e6:16:ad:1b:e3:44:77:e8:68:2e:6f:a1:19:c7:5d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:41:21 2026 GMT Not After : Jun 27 13:46:21 2027 GMT Subject: CN=291E284B4A8B1AF6A478F017C976DCFE3AD751BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:e3:89:01:b2:cd:79:7d:21:88:64:54:af: cd:44:1b:66:ff:04:ff:e4:97:ef:f2:4f:09:66:4b: 3a:25:13:11:e5:6a:a4:5d:0f:15:84:d0:25:86:2a: 51:ec:bc:ef:28:78:69:6b:5b:8f:ac:c7:20:9f:6d: 0f:3a:06:96:89:f0:d2:eb:75:a6:5c:fd:6c:54:7c: 34:78:76:85:c1:1a:79:d1:7f:5f:72:44:6f:36:e6: d6:7d:33:d0:f5:a8:42:96:e6:4f:be:60:7d:58:21: 48:42:f8:6c:f9:d2:d8:65:c6:83:1f:bc:ca:38:06: 40:f1:7f:21:e4:4f:df:0b:38:1d:d7:9a:90:f6:aa: 78:4f:0e:82:3e:2d:7d:95:6c:2a:d4:da:8f:45:26: 1d:a4:8d:6f:c2:63:7a:11:a9:33:c5:dd:6b:5d:a1: 39:55:7b:25:8b:ac:5e:28:9a:fe:56:87:82:e8:f8: e4:f1:15:df:23:dc:a8:f3:b7:15:a9:6a:25:6c:39: 8f:1b:c4:c0:ec:56:a0:e4:e9:25:36:27:be:2a:df: b6:8b:0c:3b:ff:d6:92:b4:ce:37:45:6c:28:9b:77: b7:bc:34:a1:84:7f:c1:76:5b:81:0e:e3:83:10:3b: 91:b1:ce:ec:00:6c:e0:2a:f8:19:ee:87:66:c8:57: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1E:28:4B:4A:8B:1A:F6:A4:78:F0:17:C9:76:DC:FE:3A:D7:51:BA X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.110.0/24 Signature Algorithm: sha256WithRSAEncryption 66:b5:f4:fa:3d:9b:cf:58:1f:57:88:70:18:8e:10:d2:57:1d: a9:7f:fa:cc:ec:a6:ab:00:f3:34:46:3d:58:27:06:d1:57:2c: b2:de:3b:4e:da:7a:8b:27:6f:b9:e2:7d:dd:9c:6a:6a:d9:35: ee:3f:7d:c1:5f:b2:2f:c1:4e:0d:95:42:29:89:e6:b4:d2:4e: c2:9e:50:ff:7e:a3:5d:f0:63:ef:47:19:6b:89:fa:ad:9f:82: e1:c7:ff:08:d1:9e:9b:42:09:99:04:00:0e:1c:bd:53:74:f4: 41:d1:dd:81:62:d2:8d:35:45:5c:58:81:97:3c:1a:6a:a8:9c: 5e:df:99:a4:c3:ac:bb:e9:57:b0:88:5e:03:f3:0b:dd:6a:48: 1e:aa:d6:4b:07:92:5f:74:6a:01:b9:e4:6d:f1:f1:94:02:29: e1:63:18:5d:c3:77:b8:c6:7e:91:58:e2:03:45:d4:17:da:c3: 73:f0:f1:49:c9:68:f4:96:f2:3a:54:03:dc:30:71:c2:11:80: 12:39:de:56:50:98:be:14:4f:9c:b3:20:c7:f2:39:bc:8f:29: c6:4f:b2:a2:7c:4d:da:c0:e5:b5:78:8d:0b:28:03:d5:08:09: d0:e3:15:9f:5f:ae:ab:7d:e3:64:f4:be:8e:db:b7:86:70:8d: de:63:b3:d3 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQ1pbzuYWrRvjRHfoaC5voRnHXSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQxMjFaFw0yNzA2MjcxMzQ2MjFaMDMxMTAvBgNV BAMTKDI5MUUyODRCNEE4QjFBRjZBNDc4RjAxN0M5NzZEQ0ZFM0FENzUxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYtOOJAbLNeX0hiGRUr81EG2b/ BP/kl+/yTwlmSzolExHlaqRdDxWE0CWGKlHsvO8oeGlrW4+sxyCfbQ86BpaJ8NLr daZc/WxUfDR4doXBGnnRf19yRG825tZ9M9D1qEKW5k++YH1YIUhC+Gz50thlxoMf vMo4BkDxfyHkT98LOB3XmpD2qnhPDoI+LX2VbCrU2o9FJh2kjW/CY3oRqTPF3Wtd oTlVeyWLrF4omv5Wh4Lo+OTxFd8j3KjztxWpaiVsOY8bxMDsVqDk6SU2J74q37aL DDv/1pK0zjdFbCibd7e8NKGEf8F2W4EO44MQO5GxzuwAbOAq+Bnuh2bIV+GfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUKR4oS0qLGvakePAXyXbc/jrXUbowHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzEzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAIufbjANBgkqhkiG9w0BAQsFAAOCAQEAZrX0+j2bz1gfV4hwGI4Q 0lcdqX/6zOymqwDzNEY9WCcG0Vcsst47Ttp6iydvueJ93Zxqatk17j99wV+yL8FO DZVCKYnmtNJOwp5Q/36jXfBj70cZa4n6rZ+C4cf/CNGem0IJmQQADhy9U3T0QdHd gWLSjTVFXFiBlzwaaqicXt+ZpMOsu+lXsIheA/ML3WpIHqrWSweSX3RqAbnkbfHx lAIp4WMYXcN3uMZ+kVjiA0XUF9rDc/DxSclo9JbyOlQD3DBxwhGAEjneVlCYvhRP nLMgx/I5vI8pxk+yonxN2sDltXiNCygD1QgJ0OMVn1+uq33jZPS+jtu3hnCN3mOz 0w== -----END CERTIFICATE-----Generated at Tue Jul 21 23:26:00 2026 by rpki-client