$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/QzJMPKa_UR9p8iXarj2Kjw14lYM.roa File: QzJMPKa_UR9p8iXarj2Kjw14lYM.roa (raw, json) Hash identifier: Ejh8zms5wpasOwH1ISI9WMHFunG6pEslLTTvHhjIQVE= Subject key identifier: 43:32:4C:3C:A6:BF:51:1F:69:F2:25:DA:AE:3D:8A:8F:0D:78:95:83 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 38 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/QzJMPKa_UR9p8iXarj2Kjw14lYM.roa Signing time: Thu 17 Apr 2025 11:34:33 +0000 ROA not before: Thu 17 Apr 2025 11:34:33 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.112.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 16:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:34:33 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=43324C3CA6BF511F69F225DAAE3D8A8F0D789583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:53:0d:e3:98:36:7e:d6:07:14:62:d2:0d: c1:46:aa:21:dc:89:03:35:05:7f:13:61:d9:20:75: 39:d9:30:17:ec:40:df:b7:2a:43:7e:84:8e:8b:54: 60:1a:39:22:e2:41:f3:46:64:d9:8f:78:db:4f:f5: a3:9a:09:2c:2b:4d:ce:18:23:5a:a4:d6:4b:39:3d: 72:e0:25:2d:aa:d8:65:13:d9:df:7e:59:0e:8c:70: 20:66:c1:04:3b:02:c5:83:af:78:6b:b1:89:a8:7f: b4:2d:ae:b4:f8:4c:fc:e2:bf:3c:5c:5b:99:78:99: 9a:cb:9e:76:d8:ca:34:25:0e:a1:10:8b:e0:48:0f: 63:13:a3:4f:47:39:d3:1c:70:c1:a3:d2:0b:3b:08: cd:08:ae:f5:57:53:8d:b4:79:e5:f8:0a:f8:b4:a7: 32:74:52:11:0a:e5:c5:da:0f:83:09:5e:56:95:d2: 4e:0e:d6:d2:cc:22:b1:f5:77:b3:02:02:29:11:5b: 58:ea:56:39:11:f8:64:20:06:50:40:47:a7:cc:75: 30:fd:15:be:ba:dc:7f:4b:08:bd:89:94:3b:fb:55: 4d:24:97:b0:c4:9e:21:a0:04:18:7a:8a:1a:ea:46: 78:ef:9a:2a:30:2a:2a:96:4f:3b:0a:0e:19:23:cf: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:4C:3C:A6:BF:51:1F:69:F2:25:DA:AE:3D:8A:8F:0D:78:95:83 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/QzJMPKa_UR9p8iXarj2Kjw14lYM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.112.172.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:ea:ff:ec:ce:e2:d7:23:99:3b:2f:e1:7a:b7:68:b2:fe:f9: 6b:9b:4b:bc:46:a5:e0:fe:e3:8f:88:42:2a:2f:6c:83:ea:7c: 5c:e0:29:71:1b:24:ff:51:66:ea:de:2c:c0:af:84:4f:33:76: 16:b2:01:c0:10:01:4f:cb:8b:1b:f0:22:f1:9f:84:9c:67:0e: 4d:da:d1:6d:ad:1c:27:f8:c2:ff:8a:5d:95:c0:db:b9:2d:ed: 4e:d5:f2:65:64:85:00:ca:25:cb:55:13:27:99:c4:37:5c:2c: 25:fd:6a:4c:1d:2a:aa:cf:df:5e:62:dd:fa:61:46:7d:2b:66: ae:49:80:2d:ba:2d:4c:94:2a:a5:e5:f4:fd:24:8f:52:df:11: 03:c0:98:0b:c3:e5:69:57:68:0c:87:b9:7e:22:62:0f:ef:35: 42:15:08:58:db:0f:93:10:5a:38:37:7e:7e:1c:2c:2a:e7:44: f1:27:18:4c:67:97:cc:c4:87:f2:e0:77:7e:19:6a:bc:21:2e: 73:98:01:c5:8d:ef:1e:a3:eb:71:4c:97:2b:14:b7:24:54:4d: cc:55:90:5e:06:1d:69:b0:3e:b2:44:a0:37:f6:c9:f0:7d:19: ae:25:b6:c8:a3:c6:b4:3e:10:f5:b1:7f:7f:ad:8c:d5:22:fa: 78:b4:1d:07 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzQzM1oXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNDMzMjRDM0NBNkJGNTEx RjY5RjIyNURBQUUzRDhBOEYwRDc4OTU4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKa8Uw3jmDZ+1gcUYtINwUaqIdyJAzUFfxNh2SB1OdkwF+xA37cq Q36EjotUYBo5IuJB80Zk2Y9420/1o5oJLCtNzhgjWqTWSzk9cuAlLarYZRPZ335Z DoxwIGbBBDsCxYOveGuxiah/tC2utPhM/OK/PFxbmXiZmsuedtjKNCUOoRCL4EgP YxOjT0c50xxwwaPSCzsIzQiu9VdTjbR55fgK+LSnMnRSEQrlxdoPgwleVpXSTg7W 0swisfV3swICKRFbWOpWORH4ZCAGUEBHp8x1MP0Vvrrcf0sIvYmUO/tVTSSXsMSe IaAEGHqKGupGeO+aKjAqKpZPOwoOGSPPTG0CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRDMkw8pr9RH2nyJdquPYqPDXiVgzAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9RekpNUEthX1VSOXA4 aVhhcmoyS2p3MTRsWU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3CsMA0GCSqGSIb3DQEBCwUAA4IBAQBe6v/szuLXI5k7L+F6t2iy/vlrm0u8 RqXg/uOPiEIqL2yD6nxc4ClxGyT/UWbq3izAr4RPM3YWsgHAEAFPy4sb8CLxn4Sc Zw5N2tFtrRwn+ML/il2VwNu5Le1O1fJlZIUAyiXLVRMnmcQ3XCwl/WpMHSqqz99e Yt36YUZ9K2auSYAtui1MlCql5fT9JI9S3xEDwJgLw+VpV2gMh7l+ImIP7zVCFQhY 2w+TEFo4N35+HCwq50TxJxhMZ5fMxIfy4Hd+GWq8IS5zmAHFje8eo+txTJcrFLck VE3MVZBeBh1psD6yRKA39snwfRmuJbbIo8a0PhD1sX9/rYzVIvp4tB0H -----END CERTIFICATE-----Generated at Fri May 16 15:20:38 2025 by rpki-client