$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/20zgo75bwLzx-UlZRoka27MhExQ.roa File: 20zgo75bwLzx-UlZRoka27MhExQ.roa (raw, json) Hash identifier: PzaGzu5/2mnWcuJEhHF2vHfL0lwJCXTUz47kicsJQgk= Subject key identifier: DB:4C:E0:A3:BE:5B:C0:BC:F1:F9:49:59:46:89:1A:DB:B3:21:13:14 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 37 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/20zgo75bwLzx-UlZRoka27MhExQ.roa Signing time: Thu 17 Apr 2025 11:34:32 +0000 ROA not before: Thu 17 Apr 2025 11:34:32 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.119.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 14:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:34:32 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=DB4CE0A3BE5BC0BCF1F9495946891ADBB3211314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:b1:61:f2:c4:b1:07:48:56:60:21:2f:f0: 8b:e7:28:0d:98:e8:1e:a2:ab:3f:63:5a:67:7d:a3: 18:9e:b4:c1:81:45:84:a1:4b:3e:98:20:fe:58:21: 91:2a:ec:b6:cf:ff:87:c8:dc:2e:de:8c:2c:6b:b4: e3:01:24:89:9b:1f:bb:97:e0:26:08:96:35:b2:6d: f8:ed:91:27:bb:ab:b9:6f:9b:94:66:06:53:09:7b: e4:0d:fd:f3:b5:2f:fb:ac:f0:6e:73:3b:69:4d:e3: 24:7f:8c:d1:8e:c3:c6:3f:d5:37:8a:56:5b:2a:d4: b2:5f:9a:06:f3:9e:ac:16:42:09:30:d4:a7:56:2c: ff:82:02:19:d9:fb:e8:60:0b:95:ff:96:37:80:c0: 01:45:e8:ba:94:90:af:10:9e:32:fc:b5:fc:aa:0a: 8b:db:e6:d0:f4:eb:27:d4:15:27:08:b8:90:3b:19: 91:00:24:40:47:f9:2a:e2:34:4c:89:9b:1a:d1:26: 9b:ed:5c:17:35:19:44:7c:15:45:b2:f7:08:c7:97: 64:73:c7:d5:c1:7a:10:ae:b6:0a:83:6c:31:50:03: 13:68:c0:ee:55:f7:b9:b0:6d:37:6b:8f:40:a2:4c: 9e:9c:ca:9d:cb:72:dd:b1:05:83:15:4d:ae:5e:ee: aa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4C:E0:A3:BE:5B:C0:BC:F1:F9:49:59:46:89:1A:DB:B3:21:13:14 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/20zgo75bwLzx-UlZRoka27MhExQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.12.0/22 Signature Algorithm: sha256WithRSAEncryption 25:b0:78:ba:49:75:07:a6:f1:75:50:2d:01:93:9d:c9:03:87: 23:dc:3f:47:3d:fc:13:92:b8:ac:7d:06:b4:02:2e:da:29:98: 50:87:ba:ba:91:1e:09:0c:3a:a9:66:dd:02:ca:d6:92:f3:54: 5c:fd:94:dd:23:71:18:ea:bd:6d:63:c4:c2:0b:89:93:39:5d: d3:ac:2b:53:56:ca:5e:fe:a9:b7:b2:11:de:7d:b1:1a:66:50: 3c:d6:6c:fd:aa:e0:24:d2:d6:d8:44:73:0d:6a:c9:af:65:84: a6:06:6c:c3:04:85:d8:75:ad:78:8e:83:e3:90:da:81:61:9f: 0b:13:44:00:f6:37:98:82:0d:0d:df:89:93:f1:49:79:f5:ff: 48:51:dd:07:76:6e:a7:14:f3:b6:36:ec:65:8f:64:70:2e:7e: 65:75:20:1e:b9:a6:93:07:ab:c7:21:ad:08:1d:b2:14:4a:f1: 1c:30:a7:8e:23:45:41:ad:2e:f9:73:e1:88:55:a3:91:12:51: f6:0f:79:56:4a:8f:4b:1d:0d:24:63:b1:28:ab:18:88:98:c6: 26:bf:48:14:65:a0:78:b3:28:6b:06:19:4b:08:ce:bf:5e:9d: 2e:80:cf:de:8b:82:cb:c9:3b:c4:2e:76:c0:d4:c6:b9:9a:a8: 10:f7:35:d6 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzQzMloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoREI0Q0UwQTNCRTVCQzBC Q0YxRjk0OTU5NDY4OTFBREJCMzIxMTMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANkcsWHyxLEHSFZgIS/wi+coDZjoHqKrP2NaZ32jGJ60wYFFhKFL Ppgg/lghkSrsts//h8jcLt6MLGu04wEkiZsfu5fgJgiWNbJt+O2RJ7uruW+blGYG Uwl75A3987Uv+6zwbnM7aU3jJH+M0Y7Dxj/VN4pWWyrUsl+aBvOerBZCCTDUp1Ys /4ICGdn76GALlf+WN4DAAUXoupSQrxCeMvy1/KoKi9vm0PTrJ9QVJwi4kDsZkQAk QEf5KuI0TImbGtEmm+1cFzUZRHwVRbL3CMeXZHPH1cF6EK62CoNsMVADE2jA7lX3 ubBtN2uPQKJMnpzKncty3bEFgxVNrl7uqsUCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTbTOCjvlvAvPH5SVlGiRrbsyETFDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi8yMHpnbzc1YndMengt VWxaUm9rYTI3TWhFeFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3cMMA0GCSqGSIb3DQEBCwUAA4IBAQAlsHi6SXUHpvF1UC0Bk53JA4cj3D9H PfwTkrisfQa0Ai7aKZhQh7q6kR4JDDqpZt0CytaS81Rc/ZTdI3EY6r1tY8TCC4mT OV3TrCtTVspe/qm3shHefbEaZlA81mz9quAk0tbYRHMNasmvZYSmBmzDBIXYda14 joPjkNqBYZ8LE0QA9jeYgg0N34mT8Ul59f9IUd0Hdm6nFPO2Nuxlj2RwLn5ldSAe uaaTB6vHIa0IHbIUSvEcMKeOI0VBrS75c+GIVaORElH2D3lWSo9LHQ0kY7EoqxiI mMYmv0gUZaB4syhrBhlLCM6/Xp0ugM/ei4LLyTvELnbA1Ma5mqgQ9zXW -----END CERTIFICATE-----Generated at Sun May 18 13:17:01 2025 by rpki-client