$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e203538343636.roa File: 3133392e3135392e3136382e302f32322d3232203d3e203538343636.roa (raw, json) Hash identifier: Lnr0Iug9uFYrWfpo2tfDiUF3nmykPUZAzvBcqulV/Fk= Subject key identifier: AA:B5:78:FF:86:DC:3E:06:2E:57:7A:B3:F2:EA:16:E1:5C:AA:EE:D9 Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 586429C96F26D092A2EC0C3922784BE11381D9DB Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e203538343636.roa Signing time: Tue 16 Jun 2026 14:15:56 +0000 ROA not before: Tue 16 Jun 2026 14:10:56 +0000 ROA not after: Tue 15 Jun 2027 14:15:56 +0000 asID: 58466 IP address blocks: 139.159.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:64:29:c9:6f:26:d0:92:a2:ec:0c:39:22:78:4b:e1:13:81:d9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 16 14:10:56 2026 GMT Not After : Jun 15 14:15:56 2027 GMT Subject: CN=AAB578FF86DC3E062E577AB3F2EA16E15CAAEED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:7d:ab:a0:6a:e8:6d:b8:59:22:9d:5c:c7: f0:79:78:45:55:f4:82:d9:d7:54:e5:58:f7:66:84: bf:2c:db:f8:92:59:ac:d2:59:15:10:70:7b:38:c9: 10:c2:c3:ce:a2:5e:39:c3:e3:c6:9f:4b:f8:8a:17: ad:33:b6:5d:20:3e:b2:be:50:d1:85:eb:4e:4f:05: 20:c6:d4:fb:15:f1:a6:e8:7d:d9:b1:a5:cd:22:10: a2:e8:6b:60:2b:48:39:2c:d1:de:d8:23:e7:42:a4: ce:8a:46:08:b2:e8:65:fe:e9:de:64:af:34:83:27: c9:ba:3d:7e:5c:a8:bc:d3:f3:d4:be:9a:6c:fe:87: 7c:14:26:71:06:4b:a8:51:0e:e5:2f:3e:c5:46:5f: 08:56:52:d7:57:d0:ef:86:9a:32:ad:5c:79:31:41: 4b:60:b5:c6:88:5d:d4:c9:0f:bc:32:15:32:c1:a2: 0b:2e:c7:79:78:18:5c:24:5a:03:44:fe:cc:d5:54: a9:8e:bb:00:f0:af:ae:5e:c9:74:a1:56:9d:0c:35: 89:17:27:dc:b1:eb:57:39:77:01:9d:58:6c:54:84: 45:8b:5e:6e:b4:6b:2c:ac:73:73:c8:0d:e7:64:ac: 1c:e4:de:90:aa:88:d9:ee:78:8b:58:8d:78:f3:ba: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B5:78:FF:86:DC:3E:06:2E:57:7A:B3:F2:EA:16:E1:5C:AA:EE:D9 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.168.0/22 Signature Algorithm: sha256WithRSAEncryption 89:26:c0:fe:b9:07:89:6a:be:e9:9f:f0:51:18:c4:97:3b:d6: 77:13:f0:9a:fa:2c:65:de:f4:ec:b9:15:60:69:44:b4:56:0e: 6a:df:92:49:0d:ff:0e:60:11:b8:7e:bb:37:f3:4a:f6:ff:19: 2e:85:b7:18:62:96:a7:c6:70:16:42:0a:2e:48:b9:28:6e:dd: 56:e9:ca:4b:f3:ec:a5:d6:f1:c2:0b:ed:67:8f:07:67:88:f9: 2a:a0:db:dc:49:46:0d:c7:5c:e6:e3:11:75:c7:89:4d:96:6d: 93:05:77:a0:65:ed:ff:87:07:fb:19:a6:5e:e9:37:ab:4c:b4: fb:cc:34:f6:24:93:ac:77:7e:4f:58:bf:15:53:30:78:83:cd: 58:e5:06:2f:be:9b:fe:b3:98:65:04:97:71:b0:4b:6a:6a:d2: 5a:2b:6a:c7:cd:3c:a4:f3:d2:cb:be:2c:8d:97:2a:fa:22:14: 0f:55:b2:29:37:7c:ae:4c:79:e1:3d:8a:65:a6:2f:37:5e:51: d4:42:0b:0e:d4:91:e2:fb:b6:b3:e9:00:5d:e4:57:dc:32:55: c9:d6:51:f3:70:58:0e:fb:0a:c3:b8:92:0b:98:79:52:45:41: c9:37:0f:e4:33:0b:6a:f2:43:2f:79:5e:86:98:ad:52:e8:e5: 06:1f:6d:a1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWGQpyW8m0JKi7Aw5InhL4ROB2dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MTYxNDEwNTZaFw0yNzA2MTUxNDE1NTZaMDMxMTAvBgNV BAMTKEFBQjU3OEZGODZEQzNFMDYyRTU3N0FCM0YyRUExNkUxNUNBQUVFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoH2roGrobbhZIp1cx/B5eEVV 9ILZ11TlWPdmhL8s2/iSWazSWRUQcHs4yRDCw86iXjnD48afS/iKF60ztl0gPrK+ UNGF605PBSDG1PsV8abofdmxpc0iEKLoa2ArSDks0d7YI+dCpM6KRgiy6GX+6d5k rzSDJ8m6PX5cqLzT89S+mmz+h3wUJnEGS6hRDuUvPsVGXwhWUtdX0O+GmjKtXHkx QUtgtcaIXdTJD7wyFTLBogsux3l4GFwkWgNE/szVVKmOuwDwr65eyXShVp0MNYkX J9yx61c5dwGdWGxUhEWLXm60ayysc3PIDedkrBzk3pCqiNnueItYjXjzuhwdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUqrV4/4bcPgYuV3qz8uoW4Vyq7tkwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS8zMTMzMzkyZTMx MzUzOTJlMzEzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAoufqDANBgkqhkiG9w0BAQsFAAOCAQEAiSbA/rkHiWq+6Z/wURjE lzvWdxPwmvosZd707LkVYGlEtFYOat+SSQ3/DmARuH67N/NK9v8ZLoW3GGKWp8Zw FkIKLki5KG7dVunKS/PspdbxwgvtZ48HZ4j5KqDb3ElGDcdc5uMRdceJTZZtkwV3 oGXt/4cH+xmmXuk3q0y0+8w09iSTrHd+T1i/FVMweIPNWOUGL76b/rOYZQSXcbBL amrSWitqx808pPPSy74sjZcq+iIUD1WyKTd8rkx54T2KZaYvN15R1EILDtSR4vu2 s+kAXeRX3DJVydZR83BYDvsKw7iSC5h5UkVByTcP5DMLavJDL3lehpitUujlBh9t oQ== -----END CERTIFICATE-----Generated at Tue Jul 14 23:01:59 2026 by rpki-client