$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxWqc6KKV0USCF-EEDrH_J6Nci4.roa File: kxWqc6KKV0USCF-EEDrH_J6Nci4.roa (raw, json) Hash identifier: RZHQnRlwyH7ECosbA0dTszqzsx5ZZP/YdjvupDcRoV8= Subject key identifier: 93:15:AA:73:A2:8A:57:45:12:08:5F:84:10:3A:C7:FC:9E:8D:72:2E Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 24 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxWqc6KKV0USCF-EEDrH_J6Nci4.roa Signing time: Thu 17 Apr 2025 11:31:20 +0000 ROA not before: Thu 17 Apr 2025 11:31:20 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 55933 IP address blocks: 103.132.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:31:20 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=9315AA73A28A574512085F84103AC7FC9E8D722E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1a:05:c3:85:78:78:41:7c:dc:2e:39:1a:93: 9d:c4:0e:d3:58:36:22:ae:77:3f:73:fb:84:04:36: 12:31:6b:ea:3d:25:1a:6c:a7:d1:fc:90:c8:7d:d0: 4d:38:79:81:51:58:67:b8:65:d4:37:63:d6:f1:62: ee:dd:b4:09:a7:26:52:87:9d:3e:e9:0b:08:51:5a: 03:c0:07:20:c6:4f:6a:16:90:58:d5:93:3c:9d:70: fe:12:d3:8e:a7:c0:a6:d3:f9:67:3d:f6:c0:a8:46: c9:66:0a:55:38:ac:7a:0c:4e:b7:f4:41:8b:a7:f9: db:32:f3:2b:0b:c9:a8:48:1b:ee:a4:a8:a8:f3:1f: ff:85:94:91:58:9d:02:ff:0f:46:de:d0:88:fd:a2: 01:3f:d0:bb:a5:fb:df:d4:58:52:d9:18:9c:28:cf: 31:61:46:19:a2:77:5f:5b:e8:52:43:fd:d7:26:ab: 0c:de:5b:a1:25:8a:a0:b9:5e:80:41:6d:f6:13:63: e0:47:18:24:52:16:73:a3:9c:7c:51:82:82:32:0a: 26:bb:a9:db:e6:6b:52:9d:ba:87:24:74:60:55:a3: 21:e1:73:05:e9:48:30:1b:89:77:60:23:44:1b:4a: 14:57:ff:7c:c5:37:9e:74:0a:8c:94:04:b3:6f:96: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:15:AA:73:A2:8A:57:45:12:08:5F:84:10:3A:C7:FC:9E:8D:72:2E X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxWqc6KKV0USCF-EEDrH_J6Nci4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.132.160.0/22 Signature Algorithm: sha256WithRSAEncryption b6:61:5a:08:05:38:10:db:f3:bc:c0:af:77:52:0a:ff:eb:ca: 02:2c:c3:1e:c3:e8:aa:0d:32:76:77:e9:9c:18:4d:a7:d3:81: be:d8:84:cc:5a:48:c5:14:be:46:ed:69:e4:8c:c8:c2:64:2a: d8:d7:b5:dd:bf:ae:c6:69:a3:9b:f8:b2:33:46:9d:88:3b:11: a3:1d:1a:13:3c:92:36:d9:26:ce:c3:e8:82:95:20:ee:a7:b8: fa:a0:5b:d1:49:ee:7c:8f:d3:b8:6f:a2:8a:80:b3:75:68:9d: a4:68:9e:50:99:51:9c:4f:2e:28:df:6a:84:18:96:3f:a5:99: bf:94:b4:26:ff:26:73:16:cf:ef:75:10:8a:5e:43:cd:87:c6: dc:c1:8b:1d:ac:d4:01:f3:83:e3:44:47:b4:39:02:46:73:7f: d5:c3:9c:d3:02:63:9a:2a:85:84:1e:c5:ad:a6:d1:e1:18:fd: 53:09:b0:3c:30:ca:a0:5f:3b:82:32:05:f0:92:11:f2:52:fc: 2e:33:31:d0:80:51:6e:0b:f9:53:33:92:bd:68:81:72:f4:33: bd:e4:86:d4:77:7a:30:ec:13:6c:15:5d:5b:a5:cd:f8:96:37: 1d:60:bf:6d:1e:c2:fc:79:ae:b5:48:81:c5:40:45:27:da:22: 0a:ee:26:02 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzEyMFoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoOTMxNUFBNzNBMjhBNTc0 NTEyMDg1Rjg0MTAzQUM3RkM5RThENzIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO8aBcOFeHhBfNwuORqTncQO01g2Iq53P3P7hAQ2EjFr6j0lGmyn 0fyQyH3QTTh5gVFYZ7hl1Ddj1vFi7t20CacmUoedPukLCFFaA8AHIMZPahaQWNWT PJ1w/hLTjqfAptP5Zz32wKhGyWYKVTisegxOt/RBi6f52zLzKwvJqEgb7qSoqPMf /4WUkVidAv8PRt7QiP2iAT/Qu6X739RYUtkYnCjPMWFGGaJ3X1voUkP91yarDN5b oSWKoLlegEFt9hNj4EcYJFIWc6OcfFGCgjIKJrup2+ZrUp26hyR0YFWjIeFzBelI MBuJd2AjRBtKFFf/fMU3nnQKjJQEs2+W5KcCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSTFapzoopXRRIIX4QQOsf8no1yLjAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9reFdxYzZLS1YwVVND Ri1FRURySF9KNk5jaTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4SgMA0GCSqGSIb3DQEBCwUAA4IBAQC2YVoIBTgQ2/O8wK93Ugr/68oCLMMe w+iqDTJ2d+mcGE2n04G+2ITMWkjFFL5G7WnkjMjCZCrY17Xdv67GaaOb+LIzRp2I OxGjHRoTPJI22SbOw+iClSDup7j6oFvRSe58j9O4b6KKgLN1aJ2kaJ5QmVGcTy4o 32qEGJY/pZm/lLQm/yZzFs/vdRCKXkPNh8bcwYsdrNQB84PjREe0OQJGc3/Vw5zT AmOaKoWEHsWtptHhGP1TCbA8MMqgXzuCMgXwkhHyUvwuMzHQgFFuC/lTM5K9aIFy 9DO95IbUd3ow7BNsFV1bpc34ljcdYL9tHsL8ea61SIHFQEUn2iIK7iYC -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:03 2025 by rpki-client