$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32322d3232203d3e20313338393530.roa File: 3133392e3135392e3131322e302f32322d3232203d3e20313338393530.roa (raw, json) Hash identifier: vrHJbpS1WoPqsIGjbxG4OKWUWtqhy6FK9nCYFD8ijJQ= Subject key identifier: 4B:41:CE:EF:59:AE:45:9F:55:D3:F5:6E:96:72:83:83:8D:EC:19:2E Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 2616CBD04AEC10F8372AFE54061E2BC0B601FB84 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32322d3232203d3e20313338393530.roa Signing time: Sun 28 Jun 2026 13:49:05 +0000 ROA not before: Sun 28 Jun 2026 13:44:05 +0000 ROA not after: Sun 27 Jun 2027 13:49:05 +0000 asID: 138950 IP address blocks: 139.159.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:16:cb:d0:4a:ec:10:f8:37:2a:fe:54:06:1e:2b:c0:b6:01:fb:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:44:05 2026 GMT Not After : Jun 27 13:49:05 2027 GMT Subject: CN=4B41CEEF59AE459F55D3F56E967283838DEC192E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:77:15:78:e3:b8:12:9f:d8:80:10:c3:9a: ae:4f:0b:9e:84:05:d7:63:14:78:ec:3c:b7:24:46: 4d:5e:41:a6:24:71:30:2b:a5:c6:52:88:5a:82:41: 3f:df:4e:6b:ee:06:ff:15:28:30:30:21:1a:86:b0: 72:15:f4:8c:9b:64:79:9f:b2:35:dd:4d:9d:2a:ff: 79:0b:68:99:f3:b6:e2:d2:0c:f2:fa:07:93:6e:e1: da:74:05:31:67:c8:33:4e:67:55:ef:5f:8f:bf:56: 5b:ae:25:7f:d7:7f:ea:cd:e5:4d:d1:31:a1:00:6d: d4:70:0c:20:e2:8c:4f:72:6c:48:db:8f:04:30:59: 28:f8:14:2c:89:6e:b2:b1:a5:ed:83:8b:dd:47:f4: cd:ac:ce:56:e9:25:ba:e1:f1:bb:96:99:9e:ac:70: 3d:0b:fd:ce:ab:6c:15:3b:de:3a:53:8b:19:43:1f: ac:7c:85:d3:89:69:e0:95:f6:eb:64:bf:ba:d4:86: 87:c2:9f:4a:45:30:f7:63:31:89:b0:c4:b1:be:72: 9f:6b:ba:b0:cd:95:99:d9:e4:2b:90:58:ae:c9:51: cd:a9:54:7b:de:8e:fc:1e:fb:ee:36:0b:e7:8d:ef: f2:f1:58:03:fe:65:2d:47:bc:41:4b:72:41:38:9f: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:CE:EF:59:AE:45:9F:55:D3:F5:6E:96:72:83:83:8D:EC:19:2E X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32322d3232203d3e20313338393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.112.0/22 Signature Algorithm: sha256WithRSAEncryption 67:16:7b:2f:72:81:d0:36:bf:62:a8:81:2f:91:0d:87:d5:99: 23:69:7d:62:62:2f:43:a1:59:e0:ec:47:b0:55:b3:c0:05:68: 15:16:db:ef:57:6d:f4:8c:79:a7:f7:7e:95:93:08:81:d8:2c: ab:78:c2:37:97:c7:9c:b6:d4:dc:26:e1:6f:41:4b:fb:95:b4: f7:1b:58:a2:9b:0c:c9:23:f4:63:88:93:8f:0c:32:09:89:f2: 0c:cc:69:30:b4:c1:85:58:f7:17:14:85:7d:39:c0:38:6b:6a: 74:92:b9:aa:e9:8b:c7:e5:51:e2:f9:79:1f:43:87:7f:eb:9d: 31:48:07:ef:4f:e1:e2:47:ac:1a:db:30:5e:09:b0:7b:7a:68: 01:6d:f8:f0:30:57:30:13:47:00:1a:d5:2e:a3:40:95:10:e2: d1:7f:13:82:09:8f:01:13:c5:d0:12:1a:6f:dc:53:65:60:25: 5b:b3:3e:a5:b8:22:c3:31:52:17:2d:52:d6:88:6e:81:f3:87: 74:23:a8:64:91:d2:26:4c:0f:1f:42:d9:5a:ca:c0:66:44:58: d5:2f:60:e6:6f:a6:a0:bb:72:df:68:da:3e:c0:47:11:f5:c3: 88:ed:a6:a2:49:73:a6:b0:4b:6f:db:69:c3:f3:85:26:a8:2e: 97:cb:d1:b4 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUJhbL0ErsEPg3Kv5UBh4rwLYB+4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQ0MDVaFw0yNzA2MjcxMzQ5MDVaMDMxMTAvBgNV BAMTKDRCNDFDRUVGNTlBRTQ1OUY1NUQzRjU2RTk2NzI4MzgzOERFQzE5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkHcVeOO4Ep/YgBDDmq5PC56E BddjFHjsPLckRk1eQaYkcTArpcZSiFqCQT/fTmvuBv8VKDAwIRqGsHIV9IybZHmf sjXdTZ0q/3kLaJnztuLSDPL6B5Nu4dp0BTFnyDNOZ1XvX4+/VluuJX/Xf+rN5U3R MaEAbdRwDCDijE9ybEjbjwQwWSj4FCyJbrKxpe2Di91H9M2szlbpJbrh8buWmZ6s cD0L/c6rbBU73jpTixlDH6x8hdOJaeCV9utkv7rUhofCn0pFMPdjMYmwxLG+cp9r urDNlZnZ5CuQWK7JUc2pVHvejvwe++42C+eN7/LxWAP+ZS1HvEFLckE4nyBZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUS0HO71muRZ9V0/VulnKDg43sGS4wHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0LzEvMzEzMzM5MmUz MTM1MzkyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzODM5MzUz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAoufcDANBgkqhkiG9w0BAQsFAAOCAQEAZxZ7L3KB0Da/YqiB L5ENh9WZI2l9YmIvQ6FZ4OxHsFWzwAVoFRbb71dt9Ix5p/d+lZMIgdgsq3jCN5fH nLbU3Cbhb0FL+5W09xtYopsMySP0Y4iTjwwyCYnyDMxpMLTBhVj3FxSFfTnAOGtq dJK5qumLx+VR4vl5H0OHf+udMUgH70/h4kesGtswXgmwe3poAW348DBXMBNHABrV LqNAlRDi0X8TggmPARPF0BIab9xTZWAlW7M+pbgiwzFSFy1S1ohugfOHdCOoZJHS JkwPH0LZWsrAZkRY1S9g5m+moLty32jaPsBHEfXDiO2moklzprBLb9tpw/OFJqgu l8vRtA== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:59 2026 by rpki-client