$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203137363338.roa File: 3133392e3232302e3234302e302f32322d3233203d3e203137363338.roa (raw, json) Hash identifier: 5rrDOCxu0HgSictdfBrNBmbtKf22HIxu3k1gvrBgB1c= Subject key identifier: 57:57:49:79:48:26:23:CD:7F:03:BA:65:2F:95:48:5A:68:C1:A8:21 Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 492AE19A9395B6589A216087038A4016CF233971 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203137363338.roa Signing time: Fri 24 Apr 2026 05:45:53 +0000 ROA not before: Fri 24 Apr 2026 05:40:53 +0000 ROA not after: Fri 23 Apr 2027 05:45:53 +0000 asID: 17638 IP address blocks: 139.220.240.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2a:e1:9a:93:95:b6:58:9a:21:60:87:03:8a:40:16:cf:23:39:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 05:40:53 2026 GMT Not After : Apr 23 05:45:53 2027 GMT Subject: CN=57574979482623CD7F03BA652F95485A68C1A821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:07:f3:e6:95:f5:8d:82:0c:42:37:af:cf: 61:bc:5a:ef:5a:c2:fc:a7:00:0e:e8:af:56:eb:3a: 2b:c6:f0:93:5f:c7:87:41:74:67:8a:fb:f7:19:b7: 81:e2:52:a3:04:f8:a0:d7:b2:8a:cc:00:75:f6:8f: 9f:50:c9:07:1d:1c:b5:47:9b:09:57:fb:e0:a1:8b: 35:58:4e:04:b7:6f:b7:13:26:54:34:64:f8:b2:ac: 38:4a:ab:90:68:5f:a3:76:30:b9:87:94:66:45:d3: 89:f9:dd:51:35:95:b2:77:b8:d4:06:59:b8:75:8e: 44:a3:0f:6e:b8:80:da:c0:81:05:10:25:b2:4d:22: 40:73:6a:fc:5e:c3:94:ab:13:fb:2a:2c:0b:2c:b7: 96:c2:85:9c:62:03:16:13:49:40:e7:de:7b:9c:a0: f7:bc:19:1f:47:85:0e:82:a0:1f:62:aa:ac:be:3a: f1:78:d2:cd:8f:94:06:08:30:83:11:ad:f9:9e:e9: ea:85:95:31:43:52:3e:db:f5:02:4d:12:78:63:c5: d1:b4:c0:d8:78:54:f9:7f:5f:35:7a:47:7c:23:e2: 2b:05:10:09:f9:55:c0:9c:1d:1a:e1:93:7e:d6:27: e1:06:30:3b:e5:43:d1:fe:e0:20:fd:61:d9:93:29: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:49:79:48:26:23:CD:7F:03:BA:65:2F:95:48:5A:68:C1:A8:21 X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e203137363338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.240.0/22 Signature Algorithm: sha256WithRSAEncryption 75:7b:a8:73:c2:0a:e7:3d:58:c5:4c:bb:2d:bb:82:bf:3b:8a: e5:9a:ac:4b:7f:45:5e:ca:63:7c:cb:c5:3d:f2:11:c5:02:01: 9e:44:96:5c:62:cc:8e:71:2f:6a:a9:99:90:a3:13:5f:64:cc: 87:71:43:b1:f7:fe:3f:c1:6b:a5:9b:47:40:df:0b:00:b3:40: 08:66:f9:95:a1:66:19:39:d8:b0:16:c5:30:72:fa:a7:71:c3: f5:30:37:ab:53:a4:93:95:22:64:c3:7a:a0:a3:74:e0:e4:1e: ea:c4:4d:1e:13:f9:56:a7:10:55:d2:64:34:ff:8b:9e:4d:f2: ac:95:9a:58:45:ca:38:b8:96:4a:7c:76:e3:79:d8:b1:ed:1f: ee:a4:51:60:43:e5:30:24:21:b5:7f:c9:7c:ee:86:40:27:37: e8:2f:17:a3:94:c0:d8:71:20:d7:d6:ec:c0:3e:39:a5:15:7b: 9c:83:f1:93:1a:bb:3b:94:ac:df:ad:74:d9:2c:bf:d7:cc:96: e4:b9:d1:bc:d2:22:e9:5e:8c:8e:93:9d:e1:29:11:f2:c4:5e: 10:2f:03:8a:ff:b7:88:4f:af:f1:2e:1f:6e:b9:fb:59:47:3e: 60:95:20:b2:87:8b:dc:3b:87:05:c2:15:c4:88:d8:18:1f:79: cd:65:aa:c5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSSrhmpOVtliaIWCHA4pAFs8jOXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNTQwNTNaFw0yNzA0MjMwNTQ1NTNaMDMxMTAvBgNV BAMTKDU3NTc0OTc5NDgyNjIzQ0Q3RjAzQkE2NTJGOTU0ODVBNjhDMUE4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDwfz5pX1jYIMQjevz2G8Wu9a wvynAA7or1brOivG8JNfx4dBdGeK+/cZt4HiUqME+KDXsorMAHX2j59QyQcdHLVH mwlX++ChizVYTgS3b7cTJlQ0ZPiyrDhKq5BoX6N2MLmHlGZF04n53VE1lbJ3uNQG Wbh1jkSjD264gNrAgQUQJbJNIkBzavxew5SrE/sqLAsst5bChZxiAxYTSUDn3nuc oPe8GR9HhQ6CoB9iqqy+OvF40s2PlAYIMIMRrfme6eqFlTFDUj7b9QJNEnhjxdG0 wNh4VPl/XzV6R3wj4isFEAn5VcCcHRrhk37WJ+EGMDvlQ9H+4CD9YdmTKT0rAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUV1dJeUgmI81/A7plL5VIWmjBqCEwHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8zMTMzMzkyZTMy MzIzMDJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzEzNzM2MzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAovc8DANBgkqhkiG9w0BAQsFAAOCAQEAdXuoc8IK5z1YxUy7LbuC vzuK5ZqsS39FXspjfMvFPfIRxQIBnkSWXGLMjnEvaqmZkKMTX2TMh3FDsff+P8Fr pZtHQN8LALNACGb5laFmGTnYsBbFMHL6p3HD9TA3q1Okk5UiZMN6oKN04OQe6sRN HhP5VqcQVdJkNP+Lnk3yrJWaWEXKOLiWSnx243nYse0f7qRRYEPlMCQhtX/JfO6G QCc36C8Xo5TA2HEg19bswD45pRV7nIPxkxq7O5Ss36102Sy/18yW5LnRvNIi6V6M jpOd4SkR8sReEC8Div+3iE+v8S4fbrn7WUc+YJUgsoeL3DuHBcIVxIjYGB95zWWq xQ== -----END CERTIFICATE-----Generated at Mon Apr 27 13:54:38 2026 by rpki-client