$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/cSmyvyGzAhyV01TvRns__FHWjzQ.roa File: cSmyvyGzAhyV01TvRns__FHWjzQ.roa (raw, json) Hash identifier: elL41ONeYzy071ixF87+8UGHSDutTweAmAR0fF3qoNs= Subject key identifier: 71:29:B2:BF:21:B3:02:1C:95:D3:54:EF:46:7B:3F:FC:51:D6:8F:34 Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 0130 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/cSmyvyGzAhyV01TvRns__FHWjzQ.roa Signing time: Tue 27 May 2025 12:46:50 +0000 ROA not before: Tue 27 May 2025 12:46:50 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 134823 IP address blocks: 103.118.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 22:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: May 27 12:46:50 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=7129B2BF21B3021C95D354EF467B3FFC51D68F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:b1:0f:75:a1:4f:0c:07:50:3d:af:2b:18: 7d:e5:a6:f0:54:82:69:d9:e2:31:ad:b7:9e:5f:48: 05:7a:8a:31:04:e2:2b:28:35:34:a3:bd:8c:24:a3: 70:05:a2:de:f2:0a:32:fc:20:60:57:c5:75:5c:1a: e8:32:6d:45:44:97:6b:ed:2a:20:02:e5:db:39:0f: 14:bd:43:11:9f:6d:8b:8a:b6:01:f7:0b:c8:0e:50: 82:0e:c8:f9:d6:8c:4b:e3:3c:bf:07:32:8e:d0:45: d9:a1:bb:f3:c2:86:b7:23:4b:42:a6:d7:cf:33:6b: 83:97:b5:bc:0a:7a:4c:72:f3:fa:ee:e7:b3:9f:4d: be:e3:03:62:29:b1:8c:c1:24:c7:1e:4e:fa:a1:06: 94:37:8b:6a:d6:15:48:ae:8f:9a:bc:6b:8d:d4:78: 4d:5a:3c:4b:14:e7:35:58:ed:e8:a5:eb:47:c7:c5: d9:21:65:a2:10:35:0b:ff:51:ba:9e:70:ad:89:7d: 07:e7:36:86:a4:5d:33:42:96:2c:33:c6:54:40:74: a0:a4:0d:5c:64:db:39:59:52:d8:14:2e:e1:cc:e4: 77:32:6d:b4:66:93:72:3f:d2:e1:8f:2a:c7:fc:72: 34:d9:3e:e6:d8:fe:8d:3f:57:1b:52:29:8c:a2:12: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:29:B2:BF:21:B3:02:1C:95:D3:54:EF:46:7B:3F:FC:51:D6:8F:34 X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/cSmyvyGzAhyV01TvRns__FHWjzQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.204.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:5d:fe:ca:1d:4b:a0:96:4f:5f:6f:2b:d3:64:40:1e:e6:10: f2:b5:ea:e2:f8:b2:d0:7f:b8:06:5d:fd:c0:30:af:42:cd:01: a1:5b:02:48:9f:76:c4:95:9d:4c:64:e3:8e:74:b1:9e:3b:ea: ee:4f:fd:2e:cd:88:ba:43:ce:36:f4:e2:94:3e:fe:f6:e2:aa: 07:4b:5a:93:29:ca:ad:02:6b:0a:34:9d:7c:67:bd:dd:36:21: 22:9f:30:d6:94:41:cb:e0:99:eb:9f:7c:05:a4:16:df:d8:e6: 59:d5:f8:e6:a7:a2:05:d3:f3:af:d3:a3:ba:83:90:7f:cc:e2: b9:91:94:4f:b0:0b:72:c8:39:86:73:94:2f:58:30:e5:d7:1c: f4:64:e9:db:2c:c1:06:be:03:f1:21:bb:41:d8:22:94:31:42: 87:98:3e:2a:63:8c:61:c8:2b:54:1d:55:45:0a:d7:86:34:4b: 46:71:9e:6f:33:7f:7f:79:ef:56:90:3b:65:c3:ec:ed:9a:70: 4e:49:38:53:0b:65:4e:e3:eb:67:02:e4:19:d7:4c:bb:b3:70: c9:eb:b6:91:60:9b:6e:5d:b4:81:b4:f9:9e:25:77:98:c9:62: b9:8a:1c:ed:06:ba:50:23:61:54:82:ea:c8:1d:e9:1a:41:8e: d9:b5:11:69 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICATAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTA1Mjcx MjQ2NTBaFw0yNjA0MTUwOTA4MzBaMDMxMTAvBgNVBAMTKDcxMjlCMkJGMjFCMzAy MUM5NUQzNTRFRjQ2N0IzRkZDNTFENjhGMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdIbEPdaFPDAdQPa8rGH3lpvBUgmnZ4jGtt55fSAV6ijEE4iso NTSjvYwko3AFot7yCjL8IGBXxXVcGugybUVEl2vtKiAC5ds5DxS9QxGfbYuKtgH3 C8gOUIIOyPnWjEvjPL8HMo7QRdmhu/PChrcjS0Km188za4OXtbwKekxy8/ru57Of Tb7jA2IpsYzBJMceTvqhBpQ3i2rWFUiuj5q8a43UeE1aPEsU5zVY7eil60fHxdkh ZaIQNQv/UbqecK2JfQfnNoakXTNCliwzxlRAdKCkDVxk2zlZUtgULuHM5HcybbRm k3I/0uGPKsf8cjTZPubY/o0/VxtSKYyiEkhdAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUcSmyvyGzAhyV01TvRns//FHWjzQwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvY1NteXZ5R3pBaHlW MDFUdlJuc19fRkhXanpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmd2zDANBgkqhkiG9w0BAQsFAAOCAQEAi13+yh1LoJZPX28r02RAHuYQ8rXq 4viy0H+4Bl39wDCvQs0BoVsCSJ92xJWdTGTjjnSxnjvq7k/9Ls2IukPONvTilD7+ 9uKqB0takynKrQJrCjSdfGe93TYhIp8w1pRBy+CZ6598BaQW39jmWdX45qeiBdPz r9OjuoOQf8ziuZGUT7ALcsg5hnOUL1gw5dcc9GTp2yzBBr4D8SG7QdgilDFCh5g+ KmOMYcgrVB1VRQrXhjRLRnGebzN/f3nvVpA7ZcPs7ZpwTkk4UwtlTuPrZwLkGddM u7Nwyeu2kWCbbl20gbT5niV3mMliuYoc7Qa6UCNhVILqyB3pGkGO2bURaQ== -----END CERTIFICATE-----Generated at Thu Jun 5 20:38:07 2025 by rpki-client