$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxoKZiEviLaax8HJasfqBEcUQuI.roa File: kxoKZiEviLaax8HJasfqBEcUQuI.roa (raw, json) Hash identifier: IlZE6pHtloD1Gt0wM3bSEjKTMhCgSd/aG7S+T3Q3leg= Subject key identifier: 93:1A:0A:66:21:2F:88:B6:9A:C7:C1:C9:6A:C7:EA:04:47:14:42:E2 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 31 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxoKZiEviLaax8HJasfqBEcUQuI.roa Signing time: Thu 17 Apr 2025 11:34:30 +0000 ROA not before: Thu 17 Apr 2025 11:34:30 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.119.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 10:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:34:30 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=931A0A66212F88B69AC7C1C96AC7EA04471442E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:81:38:d5:2e:63:27:d3:f8:7e:6f:f6:96: c8:ff:21:01:eb:12:fb:61:6f:21:60:7d:9f:a4:5c: fa:29:8b:74:91:83:70:48:75:9a:17:04:90:a5:c0: 23:e7:bf:30:53:d4:4d:d5:56:b9:7c:59:93:5a:dd: 08:8b:02:eb:6a:1a:86:75:dc:9d:63:dd:4c:6a:7a: e8:d0:c8:ad:a7:cb:b3:48:8b:71:90:67:47:74:1c: 86:e7:b7:af:54:80:88:85:c0:c9:c9:0d:e0:47:5f: 61:31:f4:23:84:c7:cf:e3:d7:9d:22:2f:8a:1d:24: dd:72:ae:0c:47:40:15:d6:22:d8:b1:9c:21:d1:a3: 16:75:30:23:6a:b4:93:dc:b9:b7:22:fb:20:d6:ee: 7a:bb:18:f4:1d:8d:f1:2a:e8:5f:51:f2:74:b0:03: ad:86:91:eb:8d:a6:08:b6:28:42:b7:1f:a5:49:d5: 5f:0b:f5:3b:ee:99:90:50:c2:22:ea:cb:44:34:cc: 77:ca:83:c2:d4:fe:e6:98:8a:57:f7:48:a4:6f:00: 63:ea:43:dd:7d:36:31:7a:78:e5:f6:df:bc:49:9d: fb:27:6d:6e:3b:55:3f:91:ea:59:68:5b:90:07:bf: dc:c0:73:e7:17:b0:a3:d8:a0:1f:b3:ef:32:e6:8a: b9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1A:0A:66:21:2F:88:B6:9A:C7:C1:C9:6A:C7:EA:04:47:14:42:E2 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxoKZiEviLaax8HJasfqBEcUQuI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.16.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:34:bf:67:82:d2:5b:43:d1:d1:12:7a:ac:16:0c:4c:27:db: 1e:c8:d5:a8:d7:25:5b:e6:4e:7b:30:2f:d1:d1:83:ce:b2:47: d4:87:97:b5:54:76:47:88:ed:d2:11:9a:f9:83:ed:9f:41:eb: c3:40:0d:89:a5:87:85:61:b7:0f:9a:73:d4:00:e7:56:61:27: f7:ff:bf:8b:be:81:ca:33:4e:2c:ff:32:4e:79:16:a3:28:09: 7f:98:d7:ba:f6:44:3d:19:94:49:51:dc:0a:2b:be:63:55:8d: b7:81:f1:53:7e:09:f2:0f:3e:03:4f:8f:0d:89:aa:ce:e7:a7: 36:ce:a9:37:78:54:0f:27:1b:2d:1f:f4:bb:98:d3:dc:1f:f4: 3f:ae:7b:ed:63:9d:89:c3:0e:dd:39:d0:21:55:44:e5:95:bd: 95:f7:5b:3e:11:7a:b0:0d:47:93:50:6b:3a:f0:6a:84:20:71: 96:24:05:fa:7a:91:d6:08:e2:01:62:33:dc:47:55:ab:49:8e: 13:01:77:73:78:16:a0:19:19:5a:4c:be:de:1d:fa:67:ce:3d: b0:98:ca:80:17:77:22:b9:f7:2f:6f:1c:44:ba:6b:10:45:51: 68:98:ce:aa:77:7e:11:62:6f:47:04:0a:b2:aa:fa:21:ba:23: 11:2a:13:c3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzQzMFoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoOTMxQTBBNjYyMTJGODhC NjlBQzdDMUM5NkFDN0VBMDQ0NzE0NDJFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANIPgTjVLmMn0/h+b/aWyP8hAesS+2FvIWB9n6Rc+imLdJGDcEh1 mhcEkKXAI+e/MFPUTdVWuXxZk1rdCIsC62oahnXcnWPdTGp66NDIrafLs0iLcZBn R3Qchue3r1SAiIXAyckN4EdfYTH0I4THz+PXnSIvih0k3XKuDEdAFdYi2LGcIdGj FnUwI2q0k9y5tyL7INbuersY9B2N8SroX1HydLADrYaR642mCLYoQrcfpUnVXwv1 O+6ZkFDCIurLRDTMd8qDwtT+5piKV/dIpG8AY+pD3X02MXp45fbfvEmd+ydtbjtV P5HqWWhbkAe/3MBz5xewo9igH7PvMuaKuXcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSTGgpmIS+ItprHwclqx+oERxRC4jAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9reG9LWmlFdmlMYWF4 OEhKYXNmcUJFY1VRdUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3cQMA0GCSqGSIb3DQEBCwUAA4IBAQBsNL9ngtJbQ9HREnqsFgxMJ9seyNWo 1yVb5k57MC/R0YPOskfUh5e1VHZHiO3SEZr5g+2fQevDQA2JpYeFYbcPmnPUAOdW YSf3/7+LvoHKM04s/zJOeRajKAl/mNe69kQ9GZRJUdwKK75jVY23gfFTfgnyDz4D T48NiarO56c2zqk3eFQPJxstH/S7mNPcH/Q/rnvtY52Jww7dOdAhVUTllb2V91s+ EXqwDUeTUGs68GqEIHGWJAX6epHWCOIBYjPcR1WrSY4TAXdzeBagGRlaTL7eHfpn zj2wmMqAF3ciufcvbxxEumsQRVFomM6qd34RYm9HBAqyqvohuiMRKhPD -----END CERTIFICATE-----Generated at Sun May 18 10:26:41 2025 by rpki-client