$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/tYzefTVPxgpygIMPRD26zTcUgtU.roa File: tYzefTVPxgpygIMPRD26zTcUgtU.roa (raw, json) Hash identifier: yyfidgyIO0pdltmu6lmorIrzApRemp1bv9z3rJSdDuk= Subject key identifier: B5:8C:DE:7D:35:4F:C6:0A:72:80:83:0F:44:3D:BA:CD:37:14:82:D5 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 49 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tYzefTVPxgpygIMPRD26zTcUgtU.roa Signing time: Thu 17 Apr 2025 11:45:23 +0000 ROA not before: Thu 17 Apr 2025 11:45:23 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.112.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 13:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:45:23 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=B58CDE7D354FC60A7280830F443DBACD371482D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:82:cc:3e:ab:c3:8c:9d:ed:21:9c:e8:dd:d5: 05:bc:ab:6c:f5:1e:aa:5e:f6:30:0e:c5:e3:40:9d: ec:83:6c:32:93:36:07:56:62:d5:7d:ec:c1:14:70: 79:08:07:92:91:be:ba:c5:db:7d:83:6f:b0:cd:72: 22:b6:64:8d:04:b4:86:75:52:75:ec:82:bd:1f:03: 99:8b:9a:fb:e5:43:f1:91:68:9a:a2:2b:9b:f4:19: e6:c0:9d:b6:55:ea:be:88:8e:d0:0e:6d:10:af:bf: bb:00:93:53:0c:8b:27:27:dc:2e:59:e1:ba:14:23: 53:6a:6e:9c:fd:13:64:29:75:f6:00:85:2b:07:07: d1:cf:3e:e9:7a:36:36:0f:81:19:3e:00:6a:64:26: 87:1c:b9:89:39:32:ee:10:04:13:84:17:00:3e:22: 81:77:2a:56:b5:7f:aa:b1:e3:9b:88:fe:8f:b1:b9: c7:f3:ff:e3:9e:8f:30:cf:d9:22:1f:b5:e9:4e:1c: 24:5f:e4:24:48:74:ee:85:24:56:28:0f:7f:2d:6b: 99:0c:58:24:4a:76:04:1a:32:fe:36:d7:d3:1f:f5: f1:45:a8:a1:1e:cd:5f:51:e0:e8:c1:c3:ec:70:92: a2:2c:9a:ce:46:91:f7:fb:4f:e6:17:23:78:e7:1c: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8C:DE:7D:35:4F:C6:0A:72:80:83:0F:44:3D:BA:CD:37:14:82:D5 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tYzefTVPxgpygIMPRD26zTcUgtU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.112.68.0/22 Signature Algorithm: sha256WithRSAEncryption 37:38:53:77:85:4c:28:d5:5a:7a:01:9f:67:80:b0:d1:c7:92: ac:af:13:f7:6e:ca:b7:91:3e:09:3c:6a:26:8a:dd:7e:cc:dc: 7c:85:12:f4:ca:1a:0a:23:5f:fd:94:1c:22:1c:4b:5e:fe:ae: 8a:49:b7:b5:bf:85:04:c4:80:32:5d:3d:a7:11:19:e9:99:fe: bc:0d:95:dc:9f:b9:79:70:1f:e4:bd:c8:f6:c6:60:66:10:b8: 30:f8:15:6e:62:e2:cd:1b:83:2f:83:0d:a7:9b:df:34:6a:55: 4c:1b:79:e2:74:8b:70:55:52:69:bf:3a:6e:df:89:84:7f:71: 46:92:15:a6:1f:6f:ca:70:24:b6:d0:f3:e9:a9:a8:18:06:f0: 4a:2b:b7:fc:51:70:4f:bf:c7:85:31:8a:3b:0f:45:8a:3e:2b: 59:18:36:7d:77:e4:bf:16:73:41:ba:0c:d3:6e:50:42:ab:83: ac:05:7f:fc:fa:2f:36:b6:11:f4:b9:7e:97:33:fa:63:3e:78: e1:a6:41:ce:34:b0:4f:69:ca:4d:32:b1:04:7d:ca:69:b7:7b: 0c:80:f8:29:0e:e9:0b:7d:54:ec:1a:75:a4:89:ef:8a:89:85: f1:9c:3d:e4:aa:05:69:59:09:b7:ae:e1:0b:7d:c1:bf:f8:44: 8c:47:4f:6e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx NDUyM1oXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoQjU4Q0RFN0QzNTRGQzYw QTcyODA4MzBGNDQzREJBQ0QzNzE0ODJENTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOeCzD6rw4yd7SGc6N3VBbyrbPUeql72MA7F40Cd7INsMpM2B1Zi 1X3swRRweQgHkpG+usXbfYNvsM1yIrZkjQS0hnVSdeyCvR8DmYua++VD8ZFomqIr m/QZ5sCdtlXqvoiO0A5tEK+/uwCTUwyLJyfcLlnhuhQjU2punP0TZCl19gCFKwcH 0c8+6Xo2Ng+BGT4AamQmhxy5iTky7hAEE4QXAD4igXcqVrV/qrHjm4j+j7G5x/P/ 456PMM/ZIh+16U4cJF/kJEh07oUkVigPfy1rmQxYJEp2BBoy/jbX0x/18UWooR7N X1Hg6MHD7HCSoiyazkaR9/tP5hcjeOccHT0CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBS1jN59NU/GCnKAgw9EPbrNNxSC1TAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi90WXplZlRWUHhncHln SU1QUkQyNnpUY1VndFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3BEMA0GCSqGSIb3DQEBCwUAA4IBAQA3OFN3hUwo1Vp6AZ9ngLDRx5KsrxP3 bsq3kT4JPGomit1+zNx8hRL0yhoKI1/9lBwiHEte/q6KSbe1v4UExIAyXT2nERnp mf68DZXcn7l5cB/kvcj2xmBmELgw+BVuYuLNG4Mvgw2nm980alVMG3nidItwVVJp vzpu34mEf3FGkhWmH2/KcCS20PPpqagYBvBKK7f8UXBPv8eFMYo7D0WKPitZGDZ9 d+S/FnNBugzTblBCq4OsBX/8+i82thH0uX6XM/pjPnjhpkHONLBPacpNMrEEfcpp t3sMgPgpDukLfVTsGnWkie+KiYXxnD3kqgVpWQm3ruELfcG/+ESMR09u -----END CERTIFICATE-----Generated at Fri May 16 12:58:59 2025 by rpki-client