$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e2037343638.roa File: 3133392e3232302e3139322e302f31382d3234203d3e2037343638.roa (raw, json) Hash identifier: 8wZUmDkUOLonZavCYcCvRfRT4WkVz/sYraeel3q6ZYE= Subject key identifier: 02:0D:17:5C:75:58:71:EB:8F:B9:F9:D8:1D:F5:93:9A:55:27:26:1F Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 234BC8EE94A87072B16877332B9620ACA2A889CD Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e2037343638.roa Signing time: Wed 02 Sep 2026 03:55:20 +0000 ROA not before: Wed 02 Sep 2026 03:50:20 +0000 ROA not after: Wed 01 Sep 2027 03:55:20 +0000 asID: 7468 IP address blocks: 139.220.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4b:c8:ee:94:a8:70:72:b1:68:77:33:2b:96:20:ac:a2:a8:89:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Sep 2 03:50:20 2026 GMT Not After : Sep 1 03:55:20 2027 GMT Subject: CN=020D175C755871EB8FB9F9D81DF5939A5527261F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:7a:b9:74:99:20:26:f1:24:b1:8f:03:81: 17:fa:ca:a8:e6:68:d4:15:2d:ad:28:ad:dd:a5:2d: c0:62:58:7b:3e:39:70:21:8f:fd:9b:d1:97:f0:c6: 81:ff:10:5c:c8:03:1e:67:46:73:ed:dd:8d:5f:80: d3:ae:cf:5c:7e:cb:0a:bc:a0:aa:b0:9e:05:5c:97: 13:7d:e5:40:f7:f0:b1:71:ae:37:51:2b:06:d9:d5: 2a:9c:4e:dd:04:40:d6:18:73:dd:29:e4:15:92:6e: fb:5e:b4:86:17:03:8a:33:fc:bc:86:f9:92:4f:3c: f2:51:55:56:d1:28:66:14:d8:e4:49:29:76:b3:8f: 23:24:00:48:22:5a:58:b5:87:ff:db:6d:ef:af:72: 5a:54:7f:e0:fc:f1:f0:20:be:7c:6a:dd:47:5e:bc: 27:54:96:b7:96:96:6c:4e:62:c1:ce:26:7d:f9:64: 1a:d5:a3:ef:0e:ab:34:af:a0:1e:14:ae:05:b9:4d: b4:4e:c9:91:b5:36:70:82:cb:22:2e:dd:f2:83:a6: 04:29:1c:7f:c7:3e:33:00:c3:05:c8:52:5b:e9:f8: 34:ae:d5:07:60:53:e5:1c:59:2b:6c:19:ee:8c:97: ca:c0:ba:4f:fd:17:4f:09:58:68:1b:66:0a:56:79: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:17:5C:75:58:71:EB:8F:B9:F9:D8:1D:F5:93:9A:55:27:26:1F X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e2037343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.192.0/18 Signature Algorithm: sha256WithRSAEncryption 09:13:13:ef:09:ad:de:a3:f4:8d:20:55:fd:77:4a:8d:c4:e5: 0e:79:b9:c7:d9:30:6d:bd:7e:25:31:56:50:d9:91:90:69:54: 09:68:00:57:58:4a:2c:f5:85:63:f8:85:2f:91:5b:95:79:eb: fe:78:f2:86:8b:de:70:c6:19:87:26:3b:44:37:6a:69:7a:50: ac:9c:d2:96:2e:fb:d2:70:a6:ae:8d:13:17:fc:0d:d0:13:2b: 76:84:18:42:81:74:62:ec:f8:b3:06:42:19:85:2e:7f:9f:d2: 45:e4:74:3c:a8:79:2d:a5:3f:6d:96:02:ef:16:47:bc:77:6a: dd:a8:05:22:ab:be:33:e7:17:72:df:8a:77:15:7e:56:28:a2: 12:15:38:34:0d:e6:fc:33:0e:51:63:c3:c6:3e:83:21:b7:27: 04:0c:27:43:56:61:d4:b0:54:a2:a2:c5:3e:7b:96:94:93:05: 9f:53:7f:5d:66:13:17:8c:18:59:dc:9c:c9:e3:d4:d5:7a:e8: db:fa:c7:52:18:43:c8:86:2f:bf:03:0e:a4:39:ba:67:00:8f: a3:d8:a7:e5:ca:69:63:55:21:36:15:0d:81:8d:00:36:a3:74: 67:f1:2f:d8:e6:47:f6:6e:b3:d9:18:74:22:ff:a5:ea:36:82: 2d:a2:6c:fd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUI0vI7pSocHKxaHczK5YgrKKoic0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA5MDIwMzUwMjBaFw0yNzA5MDEwMzU1MjBaMDMxMTAvBgNV BAMTKDAyMEQxNzVDNzU1ODcxRUI4RkI5RjlEODFERjU5MzlBNTUyNzI2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrnq5dJkgJvEksY8DgRf6yqjm aNQVLa0ord2lLcBiWHs+OXAhj/2b0ZfwxoH/EFzIAx5nRnPt3Y1fgNOuz1x+ywq8 oKqwngVclxN95UD38LFxrjdRKwbZ1SqcTt0EQNYYc90p5BWSbvtetIYXA4oz/LyG +ZJPPPJRVVbRKGYU2ORJKXazjyMkAEgiWli1h//bbe+vclpUf+D88fAgvnxq3Ude vCdUlreWlmxOYsHOJn35ZBrVo+8OqzSvoB4UrgW5TbROyZG1NnCCyyIu3fKDpgQp HH/HPjMAwwXIUlvp+DSu1QdgU+UcWStsGe6Ml8rAuk/9F08JWGgbZgpWeQy7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAg0XXHVYceuPufnYHfWTmlUnJh8wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODI3MTYxOS8xLzMxMzMzOTJlMzIz MjMwMmUzMTM5MzIyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNzM0MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBovcwDANBgkqhkiG9w0BAQsFAAOCAQEACRMT7wmt3qP0jSBV/XdKjcTl Dnm5x9kwbb1+JTFWUNmRkGlUCWgAV1hKLPWFY/iFL5FblXnr/njyhovecMYZhyY7 RDdqaXpQrJzSli770nCmro0TF/wN0BMrdoQYQoF0Yuz4swZCGYUuf5/SReR0PKh5 LaU/bZYC7xZHvHdq3agFIqu+M+cXct+KdxV+ViiiEhU4NA3m/DMOUWPDxj6DIbcn BAwnQ1Zh1LBUoqLFPnuWlJMFn1N/XWYTF4wYWdycyePU1Xro2/rHUhhDyIYvvwMO pDm6ZwCPo9in5cppY1UhNhUNgY0ANqN0Z/Ev2OZH9m6z2Rh0Iv+l6jaCLaJs/Q== -----END CERTIFICATE-----Generated at Sat Sep 5 07:14:31 2026 by rpki-client