$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32322d3232203d3e2034383131.roa File: 3133392e3135392e3130382e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: wH3bQowpWEvqO8anFHeXJfVl0QYFd140RAA1gLzJB5k= Subject key identifier: 72:90:49:2F:96:4C:A8:62:D2:8B:49:42:1E:D1:F1:28:A4:1D:6D:E2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 2F5B9D8B3479EE0E28413EF6F17EA6684365740C Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32322d3232203d3e2034383131.roa Signing time: Sun 28 Jun 2026 13:45:00 +0000 ROA not before: Sun 28 Jun 2026 13:40:00 +0000 ROA not after: Sun 27 Jun 2027 13:45:00 +0000 asID: 4811 IP address blocks: 139.159.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5b:9d:8b:34:79:ee:0e:28:41:3e:f6:f1:7e:a6:68:43:65:74:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:40:00 2026 GMT Not After : Jun 27 13:45:00 2027 GMT Subject: CN=7290492F964CA862D28B49421ED1F128A41D6DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:2a:6e:54:c2:4e:dd:d2:49:4c:78:b7:44: be:37:ac:42:72:19:6a:24:44:2d:c6:ce:65:bc:5a: a8:29:c9:63:65:9d:0a:ad:47:36:4d:f5:3c:5f:04: de:b3:20:f1:c6:67:2e:3b:b9:aa:77:e2:bd:45:99: e0:ec:00:7d:93:b9:e3:d6:3b:5e:94:61:71:4e:30: 0c:4f:30:0c:fb:0a:e4:75:6e:6a:55:bc:4b:ec:12: 1f:29:e9:fa:d5:9f:f3:e2:86:1a:eb:93:6c:29:a9: d5:7e:6b:9c:7a:86:eb:7f:d1:dc:65:84:86:f5:e4: 2c:94:4d:8d:fc:5d:f4:f1:65:c4:3b:29:6c:cb:23: e7:51:39:fd:18:31:43:64:43:b8:0f:9e:ed:a8:74: 6b:ee:32:76:33:0f:fb:bf:f9:5e:6b:2e:f7:66:d2: 9f:ec:9a:53:c5:88:7b:f5:99:69:0f:d9:13:36:ca: 28:c4:aa:50:54:d8:3f:de:5a:43:2b:ec:ec:8c:3d: d7:15:36:dd:44:70:37:3e:e9:07:00:11:58:7e:5e: 22:fe:42:48:48:88:84:12:30:3d:ec:ed:47:df:9f: 65:d5:d1:db:98:3e:43:68:f5:46:48:0c:30:a5:2b: 7f:3f:ee:00:29:4e:6a:0f:b1:70:cc:96:f9:48:5f: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:90:49:2F:96:4C:A8:62:D2:8B:49:42:1E:D1:F1:28:A4:1D:6D:E2 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.108.0/22 Signature Algorithm: sha256WithRSAEncryption 40:05:ed:93:60:a3:65:1e:e5:e8:32:fa:65:97:8d:64:d7:6f: f9:54:19:c2:b6:94:7a:27:f3:33:c2:75:a8:04:1c:12:97:25: 11:21:e8:4e:ee:2c:01:98:c7:5e:ae:a9:49:9d:da:d5:6a:35: 4f:cc:f2:41:bf:a5:02:65:87:82:1e:c6:de:ba:2a:7a:24:48: 7b:e8:20:06:d5:ab:86:8d:d9:37:2b:70:d6:3f:e3:93:8c:0b: 9b:c4:5b:75:ca:df:56:38:85:8e:2b:1e:5b:76:da:8b:51:f5: a8:05:a2:38:25:7b:95:ec:3f:40:fc:1d:3f:31:88:f6:89:85: ab:3b:fc:c5:f1:6f:f2:0f:1f:15:38:de:98:c2:8e:d6:6a:13: 73:cc:d4:66:bb:bf:6c:db:f5:86:dc:78:24:79:ad:51:7e:1e: 67:58:8b:56:62:93:d5:d5:33:5b:3b:47:42:73:37:51:83:51: 29:2f:86:40:ce:62:91:96:cb:5c:0a:05:13:85:af:19:2f:04: 57:8f:70:da:3b:14:e3:3c:a0:bd:3b:17:ea:cd:10:ed:a5:d2: 0e:e8:f7:9c:05:34:f0:92:e1:c5:ff:b1:6a:9e:94:6e:9a:2e: e9:db:05:8f:b3:a1:b7:2b:d3:3d:d4:07:16:e7:4a:40:5c:91: cf:cd:06:1d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUL1udizR57g4oQT728X6maENldAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQwMDBaFw0yNzA2MjcxMzQ1MDBaMDMxMTAvBgNV BAMTKDcyOTA0OTJGOTY0Q0E4NjJEMjhCNDk0MjFFRDFGMTI4QTQxRDZERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XipuVMJO3dJJTHi3RL43rEJy GWokRC3GzmW8WqgpyWNlnQqtRzZN9TxfBN6zIPHGZy47uap34r1FmeDsAH2TuePW O16UYXFOMAxPMAz7CuR1bmpVvEvsEh8p6frVn/Pihhrrk2wpqdV+a5x6hut/0dxl hIb15CyUTY38XfTxZcQ7KWzLI+dROf0YMUNkQ7gPnu2odGvuMnYzD/u/+V5rLvdm 0p/smlPFiHv1mWkP2RM2yijEqlBU2D/eWkMr7OyMPdcVNt1EcDc+6QcAEVh+XiL+ QkhIiIQSMD3s7Uffn2XV0duYPkNo9UZIDDClK38/7gApTmoPsXDMlvlIX/87AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUcpBJL5ZMqGLSi0lCHtHxKKQdbeIwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz NTM5MmUzMTMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAoufbDANBgkqhkiG9w0BAQsFAAOCAQEAQAXtk2CjZR7l6DL6ZZeNZNdv +VQZwraUeifzM8J1qAQcEpclESHoTu4sAZjHXq6pSZ3a1Wo1T8zyQb+lAmWHgh7G 3roqeiRIe+ggBtWrho3ZNytw1j/jk4wLm8RbdcrfVjiFjiseW3bai1H1qAWiOCV7 lew/QPwdPzGI9omFqzv8xfFv8g8fFTjemMKO1moTc8zUZru/bNv1htx4JHmtUX4e Z1iLVmKT1dUzWztHQnM3UYNRKS+GQM5ikZbLXAoFE4WvGS8EV49w2jsU4zygvTsX 6s0Q7aXSDuj3nAU08JLhxf+xap6Ubpou6dsFj7OhtyvTPdQHFudKQFyRz80GHQ== -----END CERTIFICATE-----Generated at Tue Jul 14 22:49:51 2026 by rpki-client