$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e2034383038.roa File: 3133392e3232302e3234302e302f32322d3233203d3e2034383038.roa (raw, json) Hash identifier: utGfmjYEqdfwDcQo2B61n+cuyYvXIPcaLOFIWh4AmRw= Subject key identifier: D3:E3:73:39:AD:DD:B4:A8:30:F1:5B:CA:56:10:04:94:23:CB:1E:0E Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 3848A350412A80853A8A68CF4FBADFAF134416E6 Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e2034383038.roa Signing time: Fri 24 Apr 2026 05:45:54 +0000 ROA not before: Fri 24 Apr 2026 05:40:54 +0000 ROA not after: Fri 23 Apr 2027 05:45:54 +0000 asID: 4808 IP address blocks: 139.220.240.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:48:a3:50:41:2a:80:85:3a:8a:68:cf:4f:ba:df:af:13:44:16:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Apr 24 05:40:54 2026 GMT Not After : Apr 23 05:45:54 2027 GMT Subject: CN=D3E37339ADDDB4A830F15BCA5610049423CB1E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:8b:c3:60:7c:bc:79:fc:6a:8c:d3:b1:86: 01:bd:8d:35:16:5a:76:ff:0b:3f:05:3a:cb:aa:3a: c0:e2:4d:5f:0c:39:c6:f6:c7:d1:97:a1:70:ce:ae: ed:e9:e5:ad:18:d3:54:ff:d5:04:e5:4d:9e:da:13: 08:02:f1:77:fc:64:b2:1e:b2:bd:95:b3:2a:b6:dd: 60:c9:86:ca:3e:59:6e:c0:84:49:8c:83:79:92:b7: b1:77:0c:c0:89:cb:ae:30:c1:56:27:f1:f4:da:00: 34:d4:38:e3:f9:69:28:77:c8:2a:de:28:53:8f:a6: 55:97:70:c2:e8:ae:cf:8b:7c:be:cd:78:82:70:70: 61:9c:0c:af:45:39:6b:a9:f8:29:00:af:10:59:ac: 87:e0:31:43:9e:1f:65:4f:24:30:63:d0:c7:de:a3: 6a:f5:1f:00:c1:47:f2:7e:72:bb:ad:96:a8:6c:9a: 1d:04:8e:9f:d2:18:b3:ac:8d:8a:20:67:30:99:2d: 44:d5:95:0f:5f:7f:2f:a7:4f:7f:89:8b:37:be:c4: 91:ee:c6:a2:57:01:32:00:af:26:6b:bb:39:3b:fb: 0c:e5:61:5e:1a:f5:a4:d1:8a:af:56:ea:1c:c9:60: 3b:4f:69:ea:6b:bf:4e:a6:c7:87:69:96:f9:a3:8e: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E3:73:39:AD:DD:B4:A8:30:F1:5B:CA:56:10:04:94:23:CB:1E:0E X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3234302e302f32322d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.220.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:48:e6:1f:f7:42:c8:f1:e7:22:71:93:bc:7e:4f:cb:94:a6: d1:ef:66:c2:02:f6:57:5f:62:f2:65:98:38:48:99:fc:04:2c: 05:44:7e:9c:6a:1a:5e:6a:fd:50:a7:9c:8d:36:70:9a:8c:19: 67:ba:ea:c4:fb:8f:91:85:d9:0f:3a:8a:f3:f3:a1:9a:86:0d: d5:6b:83:ac:1e:50:7e:8f:b0:a1:34:57:30:e6:80:88:60:e5: 9a:92:6c:b4:4b:2e:b9:d9:8d:61:52:b1:2d:87:2d:0f:a4:54: 7c:42:48:ec:b3:83:be:51:9a:87:2f:60:a0:2a:4b:ee:de:0a: 05:92:7e:0d:6e:2c:a6:19:58:60:b3:a5:f8:63:c5:ac:f3:0c: 4b:29:28:f3:6c:9d:b7:bf:f6:08:fa:7a:9f:e3:ef:85:39:45: 40:e6:24:89:75:0d:66:c3:df:bd:7d:52:81:9d:e9:03:2d:70: b1:4e:71:4e:20:b0:a6:50:a7:ac:f8:97:df:31:b7:1f:19:b0: 4e:44:ad:b2:67:55:d9:67:a6:e3:3f:ec:ec:77:ef:f2:a7:23: f5:45:21:18:9c:9b:3a:18:17:61:b5:28:d6:b6:89:dc:52:eb: af:9e:fd:91:69:41:5d:5f:67:3f:2f:65:e2:76:ab:cd:d8:44: d1:fe:6a:bc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOEijUEEqgIU6imjPT7rfrxNEFuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjA0MjQwNTQwNTRaFw0yNzA0MjMwNTQ1NTRaMDMxMTAvBgNV BAMTKEQzRTM3MzM5QUREREI0QTgzMEYxNUJDQTU2MTAwNDk0MjNDQjFFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdeovDYHy8efxqjNOxhgG9jTUW Wnb/Cz8FOsuqOsDiTV8MOcb2x9GXoXDOru3p5a0Y01T/1QTlTZ7aEwgC8Xf8ZLIe sr2Vsyq23WDJhso+WW7AhEmMg3mSt7F3DMCJy64wwVYn8fTaADTUOOP5aSh3yCre KFOPplWXcMLors+LfL7NeIJwcGGcDK9FOWup+CkArxBZrIfgMUOeH2VPJDBj0Mfe o2r1HwDBR/J+crutlqhsmh0Ejp/SGLOsjYogZzCZLUTVlQ9ffy+nT3+Jize+xJHu xqJXATIAryZruzk7+wzlYV4a9aTRiq9W6hzJYDtPaeprv06mx4dplvmjjgH7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU0+NzOa3dtKgw8VvKVhAElCPLHg4wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODI3MTYxOS8xLzMxMzMzOTJlMzIz MjMwMmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAovc8DANBgkqhkiG9w0BAQsFAAOCAQEALEjmH/dCyPHnInGTvH5Py5Sm 0e9mwgL2V19i8mWYOEiZ/AQsBUR+nGoaXmr9UKecjTZwmowZZ7rqxPuPkYXZDzqK 8/OhmoYN1WuDrB5Qfo+woTRXMOaAiGDlmpJstEsuudmNYVKxLYctD6RUfEJI7LOD vlGahy9goCpL7t4KBZJ+DW4sphlYYLOl+GPFrPMMSyko82ydt7/2CPp6n+PvhTlF QOYkiXUNZsPfvX1SgZ3pAy1wsU5xTiCwplCnrPiX3zG3HxmwTkStsmdV2Wem4z/s 7Hfv8qcj9UUhGJybOhgXYbUo1raJ3FLrr579kWlBXV9nPy9l4narzdhE0f5qvA== -----END CERTIFICATE-----Generated at Mon Apr 27 14:19:48 2026 by rpki-client