$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/aw-8flrpw8eQl3acptE35avu9IU.roa File: aw-8flrpw8eQl3acptE35avu9IU.roa (raw, json) Hash identifier: Y5hRmzhUkoLbrBdkga5gBDoOwnvA8OY5eMT/qb958Dk= Subject key identifier: 6B:0F:BC:7E:5A:E9:C3:C7:90:97:76:9C:A6:D1:37:E5:AB:EE:F4:85 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 4F Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/aw-8flrpw8eQl3acptE35avu9IU.roa Signing time: Thu 17 Apr 2025 11:45:26 +0000 ROA not before: Thu 17 Apr 2025 11:45:26 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 55933 IP address blocks: 103.114.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:45:26 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=6B0FBC7E5AE9C3C79097769CA6D137E5ABEEF485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:39:0e:56:bf:e6:cd:15:ab:76:90:20:e6: 4c:36:d3:01:72:27:a6:a7:86:06:af:8d:40:d1:b1: 4a:93:de:6e:fe:f7:2a:52:fb:11:59:fa:08:3b:19: 51:0d:d1:52:8d:9c:66:3e:9e:ab:80:86:f5:10:80: 2f:0b:dd:d5:e9:df:5b:88:a9:e6:b6:68:41:37:56: 10:78:49:92:86:f5:4e:25:b5:7f:4c:51:7c:30:c9: 2e:cf:40:f9:6b:f3:a0:38:02:e9:cf:19:0f:54:18: 4a:de:01:f3:08:ec:52:68:30:6d:fd:3e:f1:e6:aa: 81:38:18:85:b8:57:c5:c2:c2:13:89:98:f2:2f:1f: ce:6e:5a:ea:82:80:f6:20:0a:d9:e0:8b:97:8f:a1: 92:5b:a9:21:4c:e2:de:35:1e:21:34:f6:e3:b2:d8: 42:ef:b0:a9:dd:de:37:ad:ce:6d:20:1b:3a:d3:15: ac:dc:5a:8e:fe:c7:d1:91:9c:32:e6:90:e5:ac:77: b2:87:c3:dc:83:64:99:41:34:29:6a:fe:a5:34:a0: 11:94:d6:2c:70:59:69:2f:1a:76:eb:0d:c5:8d:9d: 84:8c:ab:bd:1c:ab:a8:dd:91:0f:7b:e6:02:11:51: f4:cd:e8:d1:de:d7:5e:03:13:31:e5:57:94:b6:ea: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0F:BC:7E:5A:E9:C3:C7:90:97:76:9C:A6:D1:37:E5:AB:EE:F4:85 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/aw-8flrpw8eQl3acptE35avu9IU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.114.72.0/22 Signature Algorithm: sha256WithRSAEncryption 35:ed:f8:4a:d1:7d:27:1e:0c:fa:a2:61:7b:0d:29:a7:b8:b6: 0a:37:3b:48:69:41:4b:71:bb:0f:19:bd:d6:57:36:27:de:67: af:cb:0e:e5:c2:b9:95:1d:af:01:dd:7c:f8:80:8c:2c:71:3d: 4f:e0:9e:5a:78:4b:80:53:6f:56:80:12:1a:a6:0a:16:30:9a: 61:3b:bf:ea:15:a9:6d:bc:dd:e5:41:69:b0:ad:99:9c:7b:b8: 7f:9c:e6:77:bd:61:01:50:39:4e:80:17:4d:0e:75:34:bc:0a: c4:5e:26:23:cc:ed:d4:f1:2e:97:fd:87:fe:e3:38:27:77:78: 67:db:6b:71:fa:b7:fa:7a:2a:b6:84:7e:7f:88:d6:13:d9:bd: ed:99:5d:6c:70:cb:69:86:2e:e7:86:9e:88:33:35:8d:d2:e0: be:5d:3a:b1:7d:ed:07:64:b0:93:50:cc:a9:08:b4:d0:2a:dc: 84:58:88:4a:6d:a9:f8:05:2b:6a:74:83:52:fe:ba:2a:7f:08: f7:e0:31:6d:55:ff:75:5c:93:94:0c:81:79:c5:a5:fb:e3:c1: b9:6b:45:28:63:ce:f7:65:f5:be:d8:99:97:54:f3:a8:69:d1: f8:9b:37:d0:9c:ba:9e:9c:0f:d8:ec:31:cb:50:68:76:a8:38: 39:af:d9:17 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx NDUyNloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNkIwRkJDN0U1QUU5QzND NzkwOTc3NjlDQTZEMTM3RTVBQkVFRjQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMxpOQ5Wv+bNFat2kCDmTDbTAXInpqeGBq+NQNGxSpPebv73KlL7 EVn6CDsZUQ3RUo2cZj6eq4CG9RCALwvd1enfW4ip5rZoQTdWEHhJkob1TiW1f0xR fDDJLs9A+WvzoDgC6c8ZD1QYSt4B8wjsUmgwbf0+8eaqgTgYhbhXxcLCE4mY8i8f zm5a6oKA9iAK2eCLl4+hklupIUzi3jUeITT247LYQu+wqd3eN63ObSAbOtMVrNxa jv7H0ZGcMuaQ5ax3sofD3INkmUE0KWr+pTSgEZTWLHBZaS8adusNxY2dhIyrvRyr qN2RD3vmAhFR9M3o0d7XXgMTMeVXlLbqIIcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRrD7x+WunDx5CXdpym0Tflq+70hTAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9hdy04ZmxycHc4ZVFs M2FjcHRFMzVhdnU5SVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3JIMA0GCSqGSIb3DQEBCwUAA4IBAQA17fhK0X0nHgz6omF7DSmnuLYKNztI aUFLcbsPGb3WVzYn3mevyw7lwrmVHa8B3Xz4gIwscT1P4J5aeEuAU29WgBIapgoW MJphO7/qFaltvN3lQWmwrZmce7h/nOZ3vWEBUDlOgBdNDnU0vArEXiYjzO3U8S6X /Yf+4zgnd3hn22tx+rf6eiq2hH5/iNYT2b3tmV1scMtphi7nhp6IMzWN0uC+XTqx fe0HZLCTUMypCLTQKtyEWIhKban4BStqdINS/roqfwj34DFtVf91XJOUDIF5xaX7 48G5a0UoY873ZfW+2JmXVPOoadH4mzfQnLqenA/Y7DHLUGh2qDg5r9kX -----END CERTIFICATE-----Generated at Sat Apr 26 15:28:09 2025 by rpki-client