$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32312d3231203d3e20313338343231.roa File: 3133392e3135392e39362e302f32312d3231203d3e20313338343231.roa (raw, json) Hash identifier: YjkXSj5QatWVgkXmVewnIXKrye1hvs7XzamADAO5Ago= Subject key identifier: 61:FC:DF:D7:2F:78:36:21:6E:6D:ED:EF:EF:36:EC:CC:A2:49:D3:A9 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 12E514E8DC017C9AE00AF0195CFF775FF21E1749 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32312d3231203d3e20313338343231.roa Signing time: Sun 28 Jun 2026 13:50:32 +0000 ROA not before: Sun 28 Jun 2026 13:45:32 +0000 ROA not after: Sun 27 Jun 2027 13:50:32 +0000 asID: 138421 IP address blocks: 139.159.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e5:14:e8:dc:01:7c:9a:e0:0a:f0:19:5c:ff:77:5f:f2:1e:17:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:45:32 2026 GMT Not After : Jun 27 13:50:32 2027 GMT Subject: CN=61FCDFD72F7836216E6DEDEFEF36ECCCA249D3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:a9:ab:c5:5f:2f:ff:79:ba:2a:37:dc:59: c9:9e:43:af:51:41:0b:c0:40:58:10:f2:10:67:4b: 4d:63:0d:47:d2:60:d9:98:c9:b7:0d:4f:f7:fd:58: 51:0d:6c:93:50:25:5e:ba:0c:c2:69:3b:6b:14:52: 37:da:fb:35:69:d9:45:fa:dd:90:19:f4:ed:d8:07: 14:62:f1:f5:22:bf:87:0c:18:72:f9:33:d2:13:9e: 01:c0:4a:b2:4d:ba:0d:68:f0:38:e0:fd:7e:41:f3: 6e:b4:d1:75:9d:e0:74:1a:c0:7b:f6:b5:8b:2f:d2: a5:80:bf:27:cb:54:5e:79:60:dd:b9:a0:49:d5:08: 08:c7:f3:ec:0f:1e:40:3e:44:21:8a:f0:91:fd:38: 04:f4:a2:f5:dc:9d:8d:d5:bd:4d:5e:fe:87:5d:5a: d3:95:67:ac:19:e1:44:0b:86:15:57:d7:e9:a2:d9: dc:4a:39:74:2c:4c:66:b1:c2:aa:0d:f7:84:ad:c5: 4f:f1:8a:98:cf:59:9d:68:cc:33:1e:45:9b:21:27: b0:68:c6:34:5c:10:7c:e9:88:c4:76:f8:f4:8b:d0: 50:d4:fa:63:33:1e:7e:50:3e:dd:b3:b5:34:d2:7a: 1a:12:46:dd:42:c6:7c:05:82:42:c4:44:91:f0:25: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FC:DF:D7:2F:78:36:21:6E:6D:ED:EF:EF:36:EC:CC:A2:49:D3:A9 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32312d3231203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.96.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:ca:82:a5:db:fe:b2:4c:e9:ef:09:20:95:20:35:7f:90:86: 1e:09:5c:bd:18:96:f5:30:d0:1c:ad:a4:e9:ca:fc:29:de:7a: 7a:f9:f9:d1:26:f6:44:1a:8d:b8:52:f5:a8:e9:0d:49:ca:0e: e8:c2:70:23:3c:6c:cc:2b:ab:22:b9:19:5f:9e:9b:9d:07:ad: d0:f5:86:54:9a:21:3c:e6:b5:35:11:25:5a:dd:c1:8d:97:86: 63:a0:a0:d0:f1:97:cd:76:97:a6:1c:75:4c:27:81:16:40:00: bd:61:e2:d8:93:f4:bd:a6:28:af:a8:93:85:47:80:18:6d:d6: 00:b4:2e:74:ba:c6:98:20:4d:9b:fa:9c:8b:4b:1d:d3:4e:0c: 64:db:9a:ae:eb:fd:2e:84:b3:07:17:30:43:71:7c:cf:8f:c1: 33:0b:85:4d:3c:9a:53:3d:d2:69:07:33:9b:37:68:18:87:59: 03:35:5a:32:42:05:55:63:06:92:3a:10:5f:9f:61:ac:3b:57: 6b:71:68:e2:fb:84:7e:7c:e8:87:40:a9:d4:5e:9c:43:f1:d5: 43:65:dd:e2:54:b7:90:96:a5:09:0d:c5:31:a0:b8:6a:2e:b4: 5e:bc:91:e4:58:d6:c6:1e:92:18:db:cc:7a:dc:f1:0b:14:97: 9c:00:b3:80 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEuUU6NwBfJrgCvAZXP93X/IeF0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQ1MzJaFw0yNzA2MjcxMzUwMzJaMDMxMTAvBgNV BAMTKDYxRkNERkQ3MkY3ODM2MjE2RTZERURFRkVGMzZFQ0NDQTI0OUQzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2KmrxV8v/3m6KjfcWcmeQ69R QQvAQFgQ8hBnS01jDUfSYNmYybcNT/f9WFENbJNQJV66DMJpO2sUUjfa+zVp2UX6 3ZAZ9O3YBxRi8fUiv4cMGHL5M9ITngHASrJNug1o8Djg/X5B82600XWd4HQawHv2 tYsv0qWAvyfLVF55YN25oEnVCAjH8+wPHkA+RCGK8JH9OAT0ovXcnY3VvU1e/odd WtOVZ6wZ4UQLhhVX1+mi2dxKOXQsTGaxwqoN94StxU/xipjPWZ1ozDMeRZshJ7Bo xjRcEHzpiMR2+PSL0FDU+mMzHn5QPt2ztTTSehoSRt1CxnwFgkLERJHwJcRLAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUYfzf1y94NiFube3v7zbszKJJ06kwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS8zMTMzMzkyZTMx MzUzOTJlMzkzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzODM0MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA4ufYDANBgkqhkiG9w0BAQsFAAOCAQEAjMqCpdv+skzp7wkglSA1 f5CGHglcvRiW9TDQHK2k6cr8Kd56evn50Sb2RBqNuFL1qOkNScoO6MJwIzxszCur IrkZX56bnQet0PWGVJohPOa1NRElWt3BjZeGY6Cg0PGXzXaXphx1TCeBFkAAvWHi 2JP0vaYor6iThUeAGG3WALQudLrGmCBNm/qci0sd004MZNuaruv9LoSzBxcwQ3F8 z4/BMwuFTTyaUz3SaQczmzdoGIdZAzVaMkIFVWMGkjoQX59hrDtXa3Fo4vuEfnzo h0Cp1F6cQ/HVQ2Xd4lS3kJalCQ3FMaC4ai60XryR5FjWxh6SGNvMetzxCxSXnACz gA== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:48 2026 by rpki-client