$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e2034383131.roa File: 3133392e3135392e3131302e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: x5w/7rdBBm639A6Ins7TJQgH6Ypnq+hy7R37z0Drfvo= Subject key identifier: CF:1E:9B:73:EA:19:93:A0:86:6F:B2:E0:A4:FE:E9:ED:42:85:7A:3C Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 0F57CFEB2C9A920AA2CC2F1F3230CFB3154C35F0 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e2034383131.roa Signing time: Sun 28 Jun 2026 13:46:21 +0000 ROA not before: Sun 28 Jun 2026 13:41:21 +0000 ROA not after: Sun 27 Jun 2027 13:46:21 +0000 asID: 4811 IP address blocks: 139.159.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:57:cf:eb:2c:9a:92:0a:a2:cc:2f:1f:32:30:cf:b3:15:4c:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:41:21 2026 GMT Not After : Jun 27 13:46:21 2027 GMT Subject: CN=CF1E9B73EA1993A0866FB2E0A4FEE9ED42857A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:78:8e:07:a3:8d:1a:3b:9c:eb:ac:4d:19: 2e:2a:5d:93:16:d0:15:d2:0e:86:4a:80:4b:93:df: c8:cf:e9:71:d6:67:f5:a7:ba:75:13:9f:d2:e1:00: 7f:01:3f:41:0a:bb:d7:f6:80:60:0c:b7:d4:1d:2a: 80:2d:06:a8:df:53:46:2f:5e:d0:d2:53:43:e8:88: 17:e1:14:7a:03:58:30:71:24:32:21:e7:7d:da:10: 4f:17:09:09:7e:88:29:38:16:22:36:7e:c0:af:c5: a2:26:b6:02:a0:53:23:8b:8d:15:d1:40:de:ce:34: f5:23:ba:0e:a1:9e:7a:9a:fe:f3:f0:50:40:19:ee: db:96:d8:a2:f7:4f:e5:68:1d:00:c7:52:c7:04:4c: cb:92:96:b7:20:b7:35:43:fc:70:77:94:8a:1f:5f: 98:89:83:5b:cc:13:17:65:05:00:db:de:2a:f4:fc: a6:52:8b:be:12:b0:7d:a2:c9:23:3e:5f:c7:76:d3: 18:d1:1a:2f:5b:90:d2:a7:b4:90:f0:07:3e:2e:d1: 93:3d:62:59:be:45:38:e9:7a:b4:47:0f:c7:b2:23: 29:b6:ab:0a:bf:de:00:12:62:d5:54:08:5c:d2:cb: b4:8e:65:95:94:4d:e8:fe:e4:e3:cf:0c:c4:56:71: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1E:9B:73:EA:19:93:A0:86:6F:B2:E0:A4:FE:E9:ED:42:85:7A:3C X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131302e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.110.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d3:a2:40:02:35:b9:95:7b:a7:fc:b5:d1:5a:e9:a3:64:57: 7a:18:1b:b1:50:ee:17:62:e6:01:15:27:36:bd:12:e8:a6:da: 3f:ad:96:67:17:77:09:1d:00:09:d3:66:dc:62:ab:cc:f1:04: 6b:17:25:b7:67:e5:0d:d9:2f:dc:77:b0:04:61:ed:ec:d5:ed: 7b:45:4d:06:07:b7:90:0f:f3:58:60:d4:79:7f:bf:ab:b1:cc: c0:d9:d0:13:e7:9f:56:97:ce:4d:93:e6:7d:95:6a:aa:7c:91: 5b:9a:46:86:1f:01:c7:68:29:58:4e:4c:28:e1:28:cd:77:4e: 06:c2:d0:b2:ea:0d:30:6c:7e:d2:6c:6a:d9:b4:ac:b9:85:e7: 8c:0f:c9:c2:f9:b2:f3:64:b9:51:2f:80:ec:80:40:4a:95:86: a4:37:e3:e8:ac:51:4b:c1:45:81:e6:63:40:c3:bf:0e:d8:60: ce:b0:9a:48:8b:75:cd:91:5c:4f:81:39:54:63:75:d7:2c:9d: 67:e1:c5:21:00:2d:55:9a:37:2a:a2:67:ce:dd:96:a3:97:04: 09:d3:96:15:bd:7a:96:da:ac:07:4c:cd:7f:c2:4c:f2:46:c9: 67:cb:f9:64:bd:da:6b:bd:8f:fe:33:a4:89:5a:ce:95:9d:2e: ad:54:1f:67 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUD1fP6yyakgqizC8fMjDPsxVMNfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQxMjFaFw0yNzA2MjcxMzQ2MjFaMDMxMTAvBgNV BAMTKENGMUU5QjczRUExOTkzQTA4NjZGQjJFMEE0RkVFOUVENDI4NTdBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoHiOB6ONGjuc66xNGS4qXZMW 0BXSDoZKgEuT38jP6XHWZ/WnunUTn9LhAH8BP0EKu9f2gGAMt9QdKoAtBqjfU0Yv XtDSU0PoiBfhFHoDWDBxJDIh533aEE8XCQl+iCk4FiI2fsCvxaImtgKgUyOLjRXR QN7ONPUjug6hnnqa/vPwUEAZ7tuW2KL3T+VoHQDHUscETMuSlrcgtzVD/HB3lIof X5iJg1vMExdlBQDb3ir0/KZSi74SsH2iySM+X8d20xjRGi9bkNKntJDwBz4u0ZM9 Ylm+RTjperRHD8eyIym2qwq/3gASYtVUCFzSy7SOZZWUTej+5OPPDMRWcSq3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUzx6bc+oZk6CGb7LgpP7p7UKFejwwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz NTM5MmUzMTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIufbjANBgkqhkiG9w0BAQsFAAOCAQEAotOiQAI1uZV7p/y10Vrpo2RX ehgbsVDuF2LmARUnNr0S6KbaP62WZxd3CR0ACdNm3GKrzPEEaxclt2flDdkv3Hew BGHt7NXte0VNBge3kA/zWGDUeX+/q7HMwNnQE+efVpfOTZPmfZVqqnyRW5pGhh8B x2gpWE5MKOEozXdOBsLQsuoNMGx+0mxq2bSsuYXnjA/Jwvmy82S5US+A7IBASpWG pDfj6KxRS8FFgeZjQMO/DthgzrCaSIt1zZFcT4E5VGN11yydZ+HFIQAtVZo3KqJn zt2Wo5cECdOWFb16ltqsB0zNf8JM8kbJZ8v5ZL3aa72P/jOkiVrOlZ0urVQfZw== -----END CERTIFICATE-----Generated at Tue Jul 14 22:49:52 2026 by rpki-client