$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0jjhXjyYpH1pI2lj868WtSjRIs.roa File: v0jjhXjyYpH1pI2lj868WtSjRIs.roa (raw, json) Hash identifier: 0reLJZKF/UrewxaDiofHFzbbX4ifd0i6OgBZi1SftSI= Subject key identifier: BF:48:E3:85:78:F2:62:91:F5:A4:8D:A5:8F:CE:BC:5A:D4:A3:44:8B Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 42 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0jjhXjyYpH1pI2lj868WtSjRIs.roa Signing time: Thu 17 Apr 2025 11:42:31 +0000 ROA not before: Thu 17 Apr 2025 11:42:31 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 134823 IP address blocks: 103.115.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:42:31 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=BF48E38578F26291F5A48DA58FCEBC5AD4A3448B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:5b:19:b7:02:36:67:ca:50:6f:e4:a0:a1: 2d:ac:81:88:cb:70:38:57:db:c9:91:a5:cd:0d:89: ff:0f:98:9d:87:f0:a0:6c:bb:0b:a7:20:db:ca:85: 9d:df:4e:55:0c:a8:0c:3a:79:e8:81:bf:a4:50:db: 9e:4b:3c:3c:99:64:b8:85:39:65:e9:bd:dc:91:a7: e4:80:f6:6b:d1:b4:98:d9:fe:68:18:5b:fa:d3:5d: 3b:ec:79:47:84:57:a6:e3:49:de:19:a3:05:4c:38: c3:8d:88:b9:19:3b:05:2e:fb:8a:24:b1:5e:4a:fb: c7:76:ba:4d:81:64:fc:b4:bb:f5:1c:b3:fe:cd:32: c4:25:31:e4:d7:c0:c2:2c:5e:53:f5:91:45:72:4a: bd:d5:ef:10:bb:d5:09:09:44:43:6d:86:58:d0:0c: fd:94:9c:68:fd:77:33:4d:eb:7a:28:b3:ba:19:a2: 7c:a1:4b:c6:30:03:3c:f0:1b:5d:fd:d7:ff:41:7a: c0:5f:83:30:3d:25:f8:cc:f8:91:37:cd:96:de:60: 72:e3:6a:e8:1f:e4:97:4c:c7:84:f0:0a:12:7c:c9: 56:2b:ad:0f:75:07:01:d4:4a:eb:cc:fd:41:3b:6e: 90:79:96:97:fa:70:de:0c:69:75:5b:cc:41:ba:27: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:48:E3:85:78:F2:62:91:F5:A4:8D:A5:8F:CE:BC:5A:D4:A3:44:8B X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0jjhXjyYpH1pI2lj868WtSjRIs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.115.62.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:32:f1:8f:66:0d:8b:23:18:ca:4b:0a:93:80:1e:46:83:e3: 5c:67:6e:81:ca:dd:ad:e4:46:b2:78:01:fb:86:32:29:75:48: f0:96:d5:1e:74:b2:f6:60:57:57:48:e8:ad:19:18:53:58:f5: 13:a8:54:70:e9:d5:d5:50:fc:ed:b4:12:3b:56:16:2e:b6:3a: 41:08:bc:36:c9:6b:26:4e:b8:d6:57:f4:95:ac:32:2e:49:a3: 58:f1:1d:0e:c0:4c:e2:6b:00:bf:f6:27:5e:de:4a:46:fc:fb: 55:ae:c3:2e:63:a3:5b:11:90:f3:78:10:5c:04:ea:b3:22:1e: bd:31:e3:f8:ce:f4:39:9e:61:59:31:c0:fd:b0:b1:54:3a:92: 45:03:b8:1b:0d:43:87:ff:1d:42:8c:de:35:59:8b:b9:08:8e: 4a:cb:2f:60:03:67:86:39:81:f6:0f:7f:69:5d:d8:18:25:58: 93:e9:b1:64:52:98:b0:b0:00:b0:53:18:aa:b3:3a:df:e0:2d: bb:e3:33:f7:91:8b:37:24:0e:e9:d4:b1:f3:61:63:1f:04:43: 9d:6d:3d:a9:6f:09:6a:37:9b:45:cd:24:aa:86:af:06:a7:4a: 0a:8e:ce:65:0a:2b:66:18:c6:05:1f:9b:c7:50:b0:21:15:89: 07:ae:18:5a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx NDIzMVoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoQkY0OEUzODU3OEYyNjI5 MUY1QTQ4REE1OEZDRUJDNUFENEEzNDQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMXvWxm3AjZnylBv5KChLayBiMtwOFfbyZGlzQ2J/w+YnYfwoGy7 C6cg28qFnd9OVQyoDDp56IG/pFDbnks8PJlkuIU5Zem93JGn5ID2a9G0mNn+aBhb +tNdO+x5R4RXpuNJ3hmjBUw4w42IuRk7BS77iiSxXkr7x3a6TYFk/LS79Ryz/s0y xCUx5NfAwixeU/WRRXJKvdXvELvVCQlEQ22GWNAM/ZScaP13M03reiizuhmifKFL xjADPPAbXf3X/0F6wF+DMD0l+Mz4kTfNlt5gcuNq6B/kl0zHhPAKEnzJViutD3UH AdRK68z9QTtukHmWl/pw3gxpdVvMQbon48ECAwEAAaOCAfMwggHvMB0GA1UdDgQW BBS/SOOFePJikfWkjaWPzrxa1KNEizAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi92MGpqaFhqeVlwSDFw STJsajg2OFd0U2pSSXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3M+MA0GCSqGSIb3DQEBCwUAA4IBAQAMMvGPZg2LIxjKSwqTgB5Gg+NcZ26B yt2t5EayeAH7hjIpdUjwltUedLL2YFdXSOitGRhTWPUTqFRw6dXVUPzttBI7VhYu tjpBCLw2yWsmTrjWV/SVrDIuSaNY8R0OwEziawC/9ide3kpG/PtVrsMuY6NbEZDz eBBcBOqzIh69MeP4zvQ5nmFZMcD9sLFUOpJFA7gbDUOH/x1CjN41WYu5CI5Kyy9g A2eGOYH2D39pXdgYJViT6bFkUpiwsACwUxiqszrf4C274zP3kYs3JA7p1LHzYWMf BEOdbT2pbwlqN5tFzSSqhq8Gp0oKjs5lCitmGMYFH5vHULAhFYkHrhha -----END CERTIFICATE-----Generated at Sun Jun 22 00:38:34 2025 by rpki-client