$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32312d3231203d3e2034383131.roa File: 3133392e3135392e39362e302f32312d3231203d3e2034383131.roa (raw, json) Hash identifier: SXBK1HRfMyGFMtNljLtFLSEV86QhaY6pAGON1iOIIFI= Subject key identifier: FE:B3:6D:96:F9:A6:01:0A:F0:54:B5:01:40:9D:76:EF:D3:32:27:07 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 6EB03FAA8C91B824E110C20C6478647C8E782B4A Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32312d3231203d3e2034383131.roa Signing time: Sun 28 Jun 2026 13:50:32 +0000 ROA not before: Sun 28 Jun 2026 13:45:32 +0000 ROA not after: Sun 27 Jun 2027 13:50:32 +0000 asID: 4811 IP address blocks: 139.159.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b0:3f:aa:8c:91:b8:24:e1:10:c2:0c:64:78:64:7c:8e:78:2b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 28 13:45:32 2026 GMT Not After : Jun 27 13:50:32 2027 GMT Subject: CN=FEB36D96F9A6010AF054B501409D76EFD3322707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:65:12:a4:33:01:cf:1a:09:24:09:6c:7a: 5b:33:45:56:6f:9e:38:b8:ce:c1:39:ad:1e:bb:ec: 6d:44:15:2b:29:60:bd:18:da:88:b1:f9:77:0a:20: 5e:36:14:8f:c7:b6:3d:7a:7e:ea:3b:48:fc:1d:54: 79:5f:d8:8b:41:e5:d6:92:49:11:39:ba:e9:6a:6e: e8:49:74:2e:7b:ca:82:09:50:27:88:88:70:c7:59: ba:59:ce:f7:ac:fa:a4:9e:bf:52:c3:fd:df:bd:e1: 89:e4:b1:96:bb:1a:7e:2b:c8:76:24:eb:8e:66:13: 67:52:be:3e:fe:5c:64:c8:fb:18:b4:d7:86:af:4e: 56:20:ec:bb:45:65:29:27:51:8d:89:ad:5b:6c:7f: a8:d7:92:7e:18:ff:63:e1:98:23:87:97:9c:75:8a: 18:a6:05:7f:25:e7:7c:20:97:4f:2c:49:24:8c:59: 24:e9:d4:87:09:b6:6d:d3:a8:cd:54:e1:d1:0a:90: 92:18:b0:25:6e:bb:7c:c7:4e:14:bc:ac:1b:de:80: 89:76:4f:80:95:44:01:89:36:ad:7e:34:65:84:a8: b4:ec:25:43:e3:f6:8d:04:86:9a:0c:e7:38:b3:35: c4:af:f8:98:4d:c8:86:2e:7f:db:34:03:0b:ea:13: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:6D:96:F9:A6:01:0A:F0:54:B5:01:40:9D:76:EF:D3:32:27:07 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e39362e302f32312d3231203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.96.0/21 Signature Algorithm: sha256WithRSAEncryption 58:cc:aa:64:33:ac:cc:5f:e5:65:49:f1:5e:6f:c7:68:a1:33: d7:1d:8c:d3:0a:7a:84:de:66:4d:d0:9c:aa:c4:cf:f8:4f:b6: 1a:42:fa:a3:da:7d:76:7d:63:2a:f4:20:58:8b:5e:b1:2b:9f: fe:a0:83:25:84:cd:0a:f1:fb:c9:2f:88:1f:43:22:7a:d1:91: da:e4:8f:c7:76:81:b1:f0:28:d8:c7:93:38:03:e6:b9:8b:49: 0d:37:df:26:2f:92:51:df:31:2a:af:81:b4:3c:0b:8f:c4:39: 74:ed:91:f7:65:77:c1:8b:bc:2a:86:68:67:6f:9a:62:55:c6: 91:6d:b6:00:23:b4:36:9f:50:e0:3a:d6:75:76:1f:1d:dd:32: b9:63:61:07:87:43:a7:6a:81:75:d6:64:04:ec:f8:33:18:9d: 3a:f5:f1:37:5e:fa:4f:22:13:41:b2:22:a0:6d:37:f5:06:d5: c3:4b:7d:9b:f8:06:6d:50:d7:6e:0b:9d:4d:e8:cc:f2:d3:5d: 8d:b6:f7:e0:c9:28:5d:29:c3:d2:77:21:64:fd:59:92:03:46: 91:bc:85:92:bd:12:06:e4:ab:2e:c4:fb:db:0e:80:a2:52:ac: 98:85:88:9a:95:5a:68:ad:40:f6:95:f5:8d:9f:5d:c6:de:d7: 37:b8:0f:9a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUbrA/qoyRuCThEMIMZHhkfI54K0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MjgxMzQ1MzJaFw0yNzA2MjcxMzUwMzJaMDMxMTAvBgNV BAMTKEZFQjM2RDk2RjlBNjAxMEFGMDU0QjUwMTQwOUQ3NkVGRDMzMjI3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TmUSpDMBzxoJJAlselszRVZv nji4zsE5rR677G1EFSspYL0Y2oix+XcKIF42FI/Htj16fuo7SPwdVHlf2ItB5daS SRE5uulqbuhJdC57yoIJUCeIiHDHWbpZzves+qSev1LD/d+94YnksZa7Gn4ryHYk 645mE2dSvj7+XGTI+xi014avTlYg7LtFZSknUY2JrVtsf6jXkn4Y/2PhmCOHl5x1 ihimBX8l53wgl08sSSSMWSTp1IcJtm3TqM1U4dEKkJIYsCVuu3zHThS8rBvegIl2 T4CVRAGJNq1+NGWEqLTsJUPj9o0EhpoM5zizNcSv+JhNyIYuf9s0AwvqEwZ/AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU/rNtlvmmAQrwVLUBQJ1279MyJwcwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0LzEvMzEzMzM5MmUzMTM1 MzkyZTM5MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA4ufYDANBgkqhkiG9w0BAQsFAAOCAQEAWMyqZDOszF/lZUnxXm/HaKEz1x2M 0wp6hN5mTdCcqsTP+E+2GkL6o9p9dn1jKvQgWItesSuf/qCDJYTNCvH7yS+IH0Mi etGR2uSPx3aBsfAo2MeTOAPmuYtJDTffJi+SUd8xKq+BtDwLj8Q5dO2R92V3wYu8 KoZoZ2+aYlXGkW22ACO0Np9Q4DrWdXYfHd0yuWNhB4dDp2qBddZkBOz4MxidOvXx N176TyITQbIioG039QbVw0t9m/gGbVDXbgudTejM8tNdjbb34MkoXSnD0nchZP1Z kgNGkbyFkr0SBuSrLsT72w6AolKsmIWImpVaaK1A9pX1jZ9dxt7XN7gPmg== -----END CERTIFICATE-----Generated at Tue Jul 14 22:49:53 2026 by rpki-client