$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/GZaoZkXRdW2ISTxjwVsjnI3iLwg.roa File: GZaoZkXRdW2ISTxjwVsjnI3iLwg.roa (raw, json) Hash identifier: Kp+crA8FptyXEmgt9aWQhUDZgCgwycZQN6rcFtRo8sQ= Subject key identifier: 19:96:A8:66:45:D1:75:6D:88:49:3C:63:C1:5B:23:9C:8D:E2:2F:08 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 16 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/GZaoZkXRdW2ISTxjwVsjnI3iLwg.roa Signing time: Thu 17 Apr 2025 11:31:16 +0000 ROA not before: Thu 17 Apr 2025 11:31:16 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 55933 IP address blocks: 103.118.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:31:16 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=1996A86645D1756D88493C63C15B239C8DE22F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:60:74:a4:bf:ba:ed:52:0d:cd:b6:ea:42: 50:1d:e3:34:c4:0b:f1:35:9a:85:3d:b3:4b:14:22: 49:7f:7b:d9:1f:56:bf:64:80:3d:ba:75:fb:23:c4: 03:c3:4f:f2:42:a8:8c:c8:e4:fe:fc:e6:35:08:4d: 5b:dd:2b:d1:77:df:72:62:32:cb:6a:b7:76:6c:24: a6:92:1b:5e:5c:18:56:a9:7e:73:2d:26:a8:08:0f: c8:89:17:2b:72:a4:94:df:d4:cc:83:77:3f:a6:06: fd:48:e6:01:f9:29:07:20:8a:59:61:59:4a:cd:6c: 83:82:ec:b2:32:10:1d:3c:33:5d:ec:f4:c9:77:29: 03:0e:3e:13:aa:ef:62:3c:ee:01:9c:52:9a:8d:ae: 37:33:43:c7:2b:ec:52:58:91:ad:9f:91:1f:5d:40: bd:c1:8f:fe:93:b2:af:db:0e:f3:26:cb:84:8c:ad: 91:b9:98:f3:26:28:e9:4a:e4:c7:b4:ee:5c:54:a5: cc:9b:d0:3d:88:40:50:6e:5b:5c:cc:57:24:dc:f5: dc:77:86:54:c3:80:ec:64:da:db:3d:3d:73:e5:fe: 41:06:56:b2:a0:f0:d7:8a:55:c6:d0:ba:4e:40:ae: ff:a7:ee:b0:ac:ae:ba:bf:c5:4f:ab:d2:fe:96:a8: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:96:A8:66:45:D1:75:6D:88:49:3C:63:C1:5B:23:9C:8D:E2:2F:08 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/GZaoZkXRdW2ISTxjwVsjnI3iLwg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.208.0/22 Signature Algorithm: sha256WithRSAEncryption cc:d4:dc:c2:cb:fc:ed:d3:80:fb:fd:5b:a0:03:bc:0a:45:44: 74:ab:eb:87:27:e3:e5:57:e6:52:89:98:23:f4:19:aa:e3:e7: 22:01:88:d3:2a:0d:ea:a7:82:7c:8d:fd:01:c5:9f:24:40:13: d9:4f:19:c2:ca:94:2f:5f:b3:42:e2:da:84:d6:3f:18:bd:4a: b9:e4:e3:f7:ac:cb:4e:68:34:7d:a1:6f:21:ef:57:aa:6b:80: ab:12:3c:72:95:b0:95:c0:ba:83:ae:51:2b:9d:82:2f:c9:0c: 18:8a:d7:e6:d8:93:30:91:1e:dc:21:d0:45:dd:86:d2:33:ba: ec:7b:f3:50:fd:87:cb:ac:bf:fc:b0:e4:eb:86:d7:b6:c2:90: 9e:ee:d3:81:1a:59:5e:f8:2e:07:41:bc:59:32:a4:d2:48:10: bc:c5:58:d4:04:ab:56:54:e5:7c:75:1b:31:0c:18:32:9a:e3: 31:0e:27:b3:46:67:12:be:d7:5a:88:09:f1:11:90:f5:8f:52: 89:d9:9d:c4:d7:74:df:bf:4d:fe:df:d0:72:b0:f3:33:6a:8c: 2c:8f:86:04:bb:9a:e8:94:88:90:b4:22:b6:6e:16:8c:fb:b2: 03:e9:ad:ae:fc:4c:59:30:fa:38:84:2e:f6:c5:12:56:c2:b1: aa:78:26:83 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzExNloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoMTk5NkE4NjY0NUQxNzU2 RDg4NDkzQzYzQzE1QjIzOUM4REUyMkYwODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALj/YHSkv7rtUg3NtupCUB3jNMQL8TWahT2zSxQiSX972R9Wv2SA Pbp1+yPEA8NP8kKojMjk/vzmNQhNW90r0XffcmIyy2q3dmwkppIbXlwYVql+cy0m qAgPyIkXK3KklN/UzIN3P6YG/UjmAfkpByCKWWFZSs1sg4LssjIQHTwzXez0yXcp Aw4+E6rvYjzuAZxSmo2uNzNDxyvsUliRrZ+RH11AvcGP/pOyr9sO8ybLhIytkbmY 8yYo6Urkx7TuXFSlzJvQPYhAUG5bXMxXJNz13HeGVMOA7GTa2z09c+X+QQZWsqDw 14pVxtC6TkCu/6fusKyuur/FT6vS/paocI8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQZlqhmRdF1bYhJPGPBWyOcjeIvCDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9HWmFvWmtYUmRXMklT VHhqd1Zzam5JM2lMd2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3bQMA0GCSqGSIb3DQEBCwUAA4IBAQDM1NzCy/zt04D7/VugA7wKRUR0q+uH J+PlV+ZSiZgj9Bmq4+ciAYjTKg3qp4J8jf0BxZ8kQBPZTxnCypQvX7NC4tqE1j8Y vUq55OP3rMtOaDR9oW8h71eqa4CrEjxylbCVwLqDrlErnYIvyQwYitfm2JMwkR7c IdBF3YbSM7rse/NQ/YfLrL/8sOTrhte2wpCe7tOBGlle+C4HQbxZMqTSSBC8xVjU BKtWVOV8dRsxDBgymuMxDiezRmcSvtdaiAnxEZD1j1KJ2Z3E13Tfv03+39BysPMz aowsj4YEu5rolIiQtCK2bhaM+7ID6a2u/ExZMPo4hC72xRJWwrGqeCaD -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:09 2025 by rpki-client