$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUE2DJdXmRLSTNXync1F3D0afNM.roa File: mUE2DJdXmRLSTNXync1F3D0afNM.roa (raw, json) Hash identifier: bEUxl4wigpyKcL6lmpdKyd5pxWHIiTnflZl/LuOueR8= Subject key identifier: 99:41:36:0C:97:57:99:12:D2:4C:D5:F2:9D:CD:45:DC:3D:1A:7C:D3 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 1C Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUE2DJdXmRLSTNXync1F3D0afNM.roa Signing time: Thu 17 Apr 2025 11:31:17 +0000 ROA not before: Thu 17 Apr 2025 11:31:17 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.115.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:31:17 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=9941360C97579912D24CD5F29DCD45DC3D1A7CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:ba:b2:66:b6:f5:19:dc:16:43:46:b1:c2: 36:9f:42:64:f0:20:89:79:a5:37:5b:2e:33:0a:df: e1:c7:a8:43:b8:e0:d3:da:85:ce:ca:5f:25:d8:c8: 27:10:db:ca:fc:56:1c:e3:7e:a0:90:94:07:0a:17: 44:fc:ed:cb:80:04:c2:79:18:1c:0a:91:54:9e:0c: 6b:86:94:56:17:f7:58:82:3d:67:b9:55:0a:80:23: 75:18:d3:22:05:89:5d:a1:7e:e9:d2:bb:05:46:e3: e1:b2:a8:a6:2b:55:86:fd:0f:59:ca:c4:03:4e:b4: f1:a8:ee:a9:d4:f3:9c:d6:26:c2:de:76:a2:de:51: 99:7c:64:a2:b7:fc:88:d3:81:ee:a5:a1:7c:b1:63: 05:a1:e3:cd:4f:f8:a4:17:ae:9e:91:8e:95:d9:56: 34:46:ad:2f:12:b2:58:84:a6:93:c4:38:ea:a5:cc: 6e:ab:65:7d:2a:d3:de:12:8a:7a:79:65:77:5c:fe: 86:18:d7:31:1b:24:b1:1e:b4:4e:c4:64:bc:b7:dc: 20:fc:9e:fa:bb:ca:d2:eb:db:b7:b0:26:ba:09:cc: 60:19:95:3d:81:60:80:8a:64:e9:c6:09:86:96:2d: ba:99:93:a7:99:73:8a:83:6c:d0:97:c4:a2:0e:a9: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:41:36:0C:97:57:99:12:D2:4C:D5:F2:9D:CD:45:DC:3D:1A:7C:D3 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUE2DJdXmRLSTNXync1F3D0afNM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.115.60.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:59:62:65:e4:3c:13:61:84:8f:d6:ea:51:01:c6:e6:c6:4c: d2:0c:b5:13:e0:e0:59:64:24:d9:20:56:e4:2c:24:b0:cd:93: d0:06:fe:0b:16:13:fa:6e:2a:1b:30:37:23:63:45:6c:65:55: ed:99:70:43:28:1c:12:3a:66:ce:34:f8:fb:ad:56:18:d0:a3: ee:0b:9e:24:16:02:66:5b:b6:6a:7b:b8:b7:1b:de:11:e1:17: 26:9d:31:dd:93:29:51:63:5a:e0:f7:85:2b:09:11:fa:02:0f: 38:82:fb:f1:f8:14:0b:de:b8:f9:4b:82:6e:a7:8d:95:62:cc: ad:de:d8:53:ce:75:ee:4d:cf:da:28:f4:d3:1d:ac:f3:1d:a8: b0:09:f7:53:01:cc:8e:ab:61:23:f5:af:93:c6:2e:78:3c:1c: 49:48:85:ea:26:94:52:21:9f:23:0a:1a:0b:8b:9b:83:1b:b4: 45:ad:f1:24:be:6e:6b:bd:5c:0d:97:90:9c:ce:54:ce:94:96: f3:5c:12:56:ee:85:b9:ec:ea:c7:78:53:42:29:9e:9d:a6:c3: da:b5:e8:02:5d:90:2c:e9:38:ac:bc:aa:da:cd:23:5b:26:a4: 74:7e:5e:eb:a1:c7:92:cd:1e:f7:4f:6a:21:5b:f9:2d:9f:f8: f9:23:d9:84 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzExN1oXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoOTk0MTM2MEM5NzU3OTkx MkQyNENENUYyOURDRDQ1REMzRDFBN0NEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALBBurJmtvUZ3BZDRrHCNp9CZPAgiXmlN1suMwrf4ceoQ7jg09qF zspfJdjIJxDbyvxWHON+oJCUBwoXRPzty4AEwnkYHAqRVJ4Ma4aUVhf3WII9Z7lV CoAjdRjTIgWJXaF+6dK7BUbj4bKopitVhv0PWcrEA0608ajuqdTznNYmwt52ot5R mXxkorf8iNOB7qWhfLFjBaHjzU/4pBeunpGOldlWNEatLxKyWISmk8Q46qXMbqtl fSrT3hKKenlld1z+hhjXMRsksR60TsRkvLfcIPye+rvK0uvbt7AmugnMYBmVPYFg gIpk6cYJhpYtupmTp5lzioNs0JfEog6pU/UCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSZQTYMl1eZEtJM1fKdzUXcPRp80zAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9tVUUyREpkWG1STFNU Tlh5bmMxRjNEMGFmTk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3M8MA0GCSqGSIb3DQEBCwUAA4IBAQBuWWJl5DwTYYSP1upRAcbmxkzSDLUT 4OBZZCTZIFbkLCSwzZPQBv4LFhP6biobMDcjY0VsZVXtmXBDKBwSOmbONPj7rVYY 0KPuC54kFgJmW7Zqe7i3G94R4RcmnTHdkylRY1rg94UrCRH6Ag84gvvx+BQL3rj5 S4Jup42VYsyt3thTznXuTc/aKPTTHazzHaiwCfdTAcyOq2Ej9a+Txi54PBxJSIXq JpRSIZ8jChoLi5uDG7RFrfEkvm5rvVwNl5CczlTOlJbzXBJW7oW57OrHeFNCKZ6d psPategCXZAs6TisvKrazSNbJqR0fl7roceSzR73T2ohW/ktn/j5I9mE -----END CERTIFICATE-----Generated at Thu Jul 3 00:06:02 2025 by rpki-client