$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39372e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e39372e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: MJGnJEX3mPUWJ3T+kOk2yj8vF5HL7UZPgheQBYXeSqY= Subject key identifier: 34:24:4D:EC:29:30:98:3C:26:E3:8A:7A:28:10:D4:D7:2E:C2:D5:CE Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 7097A2B534862615BD838F59FDD8BB9EA5A47632 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39372e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:50:31 +0000 ROA not before: Sun 28 Jun 2026 13:45:31 +0000 ROA not after: Sun 27 Jun 2027 13:50:31 +0000 asID: 63708 IP address blocks: 139.159.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:97:a2:b5:34:86:26:15:bd:83:8f:59:fd:d8:bb:9e:a5:a4:76:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:45:31 2026 GMT Not After : Jun 27 13:50:31 2027 GMT Subject: CN=34244DEC2930983C26E38A7A2810D4D72EC2D5CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:2c:07:26:00:9f:ef:9c:5c:e2:86:55:c0: 78:70:8b:28:6e:67:df:47:d4:c8:ea:00:21:dc:67: 74:79:30:3d:a1:cb:84:81:fe:56:8e:33:08:6c:32: 76:ed:c1:be:61:99:58:9a:cc:8c:a4:7a:a1:2d:5b: cb:ba:f2:a1:95:e9:4d:48:1e:44:d1:cd:b5:fe:12: 59:b2:0f:36:e1:07:dd:3b:1b:10:41:c0:21:78:04: d8:53:33:d4:69:55:d9:4d:b5:bd:2c:93:16:cd:73: cf:84:ea:2f:6e:b3:b0:9e:b8:35:fc:12:d6:ad:b7: 8b:f9:f8:bb:25:c7:4b:90:f4:c3:76:59:4b:3e:5c: f5:7f:69:ed:e8:e8:d0:fa:17:82:55:2a:ea:bd:6e: 5f:29:95:21:7b:0e:f8:f8:e7:d1:b9:25:61:61:16: e9:47:7e:e3:05:f0:ed:a3:5e:0c:34:4b:e8:de:5a: 35:f7:6b:4c:c5:07:a5:2f:89:7c:20:5c:56:62:e8: ef:b1:90:1a:d5:2f:de:d3:e6:9d:de:50:7a:51:e1: 76:19:29:9b:1e:45:e0:85:8d:e9:3f:63:4b:eb:cb: 2e:9c:0f:aa:d1:b2:e9:bd:31:5d:5b:b5:fe:b7:26: d7:ff:39:63:00:67:ba:14:80:57:60:48:f6:55:8b: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:24:4D:EC:29:30:98:3C:26:E3:8A:7A:28:10:D4:D7:2E:C2:D5:CE X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39372e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.97.0/24 Signature Algorithm: sha256WithRSAEncryption 68:19:13:3a:e5:47:03:4a:73:b0:d5:7c:83:b0:66:ea:5a:06: 93:35:d6:3f:ec:d4:83:ab:ae:0f:81:56:58:4d:90:ca:81:1b: 66:2a:57:f6:34:2f:98:bd:e3:b2:17:c7:66:9c:b2:c6:ac:63: e0:03:14:2c:d4:02:f5:48:62:19:d6:ff:ed:c7:66:45:d4:71: 0b:34:11:3c:1d:dc:6e:02:d1:42:f1:34:73:1a:07:e3:44:c6: af:2a:bc:7f:80:a8:85:8d:69:2d:a1:6d:55:2f:3e:99:5a:c2: 0a:9f:83:01:d9:5f:b0:e4:9e:bc:8e:b7:4b:af:86:28:6f:6d: 56:4e:28:12:6d:f5:f0:82:db:f9:ff:48:e5:a5:47:9c:5e:bb: 3b:ec:62:d3:d4:1f:5c:f0:d2:7f:89:34:8b:43:e1:0c:4e:c8: e1:d0:43:b1:44:d9:af:9e:c3:d6:3b:5e:4d:56:ae:aa:4e:c0: 66:93:08:93:15:33:5a:16:f6:9c:ae:66:19:ad:b8:54:f0:5d: fc:15:44:bd:0e:42:05:73:99:9c:2b:75:f4:5e:cd:fb:f4:3d: 9d:d7:e3:58:df:9f:da:18:bb:80:a7:ca:43:0f:7a:55:09:a0: 21:c5:c5:c4:30:87:4c:21:07:b4:61:3e:6f:42:09:7a:9c:ed: bf:00:ed:0d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcJeitTSGJhW9g49Z/di7nqWkdjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQ1MzFaFw0yNzA2MjcxMzUwMzFaMDMxMTAvBgNV BAMTKDM0MjQ0REVDMjkzMDk4M0MyNkUzOEE3QTI4MTBENEQ3MkVDMkQ1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdCwHJgCf75xc4oZVwHhwiyhu Z99H1MjqACHcZ3R5MD2hy4SB/laOMwhsMnbtwb5hmViazIykeqEtW8u68qGV6U1I HkTRzbX+ElmyDzbhB907GxBBwCF4BNhTM9RpVdlNtb0skxbNc8+E6i9us7CeuDX8 Etatt4v5+Lslx0uQ9MN2WUs+XPV/ae3o6ND6F4JVKuq9bl8plSF7Dvj459G5JWFh FulHfuMF8O2jXgw0S+jeWjX3a0zFB6UviXwgXFZi6O+xkBrVL97T5p3eUHpR4XYZ KZseReCFjek/Y0vryy6cD6rRsum9MV1btf63Jtf/OWMAZ7oUgFdgSPZVi145AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUNCRN7CkwmDwm44p6KBDU1y7C1c4wHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz NTM5MmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIufYTANBgkqhkiG9w0BAQsFAAOCAQEAaBkTOuVHA0pzsNV8g7Bm6loG kzXWP+zUg6uuD4FWWE2QyoEbZipX9jQvmL3jshfHZpyyxqxj4AMULNQC9UhiGdb/ 7cdmRdRxCzQRPB3cbgLRQvE0cxoH40TGryq8f4CohY1pLaFtVS8+mVrCCp+DAdlf sOSevI63S6+GKG9tVk4oEm318ILb+f9I5aVHnF67O+xi09QfXPDSf4k0i0PhDE7I 4dBDsUTZr57D1jteTVauqk7AZpMIkxUzWhb2nK5mGa24VPBd/BVEvQ5CBXOZnCt1 9F7N+/Q9ndfjWN+f2hi7gKfKQw96VQmgIcXFxDCHTCEHtGE+b0IJepztvwDtDQ== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:48 2026 by rpki-client