$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/GIeI43rjVKbLIIIkLP6Vaga-elo.roa File: GIeI43rjVKbLIIIkLP6Vaga-elo.roa (raw, json) Hash identifier: I7pgK9xWopDL733ZdVsoyeAmhV72ONe4x6WnZJ2B+Bs= Subject key identifier: 18:87:88:E3:7A:E3:54:A6:CB:20:82:24:2C:FE:95:6A:06:BE:7A:5A Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 032C Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/GIeI43rjVKbLIIIkLP6Vaga-elo.roa Signing time: Thu 28 Aug 2025 10:34:18 +0000 ROA not before: Thu 28 Aug 2025 10:34:18 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 216047 IP address blocks: 103.216.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Aug 28 10:34:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=188788E37AE354A6CB2082242CFE956A06BE7A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:41:ea:06:2b:09:8b:23:19:e5:a7:b7:6e: c7:3f:b5:55:69:3c:90:1e:36:94:e8:a3:a0:ab:d9: 43:9a:99:f6:bd:c1:dd:cf:df:f7:bb:f1:73:a8:94: 71:c2:89:28:24:90:e4:b3:3e:4e:01:75:3e:f5:91: 75:7d:b5:82:02:48:ee:83:3b:9b:08:8f:9f:6a:14: 57:2b:f2:79:59:36:3c:e6:71:74:2b:16:b1:8a:21: e9:34:1b:89:98:52:e1:b5:7c:9b:fa:87:d7:db:d0: ab:80:f2:6d:c6:39:aa:ce:b9:2b:71:d6:9d:b9:c5: f8:08:40:2b:56:a2:49:13:fb:fd:4e:86:17:af:85: 7f:cf:6f:b1:6a:e1:fb:2d:48:98:7b:cc:d2:cd:e8: ae:91:d4:62:98:95:a2:c6:5c:24:3c:4e:19:2c:a7: d9:31:77:cf:0f:cf:61:95:6c:62:40:2e:c0:71:a9: a8:0e:f0:14:77:3f:46:35:f4:ef:d0:fd:21:f5:26: fb:f3:45:37:c5:90:96:6d:9a:4e:34:28:1a:e7:9c: 4a:a8:97:3d:26:b9:1a:69:62:d0:dc:98:7c:8f:3f: b5:87:e1:fa:4e:c9:5c:93:d6:3a:f2:60:0c:16:a9: 59:ca:a8:3a:2c:e6:67:94:f4:56:59:90:4c:81:3a: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:87:88:E3:7A:E3:54:A6:CB:20:82:24:2C:FE:95:6A:06:BE:7A:5A X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/GIeI43rjVKbLIIIkLP6Vaga-elo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.216.229.0/24 Signature Algorithm: sha256WithRSAEncryption 81:b5:15:bf:ed:69:6b:52:8d:60:8f:a5:68:42:4b:2d:74:0f: 16:40:fd:08:0b:fb:6d:54:6d:9c:48:e5:e3:34:0d:80:9a:46: e6:8a:dd:14:82:be:37:74:9c:89:98:a0:b8:c5:09:54:73:79: b7:ea:25:ca:31:6c:f9:6d:fd:1d:3b:06:e3:87:73:ff:1e:2d: 98:45:21:77:ce:2b:db:ad:11:6a:73:38:4e:98:63:2f:06:f4: 45:ee:12:5b:59:d5:88:49:90:59:20:d0:75:27:b7:74:99:6a: d1:26:d5:20:00:bf:f6:ba:b6:2f:1e:fd:50:57:da:36:4e:75: 25:c3:98:3c:7d:57:e9:27:a9:df:a7:4e:e2:9d:61:0b:ac:0c: 0f:ab:4a:76:de:c3:ba:98:c8:4a:7c:ff:35:8f:5c:72:42:e1: 6e:45:1d:38:f3:4b:f5:12:d8:97:82:55:19:b8:5f:e0:73:f1: 80:1a:cf:51:7c:60:a0:ab:29:99:f2:95:d3:03:cc:16:17:f0: f4:68:c7:c2:d4:71:f0:df:2b:bc:ab:c4:85:9a:62:a3:45:0f: e4:17:d0:59:22:c9:12:f4:6a:2d:44:3d:7a:ed:6b:dc:b2:d0: 7a:3f:03:5e:6a:b9:c7:49:59:bc:7c:ff:5d:2e:f7:c6:36:88: a4:f0:79:90 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTA4Mjgx MDM0MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDE4ODc4OEUzN0FFMzU0 QTZDQjIwODIyNDJDRkU5NTZBMDZCRTdBNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoiUHqBisJiyMZ5ae3bsc/tVVpPJAeNpToo6Cr2UOamfa9wd3P 3/e78XOolHHCiSgkkOSzPk4BdT71kXV9tYICSO6DO5sIj59qFFcr8nlZNjzmcXQr FrGKIek0G4mYUuG1fJv6h9fb0KuA8m3GOarOuStx1p25xfgIQCtWokkT+/1Ohhev hX/Pb7Fq4fstSJh7zNLN6K6R1GKYlaLGXCQ8Thksp9kxd88Pz2GVbGJALsBxqagO 8BR3P0Y19O/Q/SH1JvvzRTfFkJZtmk40KBrnnEqolz0muRppYtDcmHyPP7WH4fpO yVyT1jryYAwWqVnKqDos5meU9FZZkEyBOoXnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUGIeI43rjVKbLIIIkLP6Vaga+elowHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvR0llSTQzcmpWS2JM SUlJa0xQNlZhZ2EtZWxvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfY5TANBgkqhkiG9w0BAQsFAAOCAQEAgbUVv+1pa1KNYI+laEJLLXQPFkD9 CAv7bVRtnEjl4zQNgJpG5ordFIK+N3SciZiguMUJVHN5t+olyjFs+W39HTsG44dz /x4tmEUhd84r260RanM4TphjLwb0Re4SW1nViEmQWSDQdSe3dJlq0SbVIAC/9rq2 Lx79UFfaNk51JcOYPH1X6Sep36dO4p1hC6wMD6tKdt7DupjISnz/NY9cckLhbkUd OPNL9RLYl4JVGbhf4HPxgBrPUXxgoKspmfKV0wPMFhfw9GjHwtRx8N8rvKvEhZpi o0UP5BfQWSLJEvRqLUQ9eu1r3LLQej8DXmq5x0lZvHz/XS73xjaIpPB5kA== -----END CERTIFICATE-----Generated at Sun Sep 7 11:00:13 2025 by rpki-client