$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa File: Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa (raw, json) Hash identifier: iFyCSGfO3II9hoQD7VqZ0JzkPphrDQU9+b3q7pFEyuA= Subject key identifier: 67:A6:78:BE:58:B6:21:41:8F:33:15:EA:F2:ED:1D:EC:2A:6F:11:3A Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 3064 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa Signing time: Sun 30 Mar 2025 19:58:21 +0000 ROA not before: Sun 30 Mar 2025 19:58:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4816 IP address blocks: 103.39.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12388 (0x3064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=67A678BE58B621418F3315EAF2ED1DEC2A6F113A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:e7:9f:ef:1e:6a:60:d6:e6:05:57:61:fc: 56:d3:05:a7:2f:ad:54:5b:98:b9:d4:e1:59:35:03: f5:73:49:d7:39:4e:99:c2:83:28:fe:9b:67:74:de: c4:c7:65:de:9f:f5:94:a0:3f:cf:f3:10:39:4f:c3: 99:cb:cc:64:d7:3b:ae:a5:ed:b2:22:b6:1b:b7:7f: e6:e5:0b:27:ef:70:91:22:df:6c:05:01:5b:ac:b6: 50:0f:f6:9f:c8:3f:6f:a5:ff:6a:2c:b9:09:21:58: a6:23:67:1d:18:b4:f4:fd:07:21:fc:58:97:82:a1: fa:ba:11:e9:53:7a:d2:53:68:d4:72:df:88:fa:cb: 13:ef:dd:28:33:fe:c1:51:23:53:16:0e:92:9b:d0: 51:dc:bd:a9:b5:a8:49:b8:68:5d:e4:a7:42:c9:9c: ae:c7:22:f4:a8:9d:b5:35:3f:a1:c0:5e:df:0c:4e: a9:7a:5e:83:59:db:9d:bc:fe:56:05:a0:35:3f:4f: 62:f6:d0:35:41:70:bb:2e:42:08:4f:1f:ad:18:46: 9e:1a:5e:13:11:e6:00:fa:df:5e:93:83:4c:86:b9: ff:aa:96:ec:b5:e4:b5:1a:2f:bf:6c:5b:8a:ed:09: b4:99:9f:ba:9b:86:09:19:5d:91:d1:23:96:05:93: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A6:78:BE:58:B6:21:41:8F:33:15:EA:F2:ED:1D:EC:2A:6F:11:3A X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.39.232.0/22 Signature Algorithm: sha256WithRSAEncryption 50:63:61:8e:2f:08:e4:53:35:35:92:91:04:b9:84:01:c0:8f: ac:ec:a4:6e:5b:3b:4b:d9:cc:1a:72:b3:f0:d0:62:5a:4e:48: 51:3d:1d:e3:eb:31:ac:a0:af:e8:18:87:00:78:1f:88:00:31: 5e:44:ad:83:21:17:0c:8f:b5:41:95:1c:ab:75:7c:38:55:a0: b1:90:ed:50:cd:68:f1:fb:32:63:72:80:fb:f4:06:d1:57:78: b8:45:dc:bb:9c:bb:9a:13:ff:a0:f8:34:9d:bf:ec:c0:68:0a: b9:13:da:11:7f:b6:92:8f:b7:69:9d:a8:b3:cf:8f:b4:5d:61: 8a:34:dc:c9:a3:a3:6f:e4:2d:a9:e3:7a:66:24:d8:65:25:96: a1:18:2f:e4:e6:bd:88:62:68:18:60:36:db:4c:ee:35:28:27: 19:35:95:95:09:94:dc:ef:5a:05:59:89:e3:ac:73:52:8d:86: 6d:cc:fe:5c:08:e1:0c:e6:aa:12:7e:b4:17:1f:a8:42:a0:b7: 59:1c:a2:25:3e:ad:61:d3:fe:57:85:94:0e:f8:2a:65:43:ef: 78:6d:af:09:7b:8b:c7:cd:c0:a5:c9:10:78:a3:2c:4c:5c:43: 14:b3:ae:b5:d7:6d:c0:7a:77:01:58:7b:c7:5b:df:bf:e1:67: b0:a0:4d:26 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY3QTY3OEJFNThCNjIx NDE4RjMzMTVFQUYyRUQxREVDMkE2RjExM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8vOef7x5qYNbmBVdh/FbTBacvrVRbmLnU4Vk1A/VzSdc5TpnC gyj+m2d03sTHZd6f9ZSgP8/zEDlPw5nLzGTXO66l7bIithu3f+blCyfvcJEi32wF AVustlAP9p/IP2+l/2osuQkhWKYjZx0YtPT9ByH8WJeCofq6EelTetJTaNRy34j6 yxPv3Sgz/sFRI1MWDpKb0FHcvam1qEm4aF3kp0LJnK7HIvSonbU1P6HAXt8MTql6 XoNZ2528/lYFoDU/T2L20DVBcLsuQghPH60YRp4aXhMR5gD6316Tg0yGuf+qluy1 5LUaL79sW4rtCbSZn7qbhgkZXZHRI5YFk05VAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUZ6Z4vli2IUGPMxXq8u0d7CpvETowHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvWjZaNHZsaTJJVUdQ TXhYcTh1MGQ3Q3B2RVRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcn6DANBgkqhkiG9w0BAQsFAAOCAQEAUGNhji8I5FM1NZKRBLmEAcCPrOyk bls7S9nMGnKz8NBiWk5IUT0d4+sxrKCv6BiHAHgfiAAxXkStgyEXDI+1QZUcq3V8 OFWgsZDtUM1o8fsyY3KA+/QG0Vd4uEXcu5y7mhP/oPg0nb/swGgKuRPaEX+2ko+3 aZ2os8+PtF1hijTcyaOjb+QtqeN6ZiTYZSWWoRgv5Oa9iGJoGGA220zuNSgnGTWV lQmU3O9aBVmJ46xzUo2Gbcz+XAjhDOaqEn60Fx+oQqC3WRyiJT6tYdP+V4WUDvgq ZUPveG2vCXuLx83ApckQeKMsTFxDFLOutddtwHp3AVh7x1vfv+FnsKBNJg== -----END CERTIFICATE-----Generated at Sat May 17 20:00:03 2025 by rpki-client