$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/RTeG_cMKUesZNpVhG7UA4krUtXs.roa File: RTeG_cMKUesZNpVhG7UA4krUtXs.roa (raw, json) Hash identifier: xUyzft64Ti8bFTxikcM6qtI4dRlBaGPtLEsmWVMdlCI= Subject key identifier: 45:37:86:FD:C3:0A:51:EB:19:36:95:61:1B:B5:00:E2:4A:D4:B5:7B Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 15 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/RTeG_cMKUesZNpVhG7UA4krUtXs.roa Signing time: Thu 17 Apr 2025 11:31:16 +0000 ROA not before: Thu 17 Apr 2025 11:31:16 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.118.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:31:16 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=453786FDC30A51EB193695611BB500E24AD4B57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:e1:65:a8:e6:84:8f:5d:cc:6e:42:4b:6c: 15:75:10:f8:1b:da:d0:25:be:99:37:4d:55:d6:9f: 74:89:a6:57:e6:24:81:68:60:df:06:0f:1e:32:14: c7:e4:ef:43:9f:16:e8:52:e9:ee:7f:13:b0:c3:75: 8c:2d:23:c4:46:91:00:b9:e0:a6:49:2e:13:2f:b1: 4b:2c:2a:92:fb:f5:68:3f:81:02:cc:4d:04:05:88: 14:87:fa:d7:e0:09:4c:ac:54:bd:4f:97:63:db:ab: ea:2c:1d:64:38:b6:a5:e3:6c:19:61:33:95:f9:2d: 19:4c:73:75:b5:b8:bf:bb:86:7a:81:37:95:ea:51: 3b:9a:2e:3e:d5:10:3a:45:15:9c:60:eb:98:19:ed: c1:8a:d4:7b:5b:8c:c6:73:a0:ce:e9:f4:5c:59:5c: 7c:bc:45:3e:4b:5a:7d:0c:b3:25:b0:19:3f:ed:26: 59:ba:65:1d:ca:73:58:64:e4:6e:11:4f:cc:13:cf: 58:71:a2:8a:aa:83:f9:e5:88:8f:fa:26:19:ce:61: aa:51:e3:f1:65:bf:23:2a:83:fe:ae:f8:24:0a:e8: b2:78:a2:28:3b:10:77:73:0a:24:aa:97:a6:5b:28: 12:1e:3c:61:bf:89:b7:79:77:de:0d:a9:42:66:72: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:86:FD:C3:0A:51:EB:19:36:95:61:1B:B5:00:E2:4A:D4:B5:7B X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/RTeG_cMKUesZNpVhG7UA4krUtXs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.204.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:31:a7:aa:17:58:d6:52:34:be:bf:9a:72:9b:eb:c4:5a:7c: 57:d6:be:a9:34:99:0d:8e:09:a3:a6:76:46:18:f6:5a:9f:43: 5a:02:cb:09:32:cf:cd:4b:b9:bc:6d:6b:bc:c7:b5:66:95:c2: c5:0f:6e:ec:e6:55:24:c1:4b:21:85:ff:6a:e8:b3:4b:84:32: 6d:37:30:da:8f:ec:17:33:53:e2:61:fa:11:25:0d:8b:89:29: 8a:11:e8:83:45:33:e6:ec:26:81:d1:21:d0:80:6d:cd:e4:a8: 6f:27:79:dc:28:9d:db:c7:de:0d:c5:b6:10:ce:58:3b:07:42: 3c:9b:94:12:b2:32:8d:21:7d:11:06:fe:89:78:b2:4e:c9:b8: da:af:a6:2c:d5:d4:a9:c1:14:9a:de:e0:0a:0a:7e:4d:de:ad: 8b:82:a6:b1:2b:8a:10:47:5f:56:89:76:10:0c:98:14:44:0c: fb:11:2c:15:8d:ac:f1:df:81:1e:99:61:bd:07:12:85:f1:61: 29:ab:2b:6a:b4:2a:d3:7d:56:92:4c:6b:ae:35:b0:f7:58:13: 83:f2:45:ed:ab:b7:a5:7f:a2:9c:e1:0c:94:63:25:3f:29:c0: 3e:a1:c2:9d:b4:40:d4:86:fa:f0:e2:6b:10:e4:ac:ea:ba:35: 1c:92:da:73 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzExNloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNDUzNzg2RkRDMzBBNTFF QjE5MzY5NTYxMUJCNTAwRTI0QUQ0QjU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMBz4WWo5oSPXcxuQktsFXUQ+Bva0CW+mTdNVdafdImmV+YkgWhg 3wYPHjIUx+TvQ58W6FLp7n8TsMN1jC0jxEaRALngpkkuEy+xSywqkvv1aD+BAsxN BAWIFIf61+AJTKxUvU+XY9ur6iwdZDi2peNsGWEzlfktGUxzdbW4v7uGeoE3lepR O5ouPtUQOkUVnGDrmBntwYrUe1uMxnOgzun0XFlcfLxFPktafQyzJbAZP+0mWbpl HcpzWGTkbhFPzBPPWHGiiqqD+eWIj/omGc5hqlHj8WW/IyqD/q74JArosniiKDsQ d3MKJKqXplsoEh48Yb+Jt3l33g2pQmZy45ECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRFN4b9wwpR6xk2lWEbtQDiStS1ezAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9SVGVHX2NNS1Vlc1pO cFZoRzdVQTRrclV0WHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3bMMA0GCSqGSIb3DQEBCwUAA4IBAQB8MaeqF1jWUjS+v5pym+vEWnxX1r6p NJkNjgmjpnZGGPZan0NaAssJMs/NS7m8bWu8x7VmlcLFD27s5lUkwUshhf9q6LNL hDJtNzDaj+wXM1PiYfoRJQ2LiSmKEeiDRTPm7CaB0SHQgG3N5KhvJ3ncKJ3bx94N xbYQzlg7B0I8m5QSsjKNIX0RBv6JeLJOybjar6Ys1dSpwRSa3uAKCn5N3q2Lgqax K4oQR19WiXYQDJgURAz7ESwVjazx34EemWG9BxKF8WEpqytqtCrTfVaSTGuuNbD3 WBOD8kXtq7elf6Kc4QyUYyU/KcA+ocKdtEDUhvrw4msQ5KzqujUcktpz -----END CERTIFICATE-----Generated at Thu May 15 13:19:09 2025 by rpki-client