$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e33322e302f31392d3139203d3e203535393930.roa File: 3133392e392e33322e302f31392d3139203d3e203535393930.roa (raw, json) Hash identifier: gUdyCPIQIKDTZ3icU083geFkg0zedsLGbxsTZMtemDU= Subject key identifier: 56:16:6C:D4:3B:4B:10:15:67:9B:A1:62:58:A5:0B:E4:79:93:7A:A1 Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 1581FE959C2D26670EC5297358EC24D82D9F6A91 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e33322e302f31392d3139203d3e203535393930.roa Signing time: Tue 02 Jun 2026 17:40:25 +0000 ROA not before: Tue 02 Jun 2026 17:35:25 +0000 ROA not after: Tue 01 Jun 2027 17:40:25 +0000 asID: 55990 IP address blocks: 139.9.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:81:fe:95:9c:2d:26:67:0e:c5:29:73:58:ec:24:d8:2d:9f:6a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Jun 2 17:35:25 2026 GMT Not After : Jun 1 17:40:25 2027 GMT Subject: CN=56166CD43B4B1015679BA16258A50BE479937AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:27:31:e8:f2:d4:db:92:83:dc:b8:84:01: cc:c3:e9:b3:da:4f:d4:e1:8e:2a:df:30:06:ce:fc: f2:b7:b1:d9:2d:1c:3f:9d:bf:2c:68:ab:fe:40:1f: d3:94:5f:3f:75:33:9b:a3:d6:55:ef:37:6c:5d:3d: 41:fc:d9:db:1f:05:b9:55:7e:db:21:d3:97:93:e2: 42:e3:e7:2d:99:94:04:11:50:86:5f:a3:50:f6:3d: d0:ed:ff:2c:08:f6:6a:75:b4:63:76:79:31:88:7f: 19:2d:45:22:1b:47:18:62:ce:1f:6d:76:f8:11:04: 45:8b:54:9e:32:c4:03:5f:41:13:37:e4:a8:9d:a7: c2:a8:1d:8e:4f:ef:10:12:2e:15:45:2f:11:00:f0: 2c:72:82:1d:42:8e:ca:07:e3:ea:d1:c4:aa:42:95: 23:58:94:a7:99:c4:0c:86:21:c5:fe:a0:bf:11:d5: e9:d1:70:0f:15:ab:ff:c3:31:f9:bd:16:38:57:80: 61:5f:b2:96:13:bd:09:43:32:41:e0:2e:9a:84:2a: 19:37:72:ce:10:5d:30:79:19:f7:d7:3b:39:c5:08: 6b:d3:10:41:5d:7f:f5:b9:03:84:41:ee:8a:a9:10: 5c:8b:80:61:31:00:f5:20:a9:05:2d:c9:64:78:34: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:16:6C:D4:3B:4B:10:15:67:9B:A1:62:58:A5:0B:E4:79:93:7A:A1 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e33322e302f31392d3139203d3e203535393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.9.32.0/19 Signature Algorithm: sha256WithRSAEncryption 04:74:dc:63:3b:6a:b3:8e:45:97:96:b0:9b:af:0c:ea:1a:f1: d5:12:97:6c:9f:18:af:c7:68:82:2e:c0:af:89:7d:b6:b6:21: 36:96:de:68:15:06:66:71:ca:ee:22:01:c0:f7:a1:de:c0:31: 80:cf:02:6f:87:5e:e7:21:0b:d7:b8:33:49:16:3f:e3:18:95: e0:3e:c9:85:e0:bc:31:fa:0e:2f:3e:c4:27:42:d6:38:f7:85: d6:1f:ab:f2:68:53:bf:c1:c3:19:9f:d6:e8:79:40:42:ad:e5: c0:cb:47:2c:2e:38:ca:ad:d9:8c:56:c6:37:c3:1f:51:ef:e2: 63:0b:88:de:90:04:5e:ff:5c:1c:26:ef:e8:47:eb:84:ba:e6: f5:d1:c7:70:83:2b:eb:16:9f:cf:9b:cd:9d:8b:78:58:7b:f6: b7:92:1b:a1:2f:16:e3:a5:b1:d7:82:2d:42:ff:b6:65:85:f9: 3b:a1:59:f5:ba:7a:7f:2f:08:2a:b0:d8:bb:ed:aa:e1:87:c7: c2:91:ec:5c:35:19:d4:d0:46:cc:d3:20:31:95:06:89:00:8a: b6:0c:e2:dd:52:fe:8c:53:85:83:18:c0:74:dc:4e:1d:3f:8b: bf:64:76:4f:c1:c7:31:72:5d:c2:f4:f5:36:81:ef:c7:ba:5f: b8:98:eb:78 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUFYH+lZwtJmcOxSlzWOwk2C2fapEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA2MDIxNzM1MjVaFw0yNzA2MDExNzQwMjVaMDMxMTAvBgNV BAMTKDU2MTY2Q0Q0M0I0QjEwMTU2NzlCQTE2MjU4QTUwQkU0Nzk5MzdBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wycx6PLU25KD3LiEAczD6bPa T9ThjirfMAbO/PK3sdktHD+dvyxoq/5AH9OUXz91M5uj1lXvN2xdPUH82dsfBblV ftsh05eT4kLj5y2ZlAQRUIZfo1D2PdDt/ywI9mp1tGN2eTGIfxktRSIbRxhizh9t dvgRBEWLVJ4yxANfQRM35Kidp8KoHY5P7xASLhVFLxEA8Cxygh1CjsoH4+rRxKpC lSNYlKeZxAyGIcX+oL8R1enRcA8Vq//DMfm9FjhXgGFfspYTvQlDMkHgLpqEKhk3 cs4QXTB5GffXOznFCGvTEEFdf/W5A4RB7oqpEFyLgGExAPUgqQUtyWR4NJ2JAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUVhZs1DtLEBVnm6FiWKUL5HmTeqEwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgxLzEvMzEzMzM5MmUzOTJl MzMzMjJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDM1MzUzOTM5MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAWLCSAwDQYJKoZIhvcNAQELBQADggEBAAR03GM7arOORZeWsJuvDOoa8dUSl2yf GK/HaIIuwK+Jfba2ITaW3mgVBmZxyu4iAcD3od7AMYDPAm+HXuchC9e4M0kWP+MY leA+yYXgvDH6Di8+xCdC1jj3hdYfq/JoU7/Bwxmf1uh5QEKt5cDLRywuOMqt2YxW xjfDH1Hv4mMLiN6QBF7/XBwm7+hH64S65vXRx3CDK+sWn8+bzZ2LeFh79reSG6Ev FuOlsdeCLUL/tmWF+TuhWfW6en8vCCqw2LvtquGHx8KR7Fw1GdTQRszTIDGVBokA irYM4t1S/oxThYMYwHTcTh0/i79kdk/BxzFyXcL09TaB78e6X7iY63g= -----END CERTIFICATE-----Generated at Fri Jun 12 04:55:55 2026 by rpki-client