$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/3133392e3137302e302e302f31362d3136203d3e2034383337.roa File: 3133392e3137302e302e302f31362d3136203d3e2034383337.roa (raw, json) Hash identifier: vJC5yGofgq+qqi5/FiytcIlv6j0Ti5OArlHh0F34cmI= Subject key identifier: 0E:36:F6:32:13:72:2F:07:7A:56:F2:F3:D5:28:92:B8:37:49:F4:60 Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Certificate serial: 3F59723247E6B324AB08A2ACEC1210EDCEA3608B Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/3133392e3137302e302e302f31362d3136203d3e2034383337.roa Signing time: Fri 29 May 2026 14:48:12 +0000 ROA not before: Fri 29 May 2026 14:43:12 +0000 ROA not after: Fri 28 May 2027 14:48:12 +0000 asID: 4837 IP address blocks: 139.170.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:59:72:32:47:e6:b3:24:ab:08:a2:ac:ec:12:10:ed:ce:a3:60:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Validity Not Before: May 29 14:43:12 2026 GMT Not After : May 28 14:48:12 2027 GMT Subject: CN=0E36F63213722F077A56F2F3D52892B83749F460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:09:ee:99:6d:ac:74:5f:bd:e2:63:3a:5d: c9:94:23:6d:3c:94:4d:06:11:36:97:6b:44:bd:73: ed:dd:04:a2:b1:79:62:7d:bc:98:80:bc:b4:6f:6e: 63:8e:b5:8a:1b:1a:16:56:48:47:b6:14:4f:07:93: a4:48:dc:c9:67:90:fe:a4:74:82:c3:3e:ce:36:17: 12:8f:19:9e:46:95:ec:d8:f1:4b:ee:53:fe:d7:66: e6:55:e8:6d:b6:40:2d:db:62:29:66:fc:40:f0:8c: 56:3a:93:c4:82:4d:ae:69:70:9b:01:b5:b1:ac:40: 83:00:24:1b:3f:3d:f0:6f:d5:62:f1:91:ea:10:d6: 58:33:15:ef:c7:b9:4f:c3:7a:17:fe:b3:50:53:2b: 19:1d:a2:1f:7f:d4:1d:69:6a:79:c8:2f:71:40:ba: e8:1d:b6:eb:14:c1:40:5d:18:42:d2:f5:05:e8:14: d2:ea:3e:1e:ae:c9:cd:d0:ad:ea:59:0d:d5:a7:a3: f7:e0:32:1e:cc:b5:0e:84:b7:c2:f0:21:e2:e9:b8: 74:a1:ee:c7:01:1a:de:e4:6b:8c:dc:c3:f6:be:7a: 08:33:3a:3a:67:62:a4:d4:81:4a:49:a5:4e:c1:69: 02:d8:91:46:46:28:06:97:16:ca:40:ec:80:11:8e: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:F6:32:13:72:2F:07:7A:56:F2:F3:D5:28:92:B8:37:49:F4:60 X509v3 Authority Key Identifier: keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/3133392e3137302e302e302f31362d3136203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.170.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3e:e5:ef:13:74:51:1c:ee:39:ff:c2:99:6c:0a:70:f6:44:43: 3c:00:8d:8b:9e:c4:f4:0f:49:54:64:2a:cd:80:f8:db:d7:7f: b0:62:2b:cd:f1:f1:1b:8c:1f:b3:b7:72:f8:5a:44:a0:21:83: b5:d9:3b:d6:d9:14:67:90:67:9c:a4:f9:16:0f:28:a5:a4:3c: 42:ab:11:c6:35:34:dd:a4:6a:b6:52:6a:f3:b9:a2:e2:4d:f7: 8b:f8:c1:33:3e:da:d0:2b:ca:34:fc:e5:33:ff:37:97:e6:e1: a3:cf:09:40:7e:39:06:ab:3c:eb:fe:70:fb:31:ce:23:1f:ea: 41:46:80:9a:0b:5b:1a:b7:b3:05:af:06:80:39:16:ee:0a:1a: 6a:67:c7:9e:f9:d8:6d:48:8b:95:ed:01:6a:08:4d:4e:49:f8: 3c:6e:b5:ce:f3:b8:44:23:01:8c:e8:0c:ff:80:f4:2d:2f:99: 30:da:ca:5f:3d:c0:d8:3d:e7:32:15:09:74:bd:c5:d2:d4:8f: 70:69:c3:76:ea:d4:00:06:aa:45:23:fc:8a:4f:08:f4:17:b3: 36:ba:bf:f0:de:57:7c:87:9d:34:13:2e:e4:77:bc:d9:44:3c: 31:13:e5:70:78:94:df:a0:5b:35:6a:fd:cb:49:03:d7:c0:09: 33:f3:70:99 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUP1lyMkfmsySrCKKs7BIQ7c6jYIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDUyOTE0NDMxMloX DTI3MDUyODE0NDgxMlowMzExMC8GA1UEAxMoMEUzNkY2MzIxMzcyMkYwNzdBNTZG MkYzRDUyODkyQjgzNzQ5RjQ2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7aCe6Zbax0X73iYzpdyZQjbTyUTQYRNpdrRL1z7d0EorF5Yn28mIC8tG9u Y461ihsaFlZIR7YUTweTpEjcyWeQ/qR0gsM+zjYXEo8ZnkaV7NjxS+5T/tdm5lXo bbZALdtiKWb8QPCMVjqTxIJNrmlwmwG1saxAgwAkGz898G/VYvGR6hDWWDMV78e5 T8N6F/6zUFMrGR2iH3/UHWlqecgvcUC66B226xTBQF0YQtL1BegU0uo+Hq7JzdCt 6lkN1aej9+AyHsy1DoS3wvAh4um4dKHuxwEa3uRrjNzD9r56CDM6OmdipNSBSkml TsFpAtiRRkYoBpcWykDsgBGOGlMCAwEAAaOCAg4wggIKMB0GA1UdDgQWBBQONvYy E3IvB3pW8vPVKJK4N0n0YDAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz eWVVNjZQMkdNY2pPeUtENWtRLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUF BzALhmxyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTY3MDQ1OTM2 OTUzNDI1OTMvMC8zMTMzMzkyZTMxMzczMDJlMzAyZTMwMmYzMTM2MmQzMTM2MjAz ZDNlMjAzNDM4MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggr BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIuqMA0GCSqGSIb3DQEBCwUAA4IBAQA+ 5e8TdFEc7jn/wplsCnD2REM8AI2LnsT0D0lUZCrNgPjb13+wYivN8fEbjB+zt3L4 WkSgIYO12TvW2RRnkGecpPkWDyilpDxCqxHGNTTdpGq2UmrzuaLiTfeL+MEzPtrQ K8o0/OUz/zeX5uGjzwlAfjkGqzzr/nD7Mc4jH+pBRoCaC1sat7MFrwaAORbuChpq Z8ee+dhtSIuV7QFqCE1OSfg8brXO87hEIwGM6Az/gPQtL5kw2spfPcDYPecyFQl0 vcXS1I9wacN26tQABqpFI/yKTwj0F7M2ur/w3ld8h500Ey7kd7zZRDwxE+VweJTf oFs1av3LSQPXwAkz83CZ -----END CERTIFICATE-----Generated at Tue Jun 2 21:24:59 2026 by rpki-client