$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/N3I21kH2q52MQYNR1rUj_dYw3lw.roa File: N3I21kH2q52MQYNR1rUj_dYw3lw.roa (raw, json) Hash identifier: weAePDnV/l68AktBzugXldHEaQgqlCuCOPF8yK0NNmw= Subject key identifier: 37:72:36:D6:41:F6:AB:9D:8C:41:83:51:D6:B5:23:FD:D6:30:DE:5C Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 51 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/N3I21kH2q52MQYNR1rUj_dYw3lw.roa Signing time: Thu 17 Apr 2025 11:45:27 +0000 ROA not before: Thu 17 Apr 2025 11:45:27 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.118.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 17 11:45:27 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=377236D641F6AB9D8C418351D6B523FDD630DE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:6f:8d:4d:a6:c0:4d:c9:f1:cb:13:b2:2b: db:c2:81:cf:c3:2a:99:2d:10:75:d2:21:09:af:e0: 88:56:38:49:dd:11:86:e3:bf:19:34:e4:bb:3e:f2: 85:0e:90:2b:53:02:cd:7d:83:50:18:da:8f:6e:ce: 2c:33:3b:93:3b:7a:8a:d8:01:d3:91:57:20:17:7b: 35:22:ad:bf:e0:0e:81:4b:32:92:e1:24:15:14:49: d6:c9:85:cd:51:27:e3:25:4b:c7:e6:3b:30:dd:82: aa:cb:24:e0:e2:e0:77:17:cf:2e:1a:ca:ad:d7:e1: 40:23:a1:99:3c:bb:09:d7:e4:0f:34:b9:d1:f5:26: 6f:53:8a:5a:f1:9d:78:10:eb:6d:53:c2:96:c5:a4: ce:db:3c:31:54:f9:2e:5b:fb:68:df:ab:bc:89:ab: 1f:4b:5a:b4:c2:27:45:87:86:52:41:1b:98:12:11: af:ea:98:60:4f:a5:f2:c6:1b:72:27:05:79:0b:0a: 30:66:19:70:50:76:4a:62:12:c2:e7:ca:68:d0:02: da:f5:fa:53:66:fe:1e:59:1c:b6:f9:6b:7c:47:bf: 9c:e9:8b:3f:17:94:00:f2:d7:4d:88:ef:b8:0a:a4: 92:38:6a:b3:85:84:13:f3:a0:eb:79:e2:8b:f8:79: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:72:36:D6:41:F6:AB:9D:8C:41:83:51:D6:B5:23:FD:D6:30:DE:5C X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/N3I21kH2q52MQYNR1rUj_dYw3lw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.196.0/22 Signature Algorithm: sha256WithRSAEncryption 81:10:eb:37:a8:13:7f:8c:ec:3f:f4:ab:e3:56:dd:69:d1:31: 6e:43:95:89:5b:fc:1b:87:6c:17:ca:47:80:fc:d4:6e:3a:6b: 24:f5:07:d4:f1:26:45:b2:4c:7e:99:db:a4:09:f3:36:e5:cd: 3a:a9:b7:5a:0a:30:8f:12:7f:b2:1d:03:e1:0d:11:7d:a4:f6: 63:18:ba:ad:85:60:64:69:a2:67:9f:2e:23:50:da:b9:41:58: 7d:d2:b1:6c:2f:ae:e1:af:8c:0c:4e:83:5f:d0:98:0f:61:bc: 61:67:86:b1:97:fb:98:1b:11:9c:7f:a5:fa:98:ea:4a:79:11: 1d:4a:82:47:94:12:d8:74:28:01:23:36:25:77:00:d4:ad:15: 25:69:d5:be:82:88:eb:53:02:8c:f5:5a:41:55:36:bb:f4:7b: 18:e9:37:6b:31:47:1e:9a:86:14:5d:f2:04:3a:23:bf:9e:75: 8c:7b:d0:87:00:04:6b:14:19:6c:f2:46:38:aa:b8:9b:bb:a0: eb:b6:73:f5:85:32:87:7f:60:e6:d8:a4:4a:b8:cd:4c:79:7b: b3:c3:ca:a1:3c:f5:4c:4e:10:79:b0:95:a2:b8:c6:3b:b5:65: 2c:63:85:77:bc:50:f2:74:e9:4d:11:2b:e1:b8:f8:15:84:44: 99:97:22:aa -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx NDUyN1oXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoMzc3MjM2RDY0MUY2QUI5 RDhDNDE4MzUxRDZCNTIzRkRENjMwREU1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMdzb41NpsBNyfHLE7Ir28KBz8MqmS0QddIhCa/giFY4Sd0RhuO/ GTTkuz7yhQ6QK1MCzX2DUBjaj27OLDM7kzt6itgB05FXIBd7NSKtv+AOgUsykuEk FRRJ1smFzVEn4yVLx+Y7MN2Cqssk4OLgdxfPLhrKrdfhQCOhmTy7CdfkDzS50fUm b1OKWvGdeBDrbVPClsWkzts8MVT5Llv7aN+rvImrH0tatMInRYeGUkEbmBIRr+qY YE+l8sYbcicFeQsKMGYZcFB2SmISwufKaNAC2vX6U2b+HlkctvlrfEe/nOmLPxeU APLXTYjvuAqkkjhqs4WEE/Og63nii/h537kCAwEAAaOCAfMwggHvMB0GA1UdDgQW BBQ3cjbWQfarnYxBg1HWtSP91jDeXDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9OM0kyMWtIMnE1Mk1R WU5SMXJVal9kWXczbHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3bEMA0GCSqGSIb3DQEBCwUAA4IBAQCBEOs3qBN/jOw/9KvjVt1p0TFuQ5WJ W/wbh2wXykeA/NRuOmsk9QfU8SZFskx+mdukCfM25c06qbdaCjCPEn+yHQPhDRF9 pPZjGLqthWBkaaJnny4jUNq5QVh90rFsL67hr4wMToNf0JgPYbxhZ4axl/uYGxGc f6X6mOpKeREdSoJHlBLYdCgBIzYldwDUrRUladW+gojrUwKM9VpBVTa79HsY6Tdr MUcemoYUXfIEOiO/nnWMe9CHAARrFBls8kY4qribu6DrtnP1hTKHf2Dm2KRKuM1M eXuzw8qhPPVMThB5sJWiuMY7tWUsY4V3vFDydOlNESvhuPgVhESZlyKq -----END CERTIFICATE-----Generated at Wed Jun 4 01:08:27 2025 by rpki-client