$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39382e302f32342d3234203d3e203633373038.roa File: 3133392e3135392e39382e302f32342d3234203d3e203633373038.roa (raw, json) Hash identifier: ACMnJzta+eqBGZ47LK0GTOJNfrYWvv9lfMTDo0ZyGKI= Subject key identifier: 7B:8B:C8:CF:E1:BE:98:71:6C:D0:5D:4E:4B:FA:78:EB:1E:99:36:21 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 4B44DC781152FF70B8B510069FF488599EA8B768 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39382e302f32342d3234203d3e203633373038.roa Signing time: Sun 28 Jun 2026 13:50:31 +0000 ROA not before: Sun 28 Jun 2026 13:45:31 +0000 ROA not after: Sun 27 Jun 2027 13:50:31 +0000 asID: 63708 IP address blocks: 139.159.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:44:dc:78:11:52:ff:70:b8:b5:10:06:9f:f4:88:59:9e:a8:b7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:45:31 2026 GMT Not After : Jun 27 13:50:31 2027 GMT Subject: CN=7B8BC8CFE1BE98716CD05D4E4BFA78EB1E993621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:3b:42:a6:44:d1:a9:33:fd:61:d2:ff:fc: a8:c5:8a:5b:9c:bd:c7:7f:64:74:4b:95:bf:e6:c4: c2:de:b2:5b:72:c9:6f:74:46:f7:df:1e:dd:27:bc: 18:df:f6:e2:4e:63:78:8d:86:4d:b5:1f:16:f1:42: 01:bc:7f:04:77:45:18:e0:ab:74:68:60:07:c6:87: 71:35:27:89:32:1c:49:a2:2e:fc:66:e1:2e:0a:59: f6:fe:57:65:21:44:ff:8f:c5:c1:df:4f:6a:b7:4c: b6:fc:3d:7a:53:ac:68:4a:45:c1:21:5e:75:27:e3: c0:80:33:19:27:b9:0f:51:be:e4:98:15:af:ac:26: f2:97:4e:af:a6:30:0c:a2:c1:f1:06:b5:bf:85:da: 86:66:d5:cf:24:fd:8b:07:5e:04:3b:41:95:99:56: 6c:3b:4e:12:df:48:ec:e1:22:47:df:0c:62:55:5f: 9b:20:f8:8b:4a:ae:08:79:23:7e:bb:46:c2:a4:28: 85:16:cb:0e:51:04:43:e4:f1:6a:c7:fa:bb:8c:5e: 58:20:8f:6b:e4:3d:0e:f6:d7:45:43:d1:cd:6a:66: 72:da:cf:35:3b:92:51:d9:26:fc:d9:ac:23:50:62: 20:f6:36:8c:c2:7c:fd:c3:9a:a4:37:fa:52:07:5f: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8B:C8:CF:E1:BE:98:71:6C:D0:5D:4E:4B:FA:78:EB:1E:99:36:21 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39382e302f32342d3234203d3e203633373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.98.0/24 Signature Algorithm: sha256WithRSAEncryption 04:6a:65:a9:5a:ae:4e:2c:a5:d8:71:59:1b:8f:97:d5:a6:ed: 93:8f:8f:f5:55:da:4a:aa:f0:23:e3:bb:f8:d0:1b:54:03:28: e3:55:49:ad:4e:c4:8b:e7:df:3e:24:5b:fb:49:02:6f:a5:c6: 76:96:53:86:a0:43:8b:a3:4b:03:fc:75:35:e3:fe:7c:bc:37: 4e:66:88:7e:93:f1:4f:30:e4:eb:9b:5d:8b:55:69:22:07:60: 46:29:3a:2e:e3:d4:61:32:2c:71:d1:19:92:8e:a3:48:3a:18: a5:a7:55:48:ce:03:1f:76:27:ff:d5:33:e6:0f:f8:b6:44:09: 13:94:51:ab:51:51:da:a6:01:17:65:34:42:e0:ca:92:30:d0: 51:b3:89:e9:5c:57:0e:42:c5:ad:ec:fb:cf:ac:b2:b0:f0:e8: 0d:fb:65:96:ac:5f:6a:2f:5e:3e:a0:7e:79:96:f5:bd:a5:ef: a4:cc:75:4c:f0:e5:1f:5c:de:b0:6c:1f:c5:0b:c2:93:48:c9: d9:94:7a:d7:e2:12:6c:88:ee:b5:2d:7c:2a:d5:f3:e7:e7:9c: 6a:8a:96:d1:ce:4d:07:6a:ca:80:14:97:8d:b0:fa:b5:db:36: 53:e9:05:bb:6f:3a:7f:b5:4d:76:38:a4:97:ac:6a:9a:5b:12: cc:17:61:89 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUS0TceBFS/3C4tRAGn/SIWZ6ot2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQ1MzFaFw0yNzA2MjcxMzUwMzFaMDMxMTAvBgNV BAMTKDdCOEJDOENGRTFCRTk4NzE2Q0QwNUQ0RTRCRkE3OEVCMUU5OTM2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZztCpkTRqTP9YdL//KjFiluc vcd/ZHRLlb/mxMLesltyyW90RvffHt0nvBjf9uJOY3iNhk21HxbxQgG8fwR3RRjg q3RoYAfGh3E1J4kyHEmiLvxm4S4KWfb+V2UhRP+PxcHfT2q3TLb8PXpTrGhKRcEh XnUn48CAMxknuQ9RvuSYFa+sJvKXTq+mMAyiwfEGtb+F2oZm1c8k/YsHXgQ7QZWZ Vmw7ThLfSOzhIkffDGJVX5sg+ItKrgh5I367RsKkKIUWyw5RBEPk8WrH+ruMXlgg j2vkPQ7210VD0c1qZnLazzU7klHZJvzZrCNQYiD2NozCfP3DmqQ3+lIHX7TFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUe4vIz+G+mHFs0F1OS/p46x6ZNiEwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz NTM5MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIufYjANBgkqhkiG9w0BAQsFAAOCAQEABGplqVquTiyl2HFZG4+X1abt k4+P9VXaSqrwI+O7+NAbVAMo41VJrU7Ei+ffPiRb+0kCb6XGdpZThqBDi6NLA/x1 NeP+fLw3TmaIfpPxTzDk65tdi1VpIgdgRik6LuPUYTIscdEZko6jSDoYpadVSM4D H3Yn/9Uz5g/4tkQJE5RRq1FR2qYBF2U0QuDKkjDQUbOJ6VxXDkLFrez7z6yysPDo Dftllqxfai9ePqB+eZb1vaXvpMx1TPDlH1zesGwfxQvCk0jJ2ZR61+ISbIjutS18 KtXz5+ecaoqW0c5NB2rKgBSXjbD6tds2U+kFu286f7VNdjikl6xqmlsSzBdhiQ== -----END CERTIFICATE-----Generated at Tue Jul 21 23:25:59 2026 by rpki-client