$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/ulRWS8iKyx-Ky2ddwg6_W8u0jNw.roa File: ulRWS8iKyx-Ky2ddwg6_W8u0jNw.roa (raw, json) Hash identifier: oLsZy4Kqveja+ITMO+k5g80ENeVZQKcM9U/a4R9lzOc= Subject key identifier: BA:54:56:4B:C8:8A:CB:1F:8A:CB:67:5D:C2:0E:BF:5B:CB:B4:8C:DC Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Certificate serial: 0205 Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ulRWS8iKyx-Ky2ddwg6_W8u0jNw.roa Signing time: Fri 04 Jul 2025 15:10:09 +0000 ROA not before: Fri 04 Jul 2025 15:10:09 +0000 ROA not after: Wed 15 Apr 2026 09:08:30 +0000 asID: 134823 IP address blocks: 103.118.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 13:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925 Validity Not Before: Jul 4 15:10:09 2025 GMT Not After : Apr 15 09:08:30 2026 GMT Subject: CN=BA54564BC88ACB1F8ACB675DC20EBF5BCBB48CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:fb:89:6f:33:41:ee:2f:ab:df:82:81:de: af:bf:21:5d:d5:b4:42:d0:a7:5b:a6:31:9b:82:53: 82:f2:a6:99:37:57:71:96:ec:61:4b:c2:9a:c2:7a: d3:5c:12:c4:ee:d6:8a:8b:22:97:63:6e:e5:02:f1: 42:98:46:57:e3:c4:b0:ef:75:29:cb:98:bd:01:c3: 54:78:5b:84:34:4b:e1:36:ff:95:ae:0d:a1:46:02: dd:45:98:cf:fc:a2:5e:93:a2:1c:ea:01:e3:e9:cc: 93:e5:3c:4f:09:92:a9:2f:bc:e4:e4:d0:58:8b:9d: 8d:31:98:1d:9a:7d:d1:f2:03:6a:ad:7f:5c:0e:96: 47:68:94:08:86:c2:d6:0c:c7:dc:89:d6:77:d2:39: b6:c6:1c:d9:96:c6:81:76:bb:b4:f9:f0:07:99:4b: 50:c7:9d:ed:93:6b:b3:2c:3c:8e:b6:e2:31:8f:d3: ef:04:55:a1:df:02:77:84:70:aa:ad:60:c4:a0:60: 7f:da:45:a8:ef:9a:8e:05:86:58:11:d4:de:78:56: 3c:23:f6:dd:18:2f:17:43:d4:14:b0:88:06:94:3f: 01:5d:cb:5b:f7:ce:98:d8:ae:47:3c:6b:e7:97:87: ae:46:bb:3e:f7:26:bd:25:81:5a:c1:6a:1a:08:03: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:56:4B:C8:8A:CB:1F:8A:CB:67:5D:C2:0E:BF:5B:CB:B4:8C:DC X509v3 Authority Key Identifier: keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ulRWS8iKyx-Ky2ddwg6_W8u0jNw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.208.0/22 Signature Algorithm: sha256WithRSAEncryption 30:96:48:9d:ee:92:7d:7d:6b:f1:27:78:aa:db:da:a2:17:61: 9f:96:83:7b:f2:ce:0d:4a:4e:ca:c5:1f:35:6b:b7:98:e9:9d: 83:71:71:02:0e:31:8f:2b:41:08:c4:de:d4:25:45:fb:55:30: c9:aa:37:a9:ff:46:84:10:40:f7:06:51:d6:02:ba:1d:74:43: 25:9a:9d:b7:e6:ff:f9:d1:ac:25:0b:13:84:8d:04:10:9c:b5: f3:cc:d3:e0:03:7a:f0:de:1e:27:bf:fd:82:46:ed:49:eb:d1: dd:70:cb:42:3d:68:fa:c5:2a:28:5e:f8:0b:0c:0f:90:30:b7: e7:31:fe:b1:b7:f1:b8:a0:b5:11:61:50:5e:9f:66:df:51:cb: 05:77:3a:7b:58:40:9d:d3:87:c4:31:75:9a:e3:2d:fb:d3:23: 7c:43:ca:75:d6:c2:e2:84:aa:1b:2a:ab:20:be:af:d2:1b:04: c7:b0:67:98:cb:65:5f:36:7c:8c:14:13:1f:a5:61:db:65:53: f4:8e:4a:2b:35:b1:26:ff:14:5a:1a:f5:9f:1d:fe:52:33:92: 98:c6:35:af:99:57:a5:3c:df:61:ac:83:8e:9c:c4:b1:f4:31: 93:4f:12:e7:33:eb:b5:8d:67:9d:0b:3b:c3:f2:24:e6:c2:1d: b0:34:e2:38 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTA3MDQx NTEwMDlaFw0yNjA0MTUwOTA4MzBaMDMxMTAvBgNVBAMTKEJBNTQ1NjRCQzg4QUNC MUY4QUNCNjc1REMyMEVCRjVCQ0JCNDhDREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmI/uJbzNB7i+r34KB3q+/IV3VtELQp1umMZuCU4Lyppk3V3GW 7GFLwprCetNcEsTu1oqLIpdjbuUC8UKYRlfjxLDvdSnLmL0Bw1R4W4Q0S+E2/5Wu DaFGAt1FmM/8ol6TohzqAePpzJPlPE8JkqkvvOTk0FiLnY0xmB2afdHyA2qtf1wO lkdolAiGwtYMx9yJ1nfSObbGHNmWxoF2u7T58AeZS1DHne2Ta7MsPI624jGP0+8E VaHfAneEcKqtYMSgYH/aRajvmo4FhlgR1N54Vjwj9t0YLxdD1BSwiAaUPwFdy1v3 zpjYrkc8a+eXh65Guz73Jr0lgVrBahoIA14RAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUulRWS8iKyx+Ky2ddwg6/W8u0jNwwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvdWxSV1M4aUt5eC1L eTJkZHdnNl9XOHUwak53LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmd20DANBgkqhkiG9w0BAQsFAAOCAQEAMJZIne6SfX1r8Sd4qtvaohdhn5aD e/LODUpOysUfNWu3mOmdg3FxAg4xjytBCMTe1CVF+1Uwyao3qf9GhBBA9wZR1gK6 HXRDJZqdt+b/+dGsJQsThI0EEJy188zT4AN68N4eJ7/9gkbtSevR3XDLQj1o+sUq KF74CwwPkDC35zH+sbfxuKC1EWFQXp9m31HLBXc6e1hAndOHxDF1muMt+9MjfEPK ddbC4oSqGyqrIL6v0hsEx7BnmMtlXzZ8jBQTH6Vh22VT9I5KKzWxJv8UWhr1nx3+ UjOSmMY1r5lXpTzfYayDjpzEsfQxk08S5zPrtY1nnQs7w/Ik5sIdsDTiOA== -----END CERTIFICATE-----Generated at Sun Jul 20 12:50:23 2025 by rpki-client