$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/xKb4GOTWZlcQfVhpy5F08sPz1lY.roa File: xKb4GOTWZlcQfVhpy5F08sPz1lY.roa (raw, json) Hash identifier: 5ftvvZWcbyxGC0a3UsUY30pdA2bZL7Jxc/xloszRW+Y= Subject key identifier: C4:A6:F8:18:E4:D6:66:57:10:7D:58:69:CB:91:74:F2:C3:F3:D6:56 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 1F Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/xKb4GOTWZlcQfVhpy5F08sPz1lY.roa Signing time: Thu 17 Apr 2025 11:31:18 +0000 ROA not before: Thu 17 Apr 2025 11:31:18 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.132.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:31:18 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=C4A6F818E4D66657107D5869CB9174F2C3F3D656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:86:7c:bb:2f:f9:3e:28:10:d7:a4:97:2e: 8d:da:be:fd:de:b8:40:b7:95:ed:6d:95:7a:db:5d: 99:ac:70:83:09:c3:33:a4:e3:01:f2:13:b9:7c:a7: ab:e5:fa:bc:e3:d6:98:91:61:8e:83:5f:8e:ef:a9: 2c:c7:cd:64:c8:37:ee:d6:31:e7:67:a0:33:6e:06: 6d:58:ba:9f:7d:26:11:56:8d:e5:b3:82:0a:47:b0: 4f:2c:96:82:3f:93:42:66:91:0d:c2:0c:64:4b:40: ef:5f:0e:d7:36:05:b5:3c:be:7e:87:d3:e2:a7:12: bb:2c:9f:05:09:94:ef:46:27:84:4a:af:40:bb:fc: 2d:83:cc:66:e9:49:43:d7:2d:14:9e:14:d5:a4:42: bd:38:ab:58:71:a1:8f:2a:61:c3:ea:88:49:14:9b: d8:82:14:2f:92:c1:2a:5b:f3:d3:d4:37:2c:79:0d: f7:53:fd:a2:69:7a:94:10:c8:36:04:5c:2b:cc:be: 51:f1:9b:00:90:7a:a2:cf:c8:6c:b1:97:01:88:72: ee:01:83:00:5f:15:a6:be:e2:cc:d7:9a:a5:7c:b3: 85:47:41:67:f6:d0:07:12:fa:4e:ff:b3:be:69:eb: cc:5d:0f:77:cb:57:64:8a:f2:8a:06:74:ff:c5:4e: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A6:F8:18:E4:D6:66:57:10:7D:58:69:CB:91:74:F2:C3:F3:D6:56 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/xKb4GOTWZlcQfVhpy5F08sPz1lY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.132.164.0/22 Signature Algorithm: sha256WithRSAEncryption 02:5e:36:d7:08:c1:7d:c2:3d:bf:22:fb:0a:43:a9:b6:fb:0f: 8d:bd:8d:b2:02:61:aa:94:3a:ab:b6:54:45:49:85:4e:e7:a0: ab:f5:74:c4:1d:b0:cb:85:85:fd:85:e3:3e:7d:69:50:2d:01: 47:a1:4d:db:7a:ba:23:0f:5b:95:09:a4:30:6a:19:aa:8b:3b: d4:0c:82:06:fc:03:38:ae:da:89:dc:8e:a9:77:50:19:ad:68: 04:4d:c7:3d:5f:81:c8:6c:52:c6:52:db:1a:30:ce:c9:b6:04: 0a:72:b6:75:cc:2b:a3:70:1d:1e:56:67:d9:24:38:5a:15:ba: c3:b3:67:4c:86:11:e5:71:93:98:bb:9a:de:a3:6b:d5:9c:4c: b2:84:58:73:d2:5f:db:35:c7:78:93:9f:bd:ba:8d:4e:d4:4d: a1:02:1d:2e:3f:d3:e3:7f:f8:76:c7:4d:b4:1b:ad:26:cb:8b: b8:da:a0:69:bd:f1:16:37:ac:14:cf:5d:11:78:72:58:06:e3: 78:24:57:cf:74:1a:37:ba:42:b1:8a:0e:e5:b3:65:07:a6:c6: 11:6d:3d:30:ce:56:2c:a5:b3:35:dd:63:62:01:21:ab:54:18: bf:bf:ae:83:e1:98:d9:66:94:89:d8:a6:f1:e0:67:28:08:e2: 8d:fb:70:44 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzExOFoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoQzRBNkY4MThFNEQ2NjY1 NzEwN0Q1ODY5Q0I5MTc0RjJDM0YzRDY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOhChny7L/k+KBDXpJcujdq+/d64QLeV7W2VettdmaxwgwnDM6Tj AfITuXynq+X6vOPWmJFhjoNfju+pLMfNZMg37tYx52egM24GbVi6n30mEVaN5bOC CkewTyyWgj+TQmaRDcIMZEtA718O1zYFtTy+fofT4qcSuyyfBQmU70YnhEqvQLv8 LYPMZulJQ9ctFJ4U1aRCvTirWHGhjyphw+qISRSb2IIUL5LBKlvz09Q3LHkN91P9 oml6lBDINgRcK8y+UfGbAJB6os/IbLGXAYhy7gGDAF8Vpr7izNeapXyzhUdBZ/bQ BxL6Tv+zvmnrzF0Pd8tXZIryigZ0/8VO4RECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBTEpvgY5NZmVxB9WGnLkXTyw/PWVjAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi94S2I0R09UV1psY1Fm VmhweTVGMDhzUHoxbFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4SkMA0GCSqGSIb3DQEBCwUAA4IBAQACXjbXCMF9wj2/IvsKQ6m2+w+NvY2y AmGqlDqrtlRFSYVO56Cr9XTEHbDLhYX9heM+fWlQLQFHoU3berojD1uVCaQwahmq izvUDIIG/AM4rtqJ3I6pd1AZrWgETcc9X4HIbFLGUtsaMM7JtgQKcrZ1zCujcB0e VmfZJDhaFbrDs2dMhhHlcZOYu5reo2vVnEyyhFhz0l/bNcd4k5+9uo1O1E2hAh0u P9Pjf/h2x020G60my4u42qBpvfEWN6wUz10ReHJYBuN4JFfPdBo3ukKxig7ls2UH psYRbT0wzlYspbM13WNiASGrVBi/v66D4ZjZZpSJ2Kbx4GcoCOKN+3BE -----END CERTIFICATE-----Generated at Sat May 17 23:13:03 2025 by rpki-client