$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/81nbRPrs8Z69253R39KHZSn4NQY.roa File: 81nbRPrs8Z69253R39KHZSn4NQY.roa (raw, json) Hash identifier: Z+tgYoSQR9qo2W+f69UPacbJz+FtU4nZTEp9q1jIQyw= Subject key identifier: F3:59:DB:44:FA:EC:F1:9E:BD:DB:9D:D1:DF:D2:87:65:29:F8:35:06 Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 234B Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/81nbRPrs8Z69253R39KHZSn4NQY.roa Signing time: Tue 08 Apr 2025 03:09:16 +0000 ROA not before: Tue 08 Apr 2025 03:09:16 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 59067 IP address blocks: 103.202.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 17:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9035 (0x234b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Apr 8 03:09:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F359DB44FAECF19EBDDB9DD1DFD2876529F83506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:2f:d5:39:53:f4:67:ec:db:c1:f6:79:f1: 36:74:99:af:e4:6b:d0:c9:fa:8f:c7:43:42:e5:36: 6e:4b:88:8b:7a:4a:9a:00:30:96:ef:9f:4d:e8:94: 0f:08:12:0d:b9:d0:0e:74:73:e9:b2:e8:75:4b:ff: 1a:ef:ef:cd:df:36:73:a8:82:45:de:5e:09:0e:9b: cb:b3:b6:98:7a:88:0b:a0:1a:a6:5a:05:47:f9:76: 52:2c:46:7f:6e:a6:57:f6:97:18:e9:55:cf:28:93: b3:26:dd:bd:ec:76:15:65:01:5b:c0:62:ea:e8:75: 40:00:ee:23:ef:da:19:5f:00:61:64:6a:cd:c4:f2: fa:22:cf:ef:10:a2:c1:04:b0:7b:c1:3b:ea:6d:36: d1:4e:06:28:56:93:5f:f8:92:79:93:de:ab:4e:db: 1d:84:c7:8b:fb:f7:35:c1:96:bb:d8:14:a2:a4:24: cc:7a:bc:bb:10:37:e2:ca:ce:5a:19:18:79:d5:9d: 62:75:fa:12:0a:39:49:8c:97:8a:6c:bf:b2:d5:fe: 54:29:53:77:1b:66:e5:d8:a7:a9:08:ef:f7:3a:19: 92:b8:bd:49:33:c6:80:57:47:7a:cf:21:f3:6e:b6: ad:78:6c:58:ae:1f:4d:60:5c:07:ba:08:e8:33:e0: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:59:DB:44:FA:EC:F1:9E:BD:DB:9D:D1:DF:D2:87:65:29:F8:35:06 X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/81nbRPrs8Z69253R39KHZSn4NQY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.202.119.0/24 Signature Algorithm: sha256WithRSAEncryption 79:2c:b0:20:f7:1d:e4:ff:cd:0c:87:94:a3:32:a8:7b:7c:02: db:5f:02:8f:73:71:d8:79:04:56:e9:73:99:76:f0:f3:65:91: ab:f4:30:da:95:c5:10:7e:a4:a1:fa:53:9d:39:da:c8:0a:b3: 39:6c:f5:43:38:84:1f:b7:03:8c:f6:c2:a3:2c:da:8e:5d:ef: 3f:89:3d:1e:1e:89:24:c8:74:d1:33:b7:fe:f8:2e:a5:7b:1f: be:43:42:2d:cc:2a:84:7a:aa:04:6c:09:d2:80:54:4e:97:4c: cb:be:17:45:9a:95:73:e6:98:d1:45:23:6d:26:11:e9:20:f0: 54:3f:52:3f:f6:77:8b:a5:9d:68:72:b4:07:ad:16:ae:b1:0d: c0:88:bf:8c:84:73:75:e3:a1:20:2b:40:19:6d:d4:ce:78:c5: 2b:5e:48:2d:28:5d:f6:3e:d1:8e:20:5b:fd:38:3c:12:ae:b8: fb:7d:9d:ea:49:46:dd:d5:89:db:c7:7c:55:86:66:bf:29:bc: 8e:59:c8:b7:65:4c:0e:b5:9e:42:b0:60:fd:15:2d:e5:4e:fd: c2:01:60:f3:f7:b2:c4:6a:4a:f7:c5:96:e3:66:6c:cf:62:c5: 33:b4:4d:b5:ba:08:37:97:fc:ce:77:77:7a:45:94:e8:b6:fa: 62:50:39:d7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICI0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTA0MDgw MzA5MTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYzNTlEQjQ0RkFFQ0Yx OUVCRERCOUREMURGRDI4NzY1MjlGODM1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmAi/VOVP0Z+zbwfZ58TZ0ma/ka9DJ+o/HQ0LlNm5LiIt6SpoA MJbvn03olA8IEg250A50c+my6HVL/xrv783fNnOogkXeXgkOm8uztph6iAugGqZa BUf5dlIsRn9uplf2lxjpVc8ok7Mm3b3sdhVlAVvAYurodUAA7iPv2hlfAGFkas3E 8voiz+8QosEEsHvBO+ptNtFOBihWk1/4knmT3qtO2x2Ex4v79zXBlrvYFKKkJMx6 vLsQN+LKzloZGHnVnWJ1+hIKOUmMl4psv7LV/lQpU3cbZuXYp6kI7/c6GZK4vUkz xoBXR3rPIfNutq14bFiuH01gXAe6COgz4GxPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU81nbRPrs8Z69253R39KHZSn4NQYwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvODFuYlJQcnM4WjY5 MjUzUjM5S0haU240TlFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfKdzANBgkqhkiG9w0BAQsFAAOCAQEAeSywIPcd5P/NDIeUozKoe3wC218C j3Nx2HkEVulzmXbw82WRq/Qw2pXFEH6kofpTnTnayAqzOWz1QziEH7cDjPbCoyza jl3vP4k9Hh6JJMh00TO3/vgupXsfvkNCLcwqhHqqBGwJ0oBUTpdMy74XRZqVc+aY 0UUjbSYR6SDwVD9SP/Z3i6WdaHK0B60WrrENwIi/jIRzdeOhICtAGW3UznjFK15I LShd9j7RjiBb/Tg8Eq64+32d6klG3dWJ28d8VYZmvym8jlnIt2VMDrWeQrBg/RUt 5U79wgFg8/eyxGpK98WW42Zsz2LFM7RNtboIN5f8znd3ekWU6Lb6YlA51w== -----END CERTIFICATE-----Generated at Sun Jun 22 16:47:57 2025 by rpki-client