$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/hBq-fol9_NY-s7sN7TyBZkZXr54.roa File: hBq-fol9_NY-s7sN7TyBZkZXr54.roa (raw, json) Hash identifier: IaOPl60vOn3MyF/5paZ2MOI2RT8Yx8ZMVukhHABHYbI= Subject key identifier: 84:1A:BE:7E:89:7D:FC:D6:3E:B3:BB:0D:ED:3C:81:66:46:57:AF:9E Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 28 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/hBq-fol9_NY-s7sN7TyBZkZXr54.roa Signing time: Thu 17 Apr 2025 11:34:27 +0000 ROA not before: Thu 17 Apr 2025 11:34:27 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 55933 IP address blocks: 103.119.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:34:27 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=841ABE7E897DFCD63EB3BB0DED3C81664657AF9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:e7:9a:c3:8a:81:09:19:26:30:2d:ee:d6: e8:cb:fc:96:05:f3:f4:ca:e6:7d:8c:da:85:a6:1b: 1e:1f:ca:63:a6:e8:1b:23:b7:e6:44:cb:ab:2e:62: f4:ba:9f:89:74:ba:5d:62:ea:49:22:e4:66:7c:94: b3:cc:bc:fa:86:0a:a6:a6:5d:62:25:6a:ec:e5:ca: 39:18:86:40:5a:a6:fc:09:dd:c7:52:be:d0:89:78: 20:4b:4c:8b:f1:46:bc:6c:b3:57:64:fb:29:5e:af: ae:69:63:ca:88:fd:e7:53:53:90:32:3f:27:02:c9: 6a:ee:e3:d0:79:88:c7:ff:ee:47:1b:3f:fb:fa:6e: e4:c1:62:41:d1:a0:b8:a4:a8:40:e6:6b:4f:70:de: 9a:8d:07:da:b2:d2:dc:7a:85:7c:86:c8:f1:e4:6b: 7d:35:4f:06:fc:4f:97:36:5f:98:9a:0d:74:28:36: d8:1f:52:43:af:ce:18:f3:75:ac:8a:92:8f:f9:9b: ba:ad:1d:31:ad:68:22:b6:0e:17:34:2d:d8:36:ef: 3e:68:4a:fc:5a:0e:18:08:90:bd:fa:3c:51:ec:03: b4:58:ea:12:86:a0:54:b7:43:53:04:ae:3f:d7:3a: 4d:d3:c7:bd:14:65:08:da:b8:98:d1:47:b1:3d:32: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1A:BE:7E:89:7D:FC:D6:3E:B3:BB:0D:ED:3C:81:66:46:57:AF:9E X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/hBq-fol9_NY-s7sN7TyBZkZXr54.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.0.0/22 Signature Algorithm: sha256WithRSAEncryption 29:de:bc:1a:bf:c5:f8:85:02:ca:ef:29:62:f6:8c:cb:52:32: 59:bd:c5:3d:89:67:e9:3b:3b:77:ce:21:55:41:8b:67:fb:c7: 9a:99:06:32:5d:be:f8:38:c0:8f:4a:35:30:ed:7f:48:96:01: d5:59:d8:de:40:81:80:fb:d3:cc:dd:3f:2a:86:19:55:f4:c0: 9d:b4:ca:c2:b7:83:6a:66:45:92:7c:61:87:b2:5a:c8:e8:1e: ed:dd:50:9d:94:0b:2d:3e:d0:7d:8d:33:18:89:74:37:9d:ba: d7:1d:db:03:db:b4:07:78:83:54:c3:11:a2:c7:39:77:fb:56: c2:8c:11:c4:01:9f:0e:8a:a5:66:b1:96:7b:3d:e9:4a:0d:14: 28:4c:8e:97:d8:5e:e5:f6:21:62:f2:f0:11:42:37:63:13:f1: 42:22:3d:e0:fc:0b:f0:aa:16:d3:4c:e0:25:47:5b:b2:47:a8: e5:5f:3b:18:d3:9f:56:97:e7:05:21:ed:2b:66:ec:c7:3d:55: 30:40:93:55:8d:cb:62:62:0c:1a:41:0e:a4:4c:a8:fb:2b:7e: 9c:a7:e8:de:48:03:c1:64:b9:0c:d9:60:51:59:22:a7:9b:c4: 7c:30:4d:d0:55:ca:65:5b:44:04:c1:10:fd:46:a5:14:42:83: c1:d5:bd:e6 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzQyN1oXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoODQxQUJFN0U4OTdERkNE NjNFQjNCQjBERUQzQzgxNjY0NjU3QUY5RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOO455rDioEJGSYwLe7W6Mv8lgXz9MrmfYzahaYbHh/KY6boGyO3 5kTLqy5i9LqfiXS6XWLqSSLkZnyUs8y8+oYKpqZdYiVq7OXKORiGQFqm/Andx1K+ 0Il4IEtMi/FGvGyzV2T7KV6vrmljyoj951NTkDI/JwLJau7j0HmIx//uRxs/+/pu 5MFiQdGguKSoQOZrT3Demo0H2rLS3HqFfIbI8eRrfTVPBvxPlzZfmJoNdCg22B9S Q6/OGPN1rIqSj/mbuq0dMa1oIrYOFzQt2DbvPmhK/FoOGAiQvfo8UewDtFjqEoag VLdDUwSuP9c6TdPHvRRlCNq4mNFHsT0yDckCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSEGr5+iX381j6zuw3tPIFmRlevnjAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9oQnEtZm9sOV9OWS1z N3NON1R5QlprWlhyNTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3cAMA0GCSqGSIb3DQEBCwUAA4IBAQAp3rwav8X4hQLK7yli9ozLUjJZvcU9 iWfpOzt3ziFVQYtn+8eamQYyXb74OMCPSjUw7X9IlgHVWdjeQIGA+9PM3T8qhhlV 9MCdtMrCt4NqZkWSfGGHslrI6B7t3VCdlAstPtB9jTMYiXQ3nbrXHdsD27QHeINU wxGixzl3+1bCjBHEAZ8OiqVmsZZ7PelKDRQoTI6X2F7l9iFi8vARQjdjE/FCIj3g /AvwqhbTTOAlR1uyR6jlXzsY059Wl+cFIe0rZuzHPVUwQJNVjctiYgwaQQ6kTKj7 K36cp+jeSAPBZLkM2WBRWSKnm8R8ME3QVcplW0QEwRD9RqUUQoPB1b3m -----END CERTIFICATE-----Generated at Sat Apr 26 15:32:50 2025 by rpki-client