$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/oxsNF5_DGEGNQM4NRd457UeNp7w.roa File: oxsNF5_DGEGNQM4NRd457UeNp7w.roa (raw, json) Hash identifier: 72pTtljS41equenPZ5Ij7P/eKDzRHAeaAEMEgrljKjk= Subject key identifier: A3:1B:0D:17:9F:C3:18:41:8D:40:CE:0D:45:DE:39:ED:47:8D:A7:BC Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 4D Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/oxsNF5_DGEGNQM4NRd457UeNp7w.roa Signing time: Thu 17 Apr 2025 11:45:25 +0000 ROA not before: Thu 17 Apr 2025 11:45:25 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 55933 IP address blocks: 103.118.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 08:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:45:25 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=A31B0D179FC318418D40CE0D45DE39ED478DA7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:27:3f:0c:6b:29:e8:99:9e:89:c2:6d:0c: 0f:30:ea:02:7b:09:ed:67:6f:db:21:74:5e:cc:35: 3a:51:f4:ab:db:5b:33:38:40:5c:c4:53:4b:e0:d3: bb:ce:86:55:d4:13:04:28:06:c8:b0:f2:00:57:73: 62:76:63:66:f6:25:27:79:6b:45:17:d0:d5:43:bf: 9d:61:73:ff:c8:00:78:57:25:20:28:f3:c3:25:0c: 97:c3:28:dd:96:5c:15:48:96:50:d0:c5:d7:54:09: f8:c3:b2:a8:85:8d:5e:ed:e0:89:f4:4a:57:64:ce: 3c:83:25:62:3c:58:b7:cc:4e:d0:92:fa:b8:73:fb: f9:6f:2f:4a:06:cb:bb:ec:57:c6:22:15:09:98:cb: c7:48:a4:d6:ee:6a:d1:ad:e7:a3:c2:c6:d4:3e:c9: 63:2c:4d:99:9e:35:b9:e0:c3:3b:3a:5c:bb:1a:6d: 56:d6:f1:ca:ca:34:9d:39:21:d1:3f:c6:33:99:62: 52:1e:49:63:98:5e:95:db:05:48:ff:74:8a:e1:b2: 62:f1:8d:d5:19:29:69:44:73:72:bf:4d:8e:32:52: 1f:f3:85:fd:d2:48:50:22:31:21:a7:b2:59:a3:45: 22:1f:f8:ac:ef:17:ea:81:02:29:77:2d:2f:2e:23: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1B:0D:17:9F:C3:18:41:8D:40:CE:0D:45:DE:39:ED:47:8D:A7:BC X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/oxsNF5_DGEGNQM4NRd457UeNp7w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.192.0/22 Signature Algorithm: sha256WithRSAEncryption 31:ab:04:a3:aa:77:e6:af:68:76:1e:0f:03:08:f2:b8:58:ee: 56:b3:7e:c2:88:d3:01:1c:66:d2:c6:14:0f:35:e9:47:c7:05: ab:80:b6:8b:10:c4:11:9f:a5:a3:3c:42:4c:5c:ec:38:7c:ca: a4:97:09:af:f9:4a:98:a3:09:22:ba:e4:79:c6:9f:4f:e6:79: 61:9d:af:53:1f:8f:b0:09:ae:43:95:87:9e:1b:bf:06:05:c9: 72:de:e7:80:d4:a9:fe:0e:64:f3:b4:c3:b8:2c:52:3f:ca:4e: 2d:66:e9:c1:af:0c:d4:91:5f:26:ae:21:15:b0:7c:0c:fc:0a: f9:44:03:9d:31:4b:24:4e:77:a6:e3:4c:30:44:dc:fb:66:7f: 27:35:71:01:98:9e:3e:62:9c:ac:72:a1:a2:8b:53:af:1a:2e: 03:48:8a:6b:71:cf:5d:c2:74:a8:57:a9:cf:d1:f9:15:33:57: ec:fe:f7:9e:58:b3:c0:f8:fc:f8:ff:86:93:6e:84:93:8f:11: ad:49:b4:93:c7:d1:54:63:1e:0b:a1:81:9d:d5:c9:7a:8a:b2: 02:5b:e4:c5:9e:cb:d0:dc:92:b5:26:7e:b0:47:92:bb:de:21: 49:4b:4a:9f:4b:c5:96:e2:3c:01:1b:f0:98:54:fb:af:d2:3d: 79:62:a5:be -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx NDUyNVoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoQTMxQjBEMTc5RkMzMTg0 MThENDBDRTBENDVERTM5RUQ0NzhEQTdCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMVfJz8MaynomZ6Jwm0MDzDqAnsJ7Wdv2yF0Xsw1OlH0q9tbMzhA XMRTS+DTu86GVdQTBCgGyLDyAFdzYnZjZvYlJ3lrRRfQ1UO/nWFz/8gAeFclICjz wyUMl8Mo3ZZcFUiWUNDF11QJ+MOyqIWNXu3gifRKV2TOPIMlYjxYt8xO0JL6uHP7 +W8vSgbLu+xXxiIVCZjLx0ik1u5q0a3no8LG1D7JYyxNmZ41ueDDOzpcuxptVtbx yso0nTkh0T/GM5liUh5JY5heldsFSP90iuGyYvGN1RkpaURzcr9NjjJSH/OF/dJI UCIxIaeyWaNFIh/4rO8X6oECKXctLy4jJBUCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBSjGw0Xn8MYQY1Azg1F3jntR42nvDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9veHNORjVfREdFR05R TTROUmQ0NTdVZU5wN3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3bAMA0GCSqGSIb3DQEBCwUAA4IBAQAxqwSjqnfmr2h2Hg8DCPK4WO5Ws37C iNMBHGbSxhQPNelHxwWrgLaLEMQRn6WjPEJMXOw4fMqklwmv+UqYowkiuuR5xp9P 5nlhna9TH4+wCa5DlYeeG78GBcly3ueA1Kn+DmTztMO4LFI/yk4tZunBrwzUkV8m riEVsHwM/Ar5RAOdMUskTnem40wwRNz7Zn8nNXEBmJ4+YpyscqGii1OvGi4DSIpr cc9dwnSoV6nP0fkVM1fs/veeWLPA+Pz4/4aTboSTjxGtSbSTx9FUYx4LoYGd1cl6 irICW+TFnsvQ3JK1Jn6wR5K73iFJS0qfS8WW4jwBG/CYVPuv0j15YqW+ -----END CERTIFICATE-----Generated at Sat Jun 14 05:34:43 2025 by rpki-client