$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/o-IoYMEOHeYdkKNsWmhndR1aGl8.roa File: o-IoYMEOHeYdkKNsWmhndR1aGl8.roa (raw, json) Hash identifier: MYjeoZrbPC/1oVE4c/eKjHoHRRzhsdYPAoHb8GGTPLk= Subject key identifier: A3:E2:28:60:C1:0E:1D:E6:1D:90:A3:6C:5A:68:67:75:1D:5A:1A:5F Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 1B Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/o-IoYMEOHeYdkKNsWmhndR1aGl8.roa Signing time: Thu 17 Apr 2025 11:31:17 +0000 ROA not before: Thu 17 Apr 2025 11:31:17 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 55933 IP address blocks: 103.118.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:31:17 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=A3E22860C10E1DE61D90A36C5A6867751D5A1A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:6b:6c:47:77:c6:dd:5e:0d:b8:47:c7:88: c9:75:c8:51:2c:98:7e:27:c1:b1:6b:5d:01:06:27: 77:53:92:33:cb:b2:01:73:b2:5e:9a:f6:62:c4:82: 1f:b6:c7:6a:8a:b6:ef:47:26:85:5b:59:48:58:ba: 1c:19:e0:ff:51:ea:cb:67:8c:08:cc:f5:62:a4:1a: 37:e4:2e:91:10:66:d3:d7:50:1e:de:9e:87:82:11: 20:f3:9a:9e:c2:1c:e6:59:14:5b:60:80:28:7a:e0: 04:f7:86:7f:f2:ca:04:5b:34:97:41:31:6f:cc:07: b5:f0:bf:fa:a8:3b:ff:fb:9d:ce:a7:3e:1e:c1:5f: fa:06:a2:ee:f6:90:29:f1:ff:e0:af:e4:ac:83:01: d0:21:af:ee:0f:ef:ac:8a:3d:1f:1a:5a:8e:e1:ae: f4:cf:ce:0e:8a:89:ad:62:82:c3:87:db:6a:16:39: a5:3e:78:96:4a:dd:e2:26:61:76:b5:52:b4:fc:da: 96:85:13:57:fa:f5:43:93:af:d6:e5:16:45:6b:f4: ea:48:a4:2b:9c:94:43:c4:e2:58:8b:80:d6:13:57: d0:3b:26:99:6e:bc:2a:f8:87:ba:a5:99:d4:0f:b2: e3:18:11:94:fe:0c:39:1e:48:cb:11:32:7e:eb:18: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:28:60:C1:0E:1D:E6:1D:90:A3:6C:5A:68:67:75:1D:5A:1A:5F X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/o-IoYMEOHeYdkKNsWmhndR1aGl8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.212.0/22 Signature Algorithm: sha256WithRSAEncryption 65:00:2d:dd:27:ed:ce:b5:05:f5:ee:31:f7:43:07:f0:5b:c6: 9c:f3:0f:68:e4:48:38:74:10:f0:ac:1f:96:73:a4:df:76:ca: 8b:68:6f:34:0a:ee:4d:54:27:a1:15:45:fd:08:93:01:ed:d3: 60:23:18:21:14:72:68:99:67:f8:e1:0f:1f:f3:b4:79:33:4f: 79:62:fc:3d:9c:ba:b9:2a:6e:24:a1:28:dc:8d:e6:8e:26:da: 96:22:c5:5f:1f:03:fa:99:18:8c:33:8d:11:d6:81:83:38:27: 1b:89:d5:51:90:90:8f:91:2b:7e:09:92:d6:27:7c:85:96:dd: 25:79:8a:8b:da:70:d1:35:fd:81:f7:6a:6c:2f:11:24:89:9c: 06:12:26:47:16:26:b5:5f:cb:4e:c6:13:70:ec:65:6f:62:d8: 0e:a6:b6:4a:f1:cc:64:ce:05:56:29:3f:e1:0b:3b:66:48:92: 34:72:c5:f7:4d:97:69:a4:c6:48:bf:56:d0:79:21:ce:b9:e7: 11:d2:e0:b7:f5:f0:56:27:ef:3b:a6:c1:bb:02:64:0a:6b:1b: 8f:6b:79:70:fa:00:0c:22:8a:8d:75:e2:0a:8c:d6:a9:fd:68: 65:9f:84:d1:47:14:1a:fb:1c:f5:99:65:44:b8:84:ff:59:fa: b2:7a:8e:09 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx MzExN1oXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoQTNFMjI4NjBDMTBFMURF NjFEOTBBMzZDNUE2ODY3NzUxRDVBMUE1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK8pa2xHd8bdXg24R8eIyXXIUSyYfifBsWtdAQYnd1OSM8uyAXOy Xpr2YsSCH7bHaoq270cmhVtZSFi6HBng/1Hqy2eMCMz1YqQaN+QukRBm09dQHt6e h4IRIPOansIc5lkUW2CAKHrgBPeGf/LKBFs0l0Exb8wHtfC/+qg7//udzqc+HsFf +gai7vaQKfH/4K/krIMB0CGv7g/vrIo9HxpajuGu9M/ODoqJrWKCw4fbahY5pT54 lkrd4iZhdrVStPzaloUTV/r1Q5Ov1uUWRWv06kikK5yUQ8TiWIuA1hNX0DsmmW68 KviHuqWZ1A+y4xgRlP4MOR5IyxEyfusYW+MCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSj4ihgwQ4d5h2Qo2xaaGd1HVoaXzAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9vLUlvWU1FT0hlWWRr S05zV21obmRSMWFHbDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3bUMA0GCSqGSIb3DQEBCwUAA4IBAQBlAC3dJ+3OtQX17jH3QwfwW8ac8w9o 5Eg4dBDwrB+Wc6TfdsqLaG80Cu5NVCehFUX9CJMB7dNgIxghFHJomWf44Q8f87R5 M095Yvw9nLq5Km4koSjcjeaOJtqWIsVfHwP6mRiMM40R1oGDOCcbidVRkJCPkSt+ CZLWJ3yFlt0leYqL2nDRNf2B92psLxEkiZwGEiZHFia1X8tOxhNw7GVvYtgOprZK 8cxkzgVWKT/hCztmSJI0csX3TZdppMZIv1bQeSHOuecR0uC39fBWJ+87psG7AmQK axuPa3lw+gAMIoqNdeIKjNap/Whln4TRRxQa+xz1mWVEuIT/Wfqyeo4J -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:25 2025 by rpki-client