$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e39362e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: 5+HNGyquB7I//W4cJYk2hRBoAmdAUCq3vZOz++FnAzM= Subject key identifier: 26:9C:2C:CF:7F:2B:70:AF:A4:1E:C6:C6:90:44:80:FE:16:C4:5E:C4 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 774595E252ECF22A8970B0DFA70089C26DB5EB10 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:50:31 +0000 ROA not before: Sun 28 Jun 2026 13:45:31 +0000 ROA not after: Sun 27 Jun 2027 13:50:31 +0000 asID: 63708 IP address blocks: 139.159.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:45:95:e2:52:ec:f2:2a:89:70:b0:df:a7:00:89:c2:6d:b5:eb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:45:31 2026 GMT Not After : Jun 27 13:50:31 2027 GMT Subject: CN=269C2CCF7F2B70AFA41EC6C6904480FE16C45EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:32:f3:12:b5:53:a8:eb:ca:15:92:d7:67: 90:7e:86:27:03:0b:35:c0:93:ec:6c:3c:85:3d:67: 18:28:9d:ab:68:65:d5:f0:29:65:f7:e7:1d:b0:f8: 90:41:8a:16:b6:92:a7:b6:7c:19:de:4c:24:d4:f9: 86:eb:70:b1:58:5e:48:2d:95:17:20:78:05:35:4f: 0d:12:95:70:3e:ed:47:25:f9:88:b7:4c:0b:af:e8: cd:af:b8:e7:6e:67:ce:59:2a:f1:6f:2f:6b:d6:ef: cf:ab:68:b3:af:f5:7d:5e:be:a7:88:11:8d:0e:77: a8:29:b7:29:57:e7:a6:cd:12:b8:a4:8f:7e:f4:64: 43:40:61:65:78:99:e8:98:82:10:d4:fd:ec:e6:04: d9:4f:a3:80:e6:35:12:b1:ce:65:39:49:f2:ec:8b: 3f:b1:dc:23:9f:be:bb:a8:c9:76:07:a1:bc:ed:37: bc:ca:3c:ec:f2:a9:83:24:44:de:48:5e:2e:5d:07: 32:6f:7b:2d:fb:a2:76:e2:ef:72:be:f4:60:20:b8: 5f:1e:5c:bb:75:4b:18:96:24:38:9f:38:56:10:1b: 15:38:a4:76:b3:92:db:71:da:79:0e:57:8a:28:7b: 99:77:b5:c3:ba:7a:37:85:b8:02:41:83:0a:99:46: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:2C:CF:7F:2B:70:AF:A4:1E:C6:C6:90:44:80:FE:16:C4:5E:C4 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.96.0/24 Signature Algorithm: sha256WithRSAEncryption b9:2e:94:3a:bc:f8:15:c4:92:cf:2f:23:3a:a2:fd:94:07:d7: ec:c2:0c:00:c2:55:ca:9f:c2:5f:d4:63:91:e1:65:9f:cf:8f: 77:ab:87:51:5b:30:38:01:8d:8a:2e:49:3f:87:45:e6:59:ab: 33:88:da:ba:a3:39:6e:dc:d9:2e:78:70:f5:ac:a1:3c:e1:55: b6:de:99:da:00:b3:b0:5d:f7:7c:71:f7:3a:3b:df:90:e9:14: 18:1f:e7:e1:75:bc:51:ff:f8:00:a2:8e:8a:61:5c:79:b2:04: f9:87:a8:1e:98:76:a1:43:77:00:5b:59:d8:48:d7:da:73:00: 2d:18:1c:e6:c5:79:65:bb:78:4a:42:63:a0:21:cc:ce:4a:ff: fe:e2:71:c1:fa:9b:31:bb:9a:7c:8e:f4:0d:8f:80:9d:fa:3e: 08:3e:e6:d7:c2:a9:5b:1c:f3:04:ac:12:22:c5:da:b9:5e:1c: 4d:56:66:2e:94:a8:fb:08:30:f2:fb:ea:9a:4d:a0:4d:c4:92: ac:76:fe:69:70:85:ea:df:30:2e:fe:0e:a4:51:a3:2a:a4:4e: cd:2b:39:52:ab:f3:c6:1d:c5:3a:76:51:3a:88:15:d1:e9:13: fb:79:8a:7a:08:4f:d7:39:d7:7f:42:35:e2:e7:f8:05:6d:d1: e1:02:2e:b6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUd0WV4lLs8iqJcLDfpwCJwm216xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQ1MzFaFw0yNzA2MjcxMzUwMzFaMDMxMTAvBgNV BAMTKDI2OUMyQ0NGN0YyQjcwQUZBNDFFQzZDNjkwNDQ4MEZFMTZDNDVFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cjLzErVTqOvKFZLXZ5B+hicD CzXAk+xsPIU9ZxgonatoZdXwKWX35x2w+JBBiha2kqe2fBneTCTU+YbrcLFYXkgt lRcgeAU1Tw0SlXA+7Ucl+Yi3TAuv6M2vuOduZ85ZKvFvL2vW78+raLOv9X1evqeI EY0Od6gptylX56bNErikj370ZENAYWV4meiYghDU/ezmBNlPo4DmNRKxzmU5SfLs iz+x3COfvruoyXYHobztN7zKPOzyqYMkRN5IXi5dBzJvey37onbi73K+9GAguF8e XLt1SxiWJDifOFYQGxU4pHazkttx2nkOV4ooe5l3tcO6ejeFuAJBgwqZRpB/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJpwsz38rcK+kHsbGkESA/hbEXsQwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz NTM5MmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIufYDANBgkqhkiG9w0BAQsFAAOCAQEAuS6UOrz4FcSSzy8jOqL9lAfX 7MIMAMJVyp/CX9RjkeFln8+Pd6uHUVswOAGNii5JP4dF5lmrM4jauqM5btzZLnhw 9ayhPOFVtt6Z2gCzsF33fHH3OjvfkOkUGB/n4XW8Uf/4AKKOimFcebIE+YeoHph2 oUN3AFtZ2EjX2nMALRgc5sV5Zbt4SkJjoCHMzkr//uJxwfqbMbuafI70DY+Anfo+ CD7m18KpWxzzBKwSIsXauV4cTVZmLpSo+wgw8vvqmk2gTcSSrHb+aXCF6t8wLv4O pFGjKqROzSs5Uqvzxh3FOnZROogV0ekT+3mKeghP1znXf0I14uf4BW3R4QIutg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:48 2026 by rpki-client