$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/Y1pheM6E9awSNrtsTzO20_sXtkQ.roa File: Y1pheM6E9awSNrtsTzO20_sXtkQ.roa (raw, json) Hash identifier: JIwdqGLl+/ExCw4zqu0xp+XsLU0HSrZTOAUdAACRhhw= Subject key identifier: 63:5A:61:78:CE:84:F5:AC:12:36:BB:6C:4F:33:B6:D3:FB:17:B6:44 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 40 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Y1pheM6E9awSNrtsTzO20_sXtkQ.roa Signing time: Thu 17 Apr 2025 11:42:31 +0000 ROA not before: Thu 17 Apr 2025 11:42:31 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 967 IP address blocks: 103.118.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:42:31 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=635A6178CE84F5AC1236BB6C4F33B6D3FB17B644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:7b:32:2a:b1:86:09:89:e3:2e:0e:ce:18: 18:ba:7e:e3:6f:f3:12:81:3b:b4:af:fc:64:45:28: f6:42:69:27:71:63:75:1f:33:a9:0b:27:7d:e5:18: c2:9f:7f:2f:9a:02:27:7a:c2:46:c1:54:f8:22:29: 30:39:7a:11:4f:79:b7:b4:91:34:a4:26:c3:52:6d: 80:4c:d3:70:95:ae:46:0d:b2:3e:84:90:15:1b:7a: 55:6d:84:72:83:ad:7b:ea:c8:9b:37:4d:4d:48:75: c2:96:31:03:e8:a3:9d:94:bb:5e:fe:2a:15:40:14: 1e:54:23:1a:53:83:7f:58:2c:ff:cf:51:d5:de:34: a1:b8:8d:97:1b:7f:db:45:61:28:74:c3:16:b4:7f: 01:cd:79:b9:8c:27:ee:2a:f4:db:0a:64:a6:49:1b: 6b:e1:5b:ad:83:7c:e8:7f:23:fd:19:4c:e5:6e:47: e9:50:cc:56:21:98:a7:90:e6:1f:73:98:60:fb:bb: e1:4a:9c:da:52:42:57:1c:04:dc:65:0f:cd:af:d1: d2:06:cf:c5:53:7f:5c:78:8f:fa:f0:fd:a2:c2:99: 88:4c:7a:3a:91:50:12:5f:5d:f1:86:40:7c:e1:0a: cf:47:53:9e:8d:6e:6f:bd:66:7c:e1:40:25:a9:f4: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5A:61:78:CE:84:F5:AC:12:36:BB:6C:4F:33:B6:D3:FB:17:B6:44 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Y1pheM6E9awSNrtsTzO20_sXtkQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.204.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:90:9b:43:19:4c:18:26:33:2b:7f:d6:21:e3:5d:22:52:1a: 6f:e2:67:96:68:6d:be:91:0f:b1:5e:8e:ca:54:62:7f:a5:69: aa:4c:57:b7:89:24:dd:87:bf:47:52:1a:72:01:05:dd:dc:90: 0e:2d:09:a6:6e:3b:cd:9f:92:87:5e:75:c5:c4:b0:d7:24:52: 2a:e8:71:bc:13:f9:d6:28:79:3e:d3:ee:76:f7:4c:ba:7a:e8: a0:93:5d:33:7b:5a:e2:97:98:2a:43:68:41:e5:de:4a:98:d5: 55:03:4f:c2:c0:45:50:2b:6f:1c:62:8c:cd:40:85:40:00:e9: 30:69:56:6c:35:d5:20:c7:e6:cd:f5:88:30:32:1d:2a:29:30: 2b:90:71:6a:22:97:03:5e:54:87:50:18:0f:8d:40:06:e3:53: 71:e2:c3:1f:8c:95:64:2c:0d:9e:6e:ea:8f:28:3c:45:3d:4f: 3e:a7:27:67:85:3d:89:28:3e:21:83:ef:30:6d:ed:b6:dc:82: c3:bd:73:c7:9d:07:a9:af:10:07:bf:c9:52:57:cf:a6:99:12: 5f:5d:2b:2e:41:48:f7:06:34:ef:f5:1e:70:f1:91:f8:d9:31: b6:68:79:7b:ff:08:78:a0:6c:ce:54:03:e3:0c:9d:ce:6d:9f: e2:74:5d:93 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx NDIzMVoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNjM1QTYxNzhDRTg0RjVB QzEyMzZCQjZDNEYzM0I2RDNGQjE3QjY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMs4ezIqsYYJieMuDs4YGLp+42/zEoE7tK/8ZEUo9kJpJ3FjdR8z qQsnfeUYwp9/L5oCJ3rCRsFU+CIpMDl6EU95t7SRNKQmw1JtgEzTcJWuRg2yPoSQ FRt6VW2EcoOte+rImzdNTUh1wpYxA+ijnZS7Xv4qFUAUHlQjGlODf1gs/89R1d40 obiNlxt/20VhKHTDFrR/Ac15uYwn7ir02wpkpkkba+FbrYN86H8j/RlM5W5H6VDM ViGYp5DmH3OYYPu74Uqc2lJCVxwE3GUPza/R0gbPxVN/XHiP+vD9osKZiEx6OpFQ El9d8YZAfOEKz0dTno1ub71mfOFAJan0xEcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRjWmF4zoT1rBI2u2xPM7bT+xe2RDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9ZMXBoZU02RTlhd1NO cnRzVHpPMjBfc1h0a1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3bMMA0GCSqGSIb3DQEBCwUAA4IBAQAckJtDGUwYJjMrf9Yh410iUhpv4meW aG2+kQ+xXo7KVGJ/pWmqTFe3iSTdh79HUhpyAQXd3JAOLQmmbjvNn5KHXnXFxLDX JFIq6HG8E/nWKHk+0+5290y6euigk10ze1ril5gqQ2hB5d5KmNVVA0/CwEVQK28c YozNQIVAAOkwaVZsNdUgx+bN9YgwMh0qKTArkHFqIpcDXlSHUBgPjUAG41Nx4sMf jJVkLA2ebuqPKDxFPU8+pydnhT2JKD4hg+8wbe223ILDvXPHnQeprxAHv8lSV8+m mRJfXSsuQUj3BjTv9R5w8ZH42TG2aHl7/wh4oGzOVAPjDJ3ObZ/idF2T -----END CERTIFICATE-----Generated at Sat May 17 10:49:37 2025 by rpki-client