$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139342e302f32332d3233203d3e203137363338.roa File: 3133392e3232302e3139342e302f32332d3233203d3e203137363338.roa (raw, json) Hash identifier: k1UirR8V2OHksMEpB5IIGtEiFNMV56j2CxQWB98giwo= Subject key identifier: E3:71:EA:32:9C:EC:5C:C9:EB:E3:C0:BE:28:81:73:BE:9E:94:AC:6B Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 3E9D12C394F0517A8A5F58E934C610FDAA77F466 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139342e302f32332d3233203d3e203137363338.roa Signing time: Fri 24 Apr 2026 05:45:53 +0000 ROA not before: Fri 24 Apr 2026 05:40:53 +0000 ROA not after: Fri 23 Apr 2027 05:45:53 +0000 asID: 17638 IP address blocks: 139.220.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9d:12:c3:94:f0:51:7a:8a:5f:58:e9:34:c6:10:fd:aa:77:f4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 05:40:53 2026 GMT Not After : Apr 23 05:45:53 2027 GMT Subject: CN=E371EA329CEC5CC9EBE3C0BE288173BE9E94AC6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:b4:65:c4:93:96:87:68:eb:be:af:e4:54: 03:73:7e:29:04:a8:5f:ad:56:8d:e8:76:ea:09:05: 6f:68:d6:db:0b:12:16:4e:a3:d6:75:13:0c:71:da: 38:9b:50:b1:a8:8d:12:6e:80:5c:d4:91:e5:38:9c: bd:c4:c9:51:c0:2f:12:a0:1e:dd:bb:f6:ce:6c:3e: b0:dc:6c:40:a8:ef:f6:7b:1b:77:c7:98:5a:3d:3a: 7b:dd:c9:1e:dc:12:2e:3f:dc:f0:f6:34:9c:81:be: 93:2a:7d:fe:5c:97:04:5b:71:40:3e:34:36:b8:4f: c9:ac:24:65:6f:23:c3:62:6b:8d:9f:62:d5:6c:0d: fb:06:89:3a:d1:a7:8b:30:80:71:17:ee:4d:88:32: 25:12:69:d1:18:2e:e4:8a:f2:90:fa:2d:d0:1b:7b: b6:01:2d:b0:79:f3:95:7c:98:c0:b8:e7:50:fa:fa: 75:9a:ee:ea:b0:b8:1c:bf:ec:c9:3a:dd:b7:d3:97: 9d:bf:7d:6b:a4:9f:09:fc:58:c1:c5:03:1a:73:39: 3c:30:73:06:e5:ac:dd:0c:96:f3:09:db:f1:16:32: c5:a5:0a:9a:03:9e:c0:59:f1:f9:05:09:47:cb:4a: be:57:68:78:fc:63:05:95:1d:45:6b:44:a2:17:c0: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:71:EA:32:9C:EC:5C:C9:EB:E3:C0:BE:28:81:73:BE:9E:94:AC:6B X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139342e302f32332d3233203d3e203137363338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.194.0/23 Signature Algorithm: sha256WithRSAEncryption 93:f6:97:2b:26:0f:df:95:85:3a:06:92:e1:ee:51:f1:4d:82: 1b:b3:f4:91:67:17:59:ef:c8:28:16:02:8d:6c:b8:c4:4b:8a: d1:08:76:c7:8f:d9:5f:24:a1:74:89:59:2d:bf:f6:85:21:6d: 57:0a:e7:4b:2c:c4:c2:b9:cf:e5:1f:fa:11:a0:5a:a1:c9:51: b2:89:b7:f3:a2:21:52:66:c6:96:96:69:f9:db:ef:32:5d:99: db:c9:c1:fb:09:70:6c:22:22:db:e7:fb:cd:04:2b:46:af:81: 93:23:69:93:6c:f0:75:a1:fd:c1:cc:b1:3e:ca:8f:89:bd:78: ec:09:e9:9a:c0:68:ad:1a:dd:8e:78:e1:1c:ec:4f:a1:63:58: 1e:1e:d4:87:75:b8:ab:74:c6:7d:47:0d:4b:c6:5b:df:3e:97: 35:e0:22:e9:2f:37:ea:44:ac:d7:b9:8b:d9:74:44:7b:5a:c7: aa:23:79:18:08:13:01:e3:57:b3:d8:c5:25:a7:00:f8:12:c4: b7:c3:6b:bf:24:ca:5b:a8:3d:44:d5:6e:7e:99:8c:fe:70:f7: 0a:a8:d1:95:f3:78:31:59:7c:26:16:b0:4b:2c:25:79:17:56: dc:f7:8d:0d:7d:6e:59:4b:ed:d9:64:1b:1f:f6:92:f9:5d:2a: c4:b2:f3:38 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPp0Sw5TwUXqKX1jpNMYQ/ap39GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNTQwNTNaFw0yNzA0MjMwNTQ1NTNaMDMxMTAvBgNV BAMTKEUzNzFFQTMyOUNFQzVDQzlFQkUzQzBCRTI4ODE3M0JFOUU5NEFDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChSLRlxJOWh2jrvq/kVANzfikE qF+tVo3oduoJBW9o1tsLEhZOo9Z1Ewxx2jibULGojRJugFzUkeU4nL3EyVHALxKg Ht279s5sPrDcbECo7/Z7G3fHmFo9OnvdyR7cEi4/3PD2NJyBvpMqff5clwRbcUA+ NDa4T8msJGVvI8Nia42fYtVsDfsGiTrRp4swgHEX7k2IMiUSadEYLuSK8pD6LdAb e7YBLbB585V8mMC451D6+nWa7uqwuBy/7Mk63bfTl52/fWuknwn8WMHFAxpzOTww cwblrN0MlvMJ2/EWMsWlCpoDnsBZ8fkFCUfLSr5XaHj8YwWVHUVrRKIXwDZ3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU43HqMpzsXMnr48C+KIFzvp6UrGswHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzEzOTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM2MzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYvcwjANBgkqhkiG9w0BAQsFAAOCAQEAk/aXKyYP35WFOgaS4e5R 8U2CG7P0kWcXWe/IKBYCjWy4xEuK0Qh2x4/ZXyShdIlZLb/2hSFtVwrnSyzEwrnP 5R/6EaBaoclRsom386IhUmbGlpZp+dvvMl2Z28nB+wlwbCIi2+f7zQQrRq+BkyNp k2zwdaH9wcyxPsqPib147AnpmsBorRrdjnjhHOxPoWNYHh7Uh3W4q3TGfUcNS8Zb 3z6XNeAi6S836kSs17mL2XREe1rHqiN5GAgTAeNXs9jFJacA+BLEt8NrvyTKW6g9 RNVufpmM/nD3CqjRlfN4MVl8JhawSywleRdW3PeNDX1uWUvt2WQbH/aS+V0qxLLz OA== -----END CERTIFICATE-----Generated at Mon Apr 27 13:54:38 2026 by rpki-client