$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32332d3233203d3e2034383131.roa File: 3133392e3135392e3130382e302f32332d3233203d3e2034383131.roa (raw, json) Hash identifier: SQIAiu4xcKTBzHc8DxVHvpp0fjSMpgAqiP+zlDTLQa4= Subject key identifier: D1:2F:17:2C:B0:1E:6D:5B:94:DA:96:54:E9:20:2A:0D:E4:FF:85:36 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 4C090EF7E4C331C41E7E83B1F812C67A17F09D5F Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32332d3233203d3e2034383131.roa Signing time: Sun 28 Jun 2026 13:45:00 +0000 ROA not before: Sun 28 Jun 2026 13:40:00 +0000 ROA not after: Sun 27 Jun 2027 13:45:00 +0000 asID: 4811 IP address blocks: 139.159.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:09:0e:f7:e4:c3:31:c4:1e:7e:83:b1:f8:12:c6:7a:17:f0:9d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:40:00 2026 GMT Not After : Jun 27 13:45:00 2027 GMT Subject: CN=D12F172CB01E6D5B94DA9654E9202A0DE4FF8536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:81:7e:34:87:58:b4:b6:72:96:f8:ce:1e: 11:f9:bd:3f:c7:98:3f:a3:78:da:c9:dd:cc:c2:97: e3:e0:ae:a5:83:df:88:bb:b8:9b:50:54:a5:e2:52: 2c:2d:a6:56:52:86:18:3d:69:34:ac:44:76:7f:7b: ec:21:2f:a9:d0:a1:bd:f8:b5:a9:91:eb:37:cf:ba: 52:6b:54:f4:9f:2b:43:8f:86:a9:38:85:03:41:f8: 2b:9a:41:48:b9:d6:85:3d:d5:07:d3:64:73:91:9c: ea:ed:ba:6b:3a:19:1a:e2:62:a3:0b:13:17:a0:b6: 56:82:5c:9b:a8:a9:5d:a0:a0:8e:28:be:75:0e:b0: 2d:48:43:d5:e4:44:c0:f9:bb:2b:95:34:35:77:8f: e1:f1:78:f0:d9:3a:0d:04:84:b3:4b:e8:c8:b0:ad: 89:21:b5:e0:fc:02:46:03:74:e3:4a:2c:68:49:ba: 4f:f9:05:4a:4d:e1:c5:df:48:cf:14:d5:f2:b1:aa: 5e:39:45:59:c2:b7:42:8d:e4:80:a6:59:cc:dd:9a: b0:04:c3:76:b8:04:5f:f0:21:57:80:43:cb:3b:90: c9:6c:ed:9f:ee:56:ca:c1:51:c3:b2:65:41:13:0a: 92:71:82:c4:ac:39:8a:73:ad:af:f6:26:bf:53:d5: d8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2F:17:2C:B0:1E:6D:5B:94:DA:96:54:E9:20:2A:0D:E4:FF:85:36 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3130382e302f32332d3233203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.108.0/23 Signature Algorithm: sha256WithRSAEncryption b0:7f:9d:b6:89:17:e9:d3:6d:68:9b:d9:c0:b7:30:8c:51:33: 86:4d:e3:7c:56:2a:16:b3:99:4e:e3:7e:10:7b:16:9c:4f:d9: 7d:7b:4a:bc:02:ef:8b:25:d0:50:1b:a0:26:a3:bb:22:c1:58: d6:c0:77:5f:fd:3a:4d:27:c6:16:48:5c:13:f3:0b:b1:01:54: 74:9a:95:7b:f2:2f:d1:17:31:ec:4b:f3:ed:e5:e0:2e:fe:4d: ba:47:9c:25:b0:7c:fd:7d:be:72:60:58:5c:2d:8f:e2:88:11: df:a2:65:38:fe:f9:72:51:6a:eb:00:58:80:95:6d:04:be:ac: a3:0b:5c:9f:7f:ae:e3:da:53:76:59:b9:3b:cc:ee:4c:c2:8f: a5:9e:b6:90:3a:3d:fe:4e:10:ff:88:93:73:fa:a8:32:3e:d9: bb:91:8c:0f:fc:23:b2:52:72:39:7e:59:ab:b2:62:4a:0c:82: 8c:e2:11:b4:1f:07:8b:7e:b8:f9:9d:01:73:40:43:1c:a1:2c: ef:98:20:ba:3f:81:73:7c:97:e7:b7:bb:78:91:f2:9a:8f:eb: d1:b6:6c:33:4c:1f:83:d6:cf:c8:e9:9b:ab:81:ba:b0:a9:0b: 28:f7:6e:22:56:23:0a:92:bd:ad:48:e9:8b:c9:93:8d:3c:21: 98:ae:57:88 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTAkO9+TDMcQefoOx+BLGehfwnV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQwMDBaFw0yNzA2MjcxMzQ1MDBaMDMxMTAvBgNV BAMTKEQxMkYxNzJDQjAxRTZENUI5NERBOTY1NEU5MjAyQTBERTRGRjg1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXxIF+NIdYtLZylvjOHhH5vT/H mD+jeNrJ3czCl+PgrqWD34i7uJtQVKXiUiwtplZShhg9aTSsRHZ/e+whL6nQob34 tamR6zfPulJrVPSfK0OPhqk4hQNB+CuaQUi51oU91QfTZHORnOrtums6GRriYqML ExegtlaCXJuoqV2goI4ovnUOsC1IQ9XkRMD5uyuVNDV3j+HxePDZOg0EhLNL6Miw rYkhteD8AkYDdONKLGhJuk/5BUpN4cXfSM8U1fKxql45RVnCt0KN5ICmWczdmrAE w3a4BF/wIVeAQ8s7kMls7Z/uVsrBUcOyZUETCpJxgsSsOYpzra/2Jr9T1dh1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU0S8XLLAebVuU2pZU6SAqDeT/hTYwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz NTM5MmUzMTMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAYufbDANBgkqhkiG9w0BAQsFAAOCAQEAsH+dtokX6dNtaJvZwLcwjFEz hk3jfFYqFrOZTuN+EHsWnE/ZfXtKvALviyXQUBugJqO7IsFY1sB3X/06TSfGFkhc E/MLsQFUdJqVe/Iv0Rcx7Evz7eXgLv5NukecJbB8/X2+cmBYXC2P4ogR36JlOP75 clFq6wBYgJVtBL6sowtcn3+u49pTdlm5O8zuTMKPpZ62kDo9/k4Q/4iTc/qoMj7Z u5GMD/wjslJyOX5Zq7JiSgyCjOIRtB8Hi364+Z0Bc0BDHKEs75gguj+Bc3yX57e7 eJHymo/r0bZsM0wfg9bPyOmbq4G6sKkLKPduIlYjCpK9rUjpi8mTjTwhmK5XiA== -----END CERTIFICATE-----Generated at Tue Jul 14 22:49:53 2026 by rpki-client