$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa File: 36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa (raw, json) Hash identifier: jLLjpf8FDpD9fXimFJJQjA+otZWzs+35zppH7t1VAHQ= Subject key identifier: DF:A1:C7:61:B2:1B:53:BC:E0:91:0D:87:C0:64:82:05:29:73:7E:F2 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 23 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa Signing time: Thu 17 Apr 2025 11:31:19 +0000 ROA not before: Thu 17 Apr 2025 11:31:19 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.118.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 09:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:31:19 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=DFA1C761B21B53BCE0910D87C064820529737EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:43:9f:2a:b5:3d:f9:f1:b7:88:c3:33:6c: 43:4b:24:7c:e2:b9:9f:bc:bc:ba:6c:be:ac:e7:50: a4:8b:d4:cd:f8:57:37:1e:53:82:ff:c1:a6:b1:7e: 6a:5d:8d:e0:55:2a:f7:16:27:ab:10:b9:fd:61:82: 5b:ce:1c:bf:f4:b7:dd:e5:c9:d3:00:28:c8:8e:ef: f6:c4:b8:4e:52:bd:c7:2a:33:28:94:14:61:b3:f0: c4:45:c5:26:ca:47:31:7e:ed:67:fa:df:ec:a1:07: 45:c5:2b:2b:e6:31:02:28:72:e4:d7:0f:63:21:0b: 3a:99:78:a6:fe:c2:df:7e:26:79:6b:9c:c6:3b:8c: 52:2f:cb:bc:27:f6:4b:98:c0:78:0b:3c:13:4e:01: 6b:ac:04:78:80:46:f9:aa:5c:01:05:af:1f:d3:5a: c9:dc:02:f2:be:b4:cf:96:a8:b0:4b:29:54:49:ad: e7:70:a1:df:ed:c1:e6:a3:3b:43:c5:35:78:11:24: 2b:9f:76:12:84:73:b9:7f:a2:7f:30:88:fb:23:63: cf:0f:8c:ed:67:84:6b:64:9f:a6:de:4f:e3:c5:65: f1:09:e4:1f:97:1b:de:ee:60:f3:fc:03:8c:35:9d: a1:bb:b3:45:52:89:6a:75:2e:c1:e5:13:3b:54:1c: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A1:C7:61:B2:1B:53:BC:E0:91:0D:87:C0:64:82:05:29:73:7E:F2 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.216.0/22 Signature Algorithm: sha256WithRSAEncryption 48:83:44:8a:3c:70:2c:ac:14:2e:10:70:70:9b:83:19:d4:75: 04:18:53:7e:55:70:e2:8b:88:76:2e:10:fc:36:c5:00:5c:88: 8b:9f:b5:e4:9e:d4:f4:78:63:48:29:ec:da:c4:7b:e1:21:9c: a8:f0:1a:c1:67:c4:c5:c3:20:44:b6:e2:a5:85:ad:0c:f6:54: b9:3e:3d:c1:54:66:5b:90:91:2d:a4:b5:c5:59:e5:45:17:18: a5:67:0c:ab:90:66:25:0f:4c:4d:c9:8d:eb:f9:6d:1c:3b:6c: 6b:fa:11:3b:b7:17:0c:a2:a7:96:a7:3e:fe:97:0a:70:ed:d8: 73:e2:04:f3:48:58:05:00:8b:b0:ae:3b:e1:3b:01:7b:61:09: 18:ff:f1:91:54:64:e1:ec:90:e1:07:fb:61:80:e8:cd:02:91: 10:93:ec:b4:c5:c3:d3:e6:76:90:f3:d9:c6:cf:ab:6f:e5:3a: 83:0a:bd:d8:59:5a:50:e6:c3:5f:44:54:73:56:a9:46:4a:93: 37:ff:da:87:af:50:17:65:99:89:c6:38:c5:b7:2f:cf:29:9d: f8:7f:4b:d9:ad:82:85:e5:6c:87:7c:48:5c:68:80:07:d1:cc: 69:c7:e0:89:52:58:85:f9:3b:13:78:9c:fa:33:44:98:50:3f: 43:4a:cf:45 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzExOVoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoREZBMUM3NjFCMjFCNTNC Q0UwOTEwRDg3QzA2NDgyMDUyOTczN0VGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMQkQ58qtT358beIwzNsQ0skfOK5n7y8umy+rOdQpIvUzfhXNx5T gv/BprF+al2N4FUq9xYnqxC5/WGCW84cv/S33eXJ0wAoyI7v9sS4TlK9xyozKJQU YbPwxEXFJspHMX7tZ/rf7KEHRcUrK+YxAihy5NcPYyELOpl4pv7C334meWucxjuM Ui/LvCf2S5jAeAs8E04Ba6wEeIBG+apcAQWvH9NaydwC8r60z5aosEspVEmt53Ch 3+3B5qM7Q8U1eBEkK592EoRzuX+ifzCI+yNjzw+M7WeEa2Sfpt5P48Vl8QnkH5cb 3u5g8/wDjDWdobuzRVKJanUuweUTO1QcGPcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTfocdhshtTvOCRDYfAZIIFKXN+8jAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi8zNkhIWWJJYlU3emdr UTJId0dTQ0JTbHpmdkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3bYMA0GCSqGSIb3DQEBCwUAA4IBAQBIg0SKPHAsrBQuEHBwm4MZ1HUEGFN+ VXDii4h2LhD8NsUAXIiLn7XkntT0eGNIKezaxHvhIZyo8BrBZ8TFwyBEtuKlha0M 9lS5Pj3BVGZbkJEtpLXFWeVFFxilZwyrkGYlD0xNyY3r+W0cO2xr+hE7txcMoqeW pz7+lwpw7dhz4gTzSFgFAIuwrjvhOwF7YQkY//GRVGTh7JDhB/thgOjNApEQk+y0 xcPT5naQ89nGz6tv5TqDCr3YWVpQ5sNfRFRzVqlGSpM3/9qHr1AXZZmJxjjFty/P KZ34f0vZrYKF5WyHfEhcaIAH0cxpx+CJUliF+TsTeJz6M0SYUD9DSs9F -----END CERTIFICATE-----Generated at Sat May 17 07:22:24 2025 by rpki-client