$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/frDZXAujTu7TpdfSnMRCAECQmCI.roa File: frDZXAujTu7TpdfSnMRCAECQmCI.roa (raw, json) Hash identifier: qjjFL33vYhxfQx37KTKN4utVLmJMiGJ7te/z/cs3cU0= Subject key identifier: 7E:B0:D9:5C:0B:A3:4E:EE:D3:A5:D7:D2:9C:C4:42:00:40:90:98:22 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 4C Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/frDZXAujTu7TpdfSnMRCAECQmCI.roa Signing time: Thu 17 Apr 2025 11:45:25 +0000 ROA not before: Thu 17 Apr 2025 11:45:25 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.118.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:45:25 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=7EB0D95C0BA34EEED3A5D7D29CC4420040909822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4b:7f:df:db:b9:b2:37:73:7d:73:c4:5c:7f: 16:37:b1:4a:ad:18:94:76:43:47:06:8d:94:ad:c9: 26:98:a7:03:0d:ef:48:49:43:6b:d6:b3:ae:57:5b: ed:ea:4b:37:80:68:29:90:62:ed:ec:b1:d8:76:76: 11:52:73:38:2e:87:ce:e6:a4:4d:18:5b:d4:fe:29: 8f:26:51:ff:57:f1:a2:91:dd:13:16:f1:bb:9d:48: 51:1d:43:d9:65:6b:cf:14:f5:ff:b6:59:ba:26:9c: f3:42:e2:cc:ef:f5:c8:15:5e:c1:37:d4:f0:04:0e: 15:07:41:6c:96:c2:55:4b:52:e9:e5:4c:35:85:70: 3c:b1:56:e5:a7:69:74:c2:a4:65:c8:b3:a5:a1:e2: f6:c9:0a:e2:86:4a:f1:28:08:73:62:9f:cf:88:17: 5b:45:3e:23:e5:8b:bb:7b:2f:0e:95:eb:6f:c8:85: fb:0c:8e:ed:ab:0d:c3:2e:58:fc:72:f9:30:5c:61: e0:81:61:27:43:20:e9:e1:79:34:d8:d5:77:76:3f: 3f:74:5a:e3:20:11:7a:12:23:91:59:ed:bc:eb:f5: 16:54:d3:99:20:91:8e:2c:d5:f7:dc:02:35:25:f2: a1:34:25:42:4d:b8:6a:40:f9:e8:22:90:86:d9:8f: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B0:D9:5C:0B:A3:4E:EE:D3:A5:D7:D2:9C:C4:42:00:40:90:98:22 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/frDZXAujTu7TpdfSnMRCAECQmCI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.248.0/22 Signature Algorithm: sha256WithRSAEncryption d3:9f:d9:f1:51:5c:29:6e:dd:5b:68:09:2d:48:15:18:8b:74: 78:b4:e3:48:f0:23:6b:c6:7b:fb:3c:53:05:be:ed:24:c7:d4: f2:4d:96:62:9f:82:b0:58:dd:26:62:2b:c4:dc:38:3c:fe:60: 51:4d:f0:dc:dd:ad:22:8d:cb:8b:05:25:63:58:e1:bd:30:a7: 10:ca:99:5c:6e:21:8d:78:9f:4b:13:a3:40:ba:a8:98:b4:b7: 1a:e8:ff:60:d5:c6:cb:ef:f8:ac:d0:02:4e:52:27:15:19:cc: 41:f7:ef:ff:dd:a0:37:4a:c8:77:4a:e4:e5:8c:1a:88:2c:fb: 56:4b:63:b1:ea:1a:71:95:09:1e:2d:6b:b9:33:7f:fc:57:d0: a0:16:ff:cd:a9:3b:da:2a:ef:6e:c2:d3:16:e7:4a:33:cd:4c: 7e:3b:35:12:39:18:fa:0b:9a:d0:36:83:82:53:00:77:05:83: 1d:54:a5:2f:57:d4:7c:4e:01:bc:6c:2c:31:6a:72:2c:57:a9: bf:bb:aa:59:76:2a:9d:41:01:7a:be:d4:85:44:c0:62:d7:7e: 7f:7b:1e:4c:e0:51:cc:48:b3:f3:c1:71:32:71:db:9c:5c:10: 36:6e:c1:e8:96:5a:a6:b0:32:16:7c:8a:b9:94:99:d5:a8:27: 07:6a:a0:34 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx NDUyNVoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoN0VCMEQ5NUMwQkEzNEVF RUQzQTVEN0QyOUNDNDQyMDA0MDkwOTgyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOhLf9/bubI3c31zxFx/FjexSq0YlHZDRwaNlK3JJpinAw3vSElD a9azrldb7epLN4BoKZBi7eyx2HZ2EVJzOC6HzuakTRhb1P4pjyZR/1fxopHdExbx u51IUR1D2WVrzxT1/7ZZuiac80LizO/1yBVewTfU8AQOFQdBbJbCVUtS6eVMNYVw PLFW5adpdMKkZcizpaHi9skK4oZK8SgIc2Kfz4gXW0U+I+WLu3svDpXrb8iF+wyO 7asNwy5Y/HL5MFxh4IFhJ0Mg6eF5NNjVd3Y/P3Ra4yARehIjkVntvOv1FlTTmSCR jizV99wCNSXyoTQlQk24akD56CKQhtmPLjsCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBR+sNlcC6NO7tOl19KcxEIAQJCYIjAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9mckRaWEF1alR1N1Rw ZGZTbk1SQ0FFQ1FtQ0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3b4MA0GCSqGSIb3DQEBCwUAA4IBAQDTn9nxUVwpbt1baAktSBUYi3R4tONI 8CNrxnv7PFMFvu0kx9TyTZZin4KwWN0mYivE3Dg8/mBRTfDc3a0ijcuLBSVjWOG9 MKcQyplcbiGNeJ9LE6NAuqiYtLca6P9g1cbL7/is0AJOUicVGcxB9+//3aA3Ssh3 SuTljBqILPtWS2Ox6hpxlQkeLWu5M3/8V9CgFv/NqTvaKu9uwtMW50ozzUx+OzUS ORj6C5rQNoOCUwB3BYMdVKUvV9R8TgG8bCwxanIsV6m/u6pZdiqdQQF6vtSFRMBi 135/ex5M4FHMSLPzwXEycducXBA2bsHollqmsDIWfIq5lJnVqCcHaqA0 -----END CERTIFICATE-----Generated at Thu May 15 18:56:43 2025 by rpki-client