$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/Zly-QXDFs91GR4zXFGHuWOeTjUo.roa File: Zly-QXDFs91GR4zXFGHuWOeTjUo.roa (raw, json) Hash identifier: QKSfxMwMhHxIWXkvvTOhEOPIlWRregs7TxDp0oCXGrc= Subject key identifier: 66:5C:BE:41:70:C5:B3:DD:46:47:8C:D7:14:61:EE:58:E7:93:8D:4A Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 32 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Zly-QXDFs91GR4zXFGHuWOeTjUo.roa Signing time: Thu 17 Apr 2025 11:34:31 +0000 ROA not before: Thu 17 Apr 2025 11:34:31 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.115.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:34:31 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=665CBE4170C5B3DD46478CD71461EE58E7938D4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:f4:4c:23:2b:8b:5b:81:f0:a9:8d:9a:b5: 59:3f:b8:9f:df:db:40:0c:08:d6:88:b1:fa:63:8f: bd:1d:a3:a8:5e:c5:2c:6e:e8:9a:9c:95:23:47:11: 93:8b:f5:c2:82:3e:1c:5d:9b:39:f3:06:c7:4d:2c: 4d:64:ba:1a:46:e7:bb:2e:07:75:38:cf:d8:e4:77: 77:a8:37:52:97:dc:c9:c1:80:e5:af:2e:53:9b:90: 98:8c:29:5b:4f:ae:3b:c0:5f:f0:bc:75:1c:41:1f: e5:24:53:94:05:ab:3c:d1:32:85:f8:11:fd:71:68: 2f:2a:80:e4:9c:46:b2:0e:89:fe:81:af:d1:56:e4: 9c:a8:06:fd:28:12:6b:b5:b5:c4:75:3c:11:5e:27: fa:82:b5:50:0c:e7:90:f8:92:9c:e7:0b:7a:71:15: 60:06:e8:69:7f:d7:b3:27:b9:0d:08:5a:00:66:94: 54:f0:eb:09:68:26:54:4b:f2:e1:9e:63:e0:24:a1: 4a:1a:45:77:ad:a1:be:da:46:78:34:a1:1e:5f:4c: b7:b3:e5:42:ec:cf:fc:09:c6:70:ff:05:51:85:ba: 52:c9:4a:8f:42:1f:4e:59:3e:89:18:01:be:9d:0e: 47:62:38:bc:f3:44:2d:9f:3e:a9:5f:d2:ff:da:0d: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:BE:41:70:C5:B3:DD:46:47:8C:D7:14:61:EE:58:E7:93:8D:4A X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Zly-QXDFs91GR4zXFGHuWOeTjUo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.115.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:0e:8b:5a:ad:db:42:d5:02:01:77:23:5f:94:bd:27:64:65: ee:0f:53:94:02:30:2b:cf:2d:fe:f1:62:0e:c0:b0:85:c3:b6: e5:05:2d:f8:32:d5:12:ee:10:af:2b:51:ac:d8:f2:44:f5:3c: 05:f2:54:f7:6b:89:7f:fb:2f:b0:4d:a4:f7:12:86:e1:18:d3: c3:31:bd:d2:34:ab:95:a5:4f:c4:a9:2b:7e:a2:d8:e5:f2:80: 55:19:55:5e:35:2d:f4:fa:17:cb:91:c5:8b:d9:12:15:ad:f8: 20:fe:7f:39:ac:ee:f3:51:99:d4:31:30:1b:78:4d:3b:97:9a: 89:8b:d1:8f:df:a3:66:ea:e8:88:e3:f7:d3:33:b4:a6:e8:9c: b4:44:16:c0:02:5c:9b:42:5b:9c:9b:57:17:e0:d1:6e:e4:28: 4d:5b:b6:61:47:9c:66:ad:ae:d8:3a:6f:43:27:ba:1c:88:8d: ad:08:ae:06:d4:c7:cd:25:32:cf:06:19:e3:47:3d:ed:00:a2: 6d:be:24:89:16:fa:da:94:b4:05:36:16:f0:5d:72:06:8c:25: 34:cc:1d:9c:4a:e7:09:88:02:8a:92:8c:e5:c7:70:8d:30:21: ec:88:f1:93:53:6b:33:b3:19:57:31:71:6e:cc:c8:9b:57:ce: 24:d7:bf:c0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzQzMVoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNjY1Q0JFNDE3MEM1QjNE RDQ2NDc4Q0Q3MTQ2MUVFNThFNzkzOEQ0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ+N9EwjK4tbgfCpjZq1WT+4n9/bQAwI1oix+mOPvR2jqF7FLG7o mpyVI0cRk4v1woI+HF2bOfMGx00sTWS6Gkbnuy4HdTjP2OR3d6g3UpfcycGA5a8u U5uQmIwpW0+uO8Bf8Lx1HEEf5SRTlAWrPNEyhfgR/XFoLyqA5JxGsg6J/oGv0Vbk nKgG/SgSa7W1xHU8EV4n+oK1UAznkPiSnOcLenEVYAboaX/Xsye5DQhaAGaUVPDr CWgmVEvy4Z5j4CShShpFd62hvtpGeDShHl9Mt7PlQuzP/AnGcP8FUYW6UslKj0If Tlk+iRgBvp0OR2I4vPNELZ8+qV/S/9oNF08CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRmXL5BcMWz3UZHjNcUYe5Y55ONSjAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9abHktUVhERnM5MUdS NHpYRkdIdVdPZVRqVW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3M4MA0GCSqGSIb3DQEBCwUAA4IBAQBdDotardtC1QIBdyNflL0nZGXuD1OU AjArzy3+8WIOwLCFw7blBS34MtUS7hCvK1Gs2PJE9TwF8lT3a4l/+y+wTaT3Eobh GNPDMb3SNKuVpU/EqSt+otjl8oBVGVVeNS30+hfLkcWL2RIVrfgg/n85rO7zUZnU MTAbeE07l5qJi9GP36Nm6uiI4/fTM7Sm6Jy0RBbAAlybQlucm1cX4NFu5ChNW7Zh R5xmra7YOm9DJ7ociI2tCK4G1MfNJTLPBhnjRz3tAKJtviSJFvralLQFNhbwXXIG jCU0zB2cSucJiAKKkozlx3CNMCHsiPGTU2szsxlXMXFuzMibV84k17/A -----END CERTIFICATE-----Generated at Mon May 12 22:51:23 2025 by rpki-client