$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa File: 8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa (raw, json) Hash identifier: nSQHVvAXY31V+QibbKWDvwD5qYJRzMZcaFsOlZR5T8g= Subject key identifier: F3:3C:B7:66:7E:1F:8D:60:2C:E4:F7:AE:7B:F0:24:D0:7E:EF:39:B0 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 7B Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa Signing time: Wed 23 Apr 2025 14:50:22 +0000 ROA not before: Wed 23 Apr 2025 14:50:22 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 211392 IP address blocks: 45.248.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 01:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 23 14:50:22 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=F33CB7667E1F8D602CE4F7AE7BF024D07EEF39B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:39:14:38:42:79:fa:3a:70:18:be:bb:78: 51:b7:55:7e:c2:f8:29:e1:7f:68:c4:13:bc:23:ea: 51:a5:32:b5:78:74:f3:af:47:d5:5f:19:a8:93:07: 13:58:9d:78:8c:41:75:99:98:e5:f7:e5:c0:9c:1b: f1:3b:f6:20:b6:73:c4:a4:39:a7:2e:27:b1:21:78: 2f:a2:a5:56:44:c2:b2:f4:5e:25:58:ea:73:80:cd: 38:cf:f2:f9:49:42:18:c7:92:39:ca:d1:a2:4a:03: 9c:ac:22:37:57:41:cc:f7:63:85:7f:77:c5:1b:13: ce:70:b9:45:a8:a0:97:ae:1a:62:61:f4:60:fc:f3: 60:33:36:99:8e:ec:15:b1:47:39:b5:4b:ae:e1:2f: 80:94:b8:54:4d:62:57:df:81:cd:3a:ff:fd:aa:c3: 78:56:5f:88:73:8f:c8:4e:ba:1e:16:4a:c5:73:3e: 09:54:95:ee:30:9c:58:15:a8:b8:40:5a:0f:3d:e2: f8:33:a1:ce:b9:95:92:e0:ea:d1:1b:6a:e9:0a:05: 1c:4d:d4:b5:f1:dc:f3:a5:27:99:d0:12:96:b3:74: 1b:c5:c7:48:17:ee:ba:1f:63:86:f6:a9:76:5b:82: 4d:72:82:a4:e7:de:e8:e5:bd:6e:c7:fb:2f:0c:55: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3C:B7:66:7E:1F:8D:60:2C:E4:F7:AE:7B:F0:24:D0:7E:EF:39:B0 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/8zy3Zn4fjWAs5Peue_Ak0H7vObA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.248.88.0/24 Signature Algorithm: sha256WithRSAEncryption a6:54:6b:8a:65:5a:04:57:be:15:9d:fc:49:7f:b9:18:7f:fa: 34:15:63:63:40:17:2e:03:05:1e:9f:48:70:72:4c:3a:1d:2d: c4:da:96:09:04:80:3b:8e:95:61:cb:20:e7:f0:36:39:ad:a1: b8:b6:49:d5:9e:79:01:57:1e:47:df:fc:81:9f:be:ea:b5:2a: d3:6c:d2:6d:69:a0:1c:69:27:eb:a6:d2:4b:08:c5:10:e8:a5: 31:79:0d:d8:cd:f6:44:27:d2:04:ee:a0:c0:9c:5d:4b:44:88: e8:3b:c4:41:e9:02:4a:20:e9:f9:5a:54:b6:11:56:a8:92:14: 79:52:b7:bc:e8:b2:a4:07:f2:c2:eb:8a:95:91:77:e4:aa:08: 37:17:36:36:d5:19:ca:3c:95:b3:ce:69:86:1d:84:0b:dc:eb: f2:93:0e:16:45:93:68:68:cd:7f:f2:b1:db:52:02:9c:0a:64: d6:04:5d:65:4d:40:2a:1c:f6:6d:fb:a5:17:49:03:e8:1d:37: a5:34:45:f4:c7:15:d6:0a:13:d9:28:50:7e:af:5a:36:9c:95: d8:f3:db:b4:56:ae:58:f0:86:da:06:43:fc:76:3e:d5:74:af: 21:b5:31:f2:96:c5:0d:e2:47:e3:b4:be:1e:37:61:8f:ae:bd: 31:6a:c8:9b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQyMzE0 NTAyMloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoRjMzQ0I3NjY3RTFGOEQ2 MDJDRTRGN0FFN0JGMDI0RDA3RUVGMzlCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK2bORQ4Qnn6OnAYvrt4UbdVfsL4KeF/aMQTvCPqUaUytXh0869H 1V8ZqJMHE1ideIxBdZmY5fflwJwb8Tv2ILZzxKQ5py4nsSF4L6KlVkTCsvReJVjq c4DNOM/y+UlCGMeSOcrRokoDnKwiN1dBzPdjhX93xRsTznC5Raigl64aYmH0YPzz YDM2mY7sFbFHObVLruEvgJS4VE1iV9+BzTr//arDeFZfiHOPyE66HhZKxXM+CVSV 7jCcWBWouEBaDz3i+DOhzrmVkuDq0Rtq6QoFHE3UtfHc86UnmdASlrN0G8XHSBfu uh9jhvapdluCTXKCpOfe6OW9bsf7LwxVoEECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTzPLdmfh+NYCzk96578CTQfu85sDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi84enkzWm40ZmpXQXM1 UGV1ZV9BazBIN3ZPYkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALfhYMA0GCSqGSIb3DQEBCwUAA4IBAQCmVGuKZVoEV74VnfxJf7kYf/o0FWNj QBcuAwUen0hwckw6HS3E2pYJBIA7jpVhyyDn8DY5raG4tknVnnkBVx5H3/yBn77q tSrTbNJtaaAcaSfrptJLCMUQ6KUxeQ3YzfZEJ9IE7qDAnF1LRIjoO8RB6QJKIOn5 WlS2EVaokhR5Ure86LKkB/LC64qVkXfkqgg3FzY21RnKPJWzzmmGHYQL3Ovykw4W RZNoaM1/8rHbUgKcCmTWBF1lTUAqHPZt+6UXSQPoHTelNEX0xxXWChPZKFB+r1o2 nJXY89u0Vq5Y8IbaBkP8dj7VdK8htTHylsUN4kfjtL4eN2GPrr0xasib -----END CERTIFICATE-----Generated at Sat May 17 01:06:17 2025 by rpki-client