$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZEe61U8oROyQXetEFyaf_srIWyQ.roa File: ZEe61U8oROyQXetEFyaf_srIWyQ.roa (raw, json) Hash identifier: 9d6jFhGeC6aabPaXbTCChkAYRez4xDkdA08KPQhDXJw= Subject key identifier: 64:47:BA:D5:4F:28:44:EC:90:5D:EB:44:17:26:9F:FE:CA:C8:5B:24 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 56 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZEe61U8oROyQXetEFyaf_srIWyQ.roa Signing time: Fri 18 Apr 2025 01:19:34 +0000 ROA not before: Fri 18 Apr 2025 01:19:34 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 138968 IP address blocks: 103.216.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Apr 18 01:19:34 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=6447BAD54F2844EC905DEB4417269FFECAC85B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:1b:e5:38:86:1f:25:7b:88:03:71:e0:3f: aa:fe:b8:08:45:db:5c:f5:7a:e8:1a:06:0c:b6:da: 86:f2:c7:ef:60:d8:b8:20:37:8c:e0:7b:30:0f:a7: d9:8e:8f:a4:3e:47:26:1a:51:97:aa:ab:6a:ff:f3: 54:83:42:5f:fc:4f:54:de:9b:8c:14:95:42:e6:4b: 56:c7:c8:40:fc:f7:40:05:bf:11:f0:27:89:12:c3: c7:cd:0a:08:1b:04:93:36:a1:b3:c3:cc:bb:21:c6: 66:44:f4:b3:ac:1b:f4:1a:85:df:59:d1:34:19:19: 85:bd:e2:e4:95:82:b2:97:2a:fb:53:29:64:4d:9e: 73:55:a7:87:0e:75:46:72:43:4e:e3:b6:05:03:4a: 8f:63:2b:dc:8b:1e:6f:b2:bf:96:6d:a6:31:38:a1: 08:c9:08:f1:59:7c:9a:47:5a:db:39:8b:31:ed:3d: 98:2f:a2:75:0f:fd:59:90:9a:76:6b:7c:72:00:cd: 5c:f0:8b:6d:72:5e:8d:44:d6:b9:98:13:74:3d:88: 70:1e:40:3c:9e:12:37:b7:b1:1f:02:7f:5c:62:3d: 82:a9:a9:8c:19:14:37:35:25:c3:6f:ad:fd:f3:1d: fa:4c:f4:de:2b:40:bc:47:a5:10:e5:42:96:15:9d: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:47:BA:D5:4F:28:44:EC:90:5D:EB:44:17:26:9F:FE:CA:C8:5B:24 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZEe61U8oROyQXetEFyaf_srIWyQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.216.228.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:fb:ed:a3:12:2b:92:df:af:12:d2:d8:3a:04:f0:b1:fe:7e: 9f:c5:25:75:87:96:58:ab:79:44:64:55:8c:bb:83:12:49:14: 80:a3:13:cd:55:ee:7d:76:7d:c3:94:5d:af:f6:3e:d2:ce:a0: 27:72:0a:4d:f6:7d:e2:66:3c:b6:9b:cc:fd:f4:8e:23:50:46: af:4a:96:d7:73:c9:83:cb:50:8c:bc:22:9a:cd:7f:52:00:3b: e3:35:6c:10:39:a2:4d:50:c7:50:8a:5a:a6:f6:dc:25:a0:af: 66:9d:04:74:8d:e5:fe:09:b2:3e:8d:6b:2c:a2:5e:cc:84:95: 54:0d:01:31:33:92:c0:92:f9:ff:a2:98:4b:f0:26:97:a4:f3: b3:fd:db:65:89:f7:4f:14:b9:b4:31:97:e3:80:0b:0a:72:32: 4d:84:d1:3c:99:f5:a4:c4:8e:a6:7c:6b:7e:97:ab:fc:54:98: 3e:a5:ca:2f:75:85:de:fd:7b:42:5f:ff:9f:47:62:4c:98:ed: f6:df:cc:7e:a4:9b:08:97:b0:20:d0:f7:21:07:a2:0c:13:12: 03:01:46:20:46:81:e3:b4:27:02:6c:55:08:44:df:56:b7:c1: 4f:58:2b:e3:52:1f:1c:6e:bc:22:ad:e0:5c:5e:80:74:12:80: 9a:a0:b4:cb -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxODAx MTkzNFoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNjQ0N0JBRDU0RjI4NDRF QzkwNURFQjQ0MTcyNjlGRkVDQUM4NUIyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM0CG+U4hh8le4gDceA/qv64CEXbXPV66BoGDLbahvLH72DYuCA3 jOB7MA+n2Y6PpD5HJhpRl6qrav/zVINCX/xPVN6bjBSVQuZLVsfIQPz3QAW/EfAn iRLDx80KCBsEkzahs8PMuyHGZkT0s6wb9BqF31nRNBkZhb3i5JWCspcq+1MpZE2e c1Wnhw51RnJDTuO2BQNKj2Mr3Iseb7K/lm2mMTihCMkI8Vl8mkda2zmLMe09mC+i dQ/9WZCadmt8cgDNXPCLbXJejUTWuZgTdD2IcB5APJ4SN7exHwJ/XGI9gqmpjBkU NzUlw2+t/fMd+kz03itAvEelEOVClhWdR/8CAwEAAaOCAfMwggHvMB0GA1UdDgQW BBRkR7rVTyhE7JBd60QXJp/+yshbJDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2 L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9aRWU2MVU4b1JPeVFY ZXRFRnlhZl9zcklXeVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ9jkMA0GCSqGSIb3DQEBCwUAA4IBAQA9++2jEiuS368S0tg6BPCx/n6fxSV1 h5ZYq3lEZFWMu4MSSRSAoxPNVe59dn3DlF2v9j7SzqAncgpN9n3iZjy2m8z99I4j UEavSpbXc8mDy1CMvCKazX9SADvjNWwQOaJNUMdQilqm9twloK9mnQR0jeX+CbI+ jWssol7MhJVUDQExM5LAkvn/ophL8CaXpPOz/dtlifdPFLm0MZfjgAsKcjJNhNE8 mfWkxI6mfGt+l6v8VJg+pcovdYXe/XtCX/+fR2JMmO3238x+pJsIl7Ag0PchB6IM ExIDAUYgRoHjtCcCbFUIRN9Wt8FPWCvjUh8cbrwireBcXoB0EoCaoLTL -----END CERTIFICATE-----Generated at Wed Jun 4 00:56:03 2025 by rpki-client