$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3132302e302f32312d3231203d3e203535393930.roa File: 3133392e392e3132302e302f32312d3231203d3e203535393930.roa (raw, json) Hash identifier: AwHgrG98Np20XGsl9SvCkVSBNJVfdNTVPdM7awXmDZg= Subject key identifier: AA:51:A4:B6:FF:1E:AF:58:39:ED:15:5B:9D:78:AC:22:86:A8:ED:95 Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 17A49682E05CDFE5B63E971D77387BDDB2902168 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3132302e302f32312d3231203d3e203535393930.roa Signing time: Thu 04 Jun 2026 16:33:05 +0000 ROA not before: Thu 04 Jun 2026 16:28:05 +0000 ROA not after: Thu 03 Jun 2027 16:33:05 +0000 asID: 55990 IP address blocks: 139.9.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a4:96:82:e0:5c:df:e5:b6:3e:97:1d:77:38:7b:dd:b2:90:21:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 4 16:28:05 2026 GMT Not After : Jun 3 16:33:05 2027 GMT Subject: CN=AA51A4B6FF1EAF5839ED155B9D78AC2286A8ED95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:72:e9:46:52:d2:ed:ed:ea:f8:c0:7d:82: 08:e4:bc:47:78:f2:4f:6a:ce:1f:b9:8d:23:44:a9: e4:b3:1b:f1:95:db:13:fe:8e:6b:c7:33:21:a2:df: 9f:fa:dd:68:65:c2:4b:de:ba:52:76:3a:00:a3:cf: 9c:85:49:64:96:03:df:ef:33:6f:fe:9d:e9:3d:0f: ba:a0:d8:df:75:cc:a6:db:8b:3c:30:d7:e8:40:78: ca:fe:ab:bb:fa:5f:12:dc:bc:de:ad:a8:58:04:f3: 79:68:ad:a9:e3:6f:22:df:a8:ba:8d:46:99:a4:8a: f3:55:c4:1c:44:07:2d:bc:42:df:97:d4:2e:d4:a7: a5:98:6b:0f:60:e5:58:21:9b:79:43:05:41:c6:79: 14:4a:42:14:b0:0b:34:19:6a:c7:88:47:fa:82:20: 1f:ac:12:e2:32:2a:a4:71:8b:33:98:1c:c1:60:56: 6c:80:b8:43:84:5d:5f:ee:1f:21:13:2a:18:40:17: cd:11:5c:74:65:c7:9d:b2:34:f9:6f:54:91:88:49: fa:56:1e:ab:1b:7e:cd:8b:1d:df:be:a4:95:7c:35: 4e:66:ed:c3:37:ff:88:a3:73:b7:88:e1:88:e8:39: dd:27:70:d5:78:98:f9:77:32:b4:72:9a:b0:31:96: 26:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:51:A4:B6:FF:1E:AF:58:39:ED:15:5B:9D:78:AC:22:86:A8:ED:95 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3132302e302f32312d3231203d3e203535393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.9.120.0/21 Signature Algorithm: sha256WithRSAEncryption d7:ab:dd:e4:ab:a5:e4:0f:19:f5:97:90:de:c6:f7:81:2a:a5: 73:df:61:e3:3a:50:3c:22:9b:e9:f7:a2:6c:2c:b3:da:40:dc: a2:01:fe:68:a6:9a:93:f4:1e:d6:b1:e9:82:e5:9d:ca:1c:09: eb:ac:b0:89:d8:82:9b:27:5f:0a:12:7d:ae:0e:65:33:68:1b: 49:be:a0:f7:4f:00:54:a2:03:a8:ba:18:a1:a7:1b:66:f6:a1: e5:b7:20:d5:4e:50:e6:15:36:1a:6a:4c:2c:04:38:17:5c:c8: 75:04:15:f2:c4:3c:a3:f0:5a:af:b7:32:ff:19:85:73:11:3f: 82:09:69:a2:a8:c1:1f:34:cc:e3:61:b0:cb:44:d2:fc:c7:ea: 52:7c:fa:83:25:89:a4:95:d4:84:7a:94:ba:cf:56:25:6c:4e: 05:98:b9:80:44:c1:d8:3c:39:21:94:94:6d:a9:9d:fa:7a:15: 86:ed:4c:67:88:f2:74:ac:ef:6f:15:46:c7:45:b7:59:6e:2b: 73:ca:bf:81:1c:1d:a2:ee:12:06:df:1a:89:b2:b1:e5:e1:85: ad:c6:89:7d:cd:0e:ba:38:12:8f:d4:b0:26:f3:41:78:23:59: c6:3e:f3:a7:30:0c:89:b7:72:50:9d:40:f4:70:58:1e:3d:e6: 95:87:a7:67 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUF6SWguBc3+W2Ppcddzh73bKQIWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MDQxNjI4MDVaFw0yNzA2MDMxNjMzMDVaMDMxMTAvBgNV BAMTKEFBNTFBNEI2RkYxRUFGNTgzOUVEMTU1QjlENzhBQzIyODZBOEVEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduXLpRlLS7e3q+MB9ggjkvEd4 8k9qzh+5jSNEqeSzG/GV2xP+jmvHMyGi35/63WhlwkveulJ2OgCjz5yFSWSWA9/v M2/+nek9D7qg2N91zKbbizww1+hAeMr+q7v6XxLcvN6tqFgE83loranjbyLfqLqN RpmkivNVxBxEBy28Qt+X1C7Up6WYaw9g5Vghm3lDBUHGeRRKQhSwCzQZaseIR/qC IB+sEuIyKqRxizOYHMFgVmyAuEOEXV/uHyETKhhAF80RXHRlx52yNPlvVJGISfpW Hqsbfs2LHd++pJV8NU5m7cM3/4ijc7eI4YjoOd0ncNV4mPl3MrRymrAxliarAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUqlGktv8er1g57RVbnXisIoao7ZUwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgxLzEvMzEzMzM5MmUzOTJl MzEzMjMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzNTM5MzkzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA4sJeDANBgkqhkiG9w0BAQsFAAOCAQEA16vd5Kul5A8Z9ZeQ3sb3gSqlc99h 4zpQPCKb6feibCyz2kDcogH+aKaak/Qe1rHpguWdyhwJ66ywidiCmydfChJ9rg5l M2gbSb6g908AVKIDqLoYoacbZvah5bcg1U5Q5hU2GmpMLAQ4F1zIdQQV8sQ8o/Ba r7cy/xmFcxE/gglpoqjBHzTM42Gwy0TS/MfqUnz6gyWJpJXUhHqUus9WJWxOBZi5 gETB2Dw5IZSUbamd+noVhu1MZ4jydKzvbxVGx0W3WW4rc8q/gRwdou4SBt8aibKx 5eGFrcaJfc0OujgSj9SwJvNBeCNZxj7zpzAMibdyUJ1A9HBYHj3mlYenZw== -----END CERTIFICATE-----Generated at Fri Jun 12 04:55:57 2026 by rpki-client