$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/0VbvmI5KKX2GATRgqxHabBCN954.roa File: 0VbvmI5KKX2GATRgqxHabBCN954.roa (raw, json) Hash identifier: cmpkZvU77v26o8dnFCRM2D9WAkScFYq312Ual1tdjtg= Subject key identifier: D1:56:EF:98:8E:4A:29:7D:86:01:34:60:AB:11:DA:6C:10:8D:F7:9E Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 21AD Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/0VbvmI5KKX2GATRgqxHabBCN954.roa Signing time: Fri 17 Jan 2025 01:28:33 +0000 ROA not before: Fri 17 Jan 2025 01:28:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59067 IP address blocks: 103.255.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8621 (0x21ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Jan 17 01:28:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D156EF988E4A297D86013460AB11DA6C108DF79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:52:74:96:5a:4a:61:7a:4e:05:4a:89:d1: 24:5b:d2:30:f5:13:74:d0:a5:b0:06:7b:8a:8b:3c: 1b:32:af:79:08:9b:92:91:57:e9:28:18:14:94:e6: 5c:dc:14:89:c6:4b:aa:ca:03:93:f2:1b:09:b7:ca: 86:82:3a:6b:8b:f8:52:5f:4a:1f:17:9b:90:3e:7a: 06:fa:8c:9e:23:a1:dd:ed:2e:10:c7:79:7e:08:59: 1c:f9:75:d6:96:0f:7f:a3:10:9a:53:b0:93:85:18: 6a:ae:05:6d:de:0d:b5:b2:d4:0e:a0:dc:f9:39:ea: ac:fe:88:99:a3:b2:e6:52:53:c9:cb:f1:26:f7:fb: aa:b9:45:27:65:2c:3d:a6:56:9e:ec:1d:77:58:28: 5a:79:b0:7a:5d:d9:99:32:e8:fc:94:49:b6:da:26: 24:77:59:c7:bb:57:ee:a6:7f:ce:08:6a:4f:e0:72: 8a:11:69:cb:4b:d2:53:15:13:13:8a:bd:7c:ce:b4: ca:e5:57:c5:60:2b:ee:3c:7a:a3:55:c0:bd:a0:7c: 27:5e:b2:d1:b4:ff:e0:1f:0c:a1:b8:35:91:8e:01: d2:cd:d6:d3:fe:97:5d:72:da:2d:4f:21:5a:89:2d: f2:51:7c:6a:6e:79:da:96:da:1e:ee:93:46:dc:a4: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:EF:98:8E:4A:29:7D:86:01:34:60:AB:11:DA:6C:10:8D:F7:9E X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/0VbvmI5KKX2GATRgqxHabBCN954.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.255.140.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:e3:9e:68:06:a0:70:57:27:fa:55:04:37:91:35:84:94:b3: 9f:9e:1d:09:58:3b:cd:bc:58:fc:88:9f:45:e3:8e:00:87:a7: 59:e8:8d:83:0d:2b:65:d1:e6:1c:83:10:cb:8d:09:d2:8d:5e: eb:c4:c3:eb:04:1d:6f:7e:22:eb:1c:6b:0d:ba:54:40:58:65: 7e:70:5c:a6:ce:71:e4:03:e7:2a:52:02:d9:e8:41:f5:d1:9e: bb:85:ec:06:b8:82:10:88:fc:ab:b4:05:68:6e:27:39:c1:84: 95:b9:16:c8:df:ae:d7:e4:37:6b:67:79:f0:8c:60:6d:66:3a: 28:f9:1a:93:26:47:7c:03:19:c0:12:f1:38:c6:a5:1c:1d:0e: 44:be:6f:d3:fd:65:48:6e:b2:61:60:96:3d:ce:9e:0e:45:97: c8:00:be:fb:fb:ca:d4:00:73:4c:9b:5d:a8:41:05:04:15:e5: 80:cc:5c:b5:a0:69:b8:f0:1d:90:57:71:fd:80:58:03:82:47: 58:5d:92:ea:a8:b3:93:b2:39:7a:23:ab:71:2e:09:29:ba:09: be:0e:5f:47:06:36:5c:a7:4c:6d:6a:96:3c:29:63:ff:c9:32: f6:f1:73:8d:da:df:b2:5b:aa:4a:db:70:b8:83:3c:fc:c1:0e: 46:45:b2:dd -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTAxMTcw MTI4MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQxNTZFRjk4OEU0QTI5 N0Q4NjAxMzQ2MEFCMTFEQTZDMTA4REY3OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5iVJ0llpKYXpOBUqJ0SRb0jD1E3TQpbAGe4qLPBsyr3kIm5KR V+koGBSU5lzcFInGS6rKA5PyGwm3yoaCOmuL+FJfSh8Xm5A+egb6jJ4jod3tLhDH eX4IWRz5ddaWD3+jEJpTsJOFGGquBW3eDbWy1A6g3Pk56qz+iJmjsuZSU8nL8Sb3 +6q5RSdlLD2mVp7sHXdYKFp5sHpd2Zky6PyUSbbaJiR3Wce7V+6mf84Iak/gcooR actL0lMVExOKvXzOtMrlV8VgK+48eqNVwL2gfCdestG0/+AfDKG4NZGOAdLN1tP+ l11y2i1PIVqJLfJRfGpuedqW2h7uk0bcpNG1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU0VbvmI5KKX2GATRgqxHabBCN954wHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvMFZidm1JNUtLWDJH QVRSZ3F4SGFiQkNOOTU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWf/jDANBgkqhkiG9w0BAQsFAAOCAQEADOOeaAagcFcn+lUEN5E1hJSzn54d CVg7zbxY/IifReOOAIenWeiNgw0rZdHmHIMQy40J0o1e68TD6wQdb34i6xxrDbpU QFhlfnBcps5x5APnKlIC2ehB9dGeu4XsBriCEIj8q7QFaG4nOcGElbkWyN+u1+Q3 a2d58IxgbWY6KPkakyZHfAMZwBLxOMalHB0ORL5v0/1lSG6yYWCWPc6eDkWXyAC+ +/vK1ABzTJtdqEEFBBXlgMxctaBpuPAdkFdx/YBYA4JHWF2S6qizk7I5eiOrcS4J KboJvg5fRwY2XKdMbWqWPClj/8ky9vFzjdrfsluqSttwuIM8/MEORkWy3Q== -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:08 2025 by rpki-client