$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/kF2ol2wr5IyxXc6XU79wqFIBNJc.roa File: kF2ol2wr5IyxXc6XU79wqFIBNJc.roa (raw, json) Hash identifier: 8bF2zND8MZXNlXZwDWPi72GKo3HkOIXInlagf6o0sFg= Subject key identifier: 90:5D:A8:97:6C:2B:E4:8C:B1:5D:CE:97:53:BF:70:A8:52:01:34:97 Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 234D Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/kF2ol2wr5IyxXc6XU79wqFIBNJc.roa Signing time: Tue 08 Apr 2025 03:16:47 +0000 ROA not before: Tue 08 Apr 2025 03:16:47 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 23724 IP address blocks: 103.202.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9037 (0x234d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Apr 8 03:16:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=905DA8976C2BE48CB15DCE9753BF70A852013497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:f7:ad:40:0b:05:87:e1:cd:5d:94:10:4d: aa:6b:ee:6b:b5:5f:79:af:16:6c:ca:99:81:f2:ff: 33:7a:b5:09:55:fd:b5:1d:a9:dd:09:e0:97:65:0a: 7b:38:12:ff:a3:ab:b5:7d:6f:d1:c6:31:80:ec:fd: 02:5e:60:00:7d:05:67:8f:67:ab:89:be:c4:07:0b: da:7c:ca:6f:8e:d9:0b:ec:89:e8:1c:9a:3a:d9:b9: a4:70:60:43:3b:f8:eb:c6:c1:d9:dc:ee:8a:86:dc: 65:12:93:88:d6:b6:df:3c:e5:de:a7:a9:d8:a6:47: e7:03:b4:e8:ed:a1:c9:c4:9d:8d:83:9f:10:06:01: b4:95:9b:3c:1b:f3:3d:a9:4f:05:3a:0e:e9:ca:fe: 7a:37:ce:b9:9b:01:63:74:4d:1e:45:19:24:31:3e: 44:78:13:90:4f:08:6f:3e:ec:d4:8f:5d:62:86:bc: 9c:1c:7b:09:0b:ac:fa:99:85:8a:00:a9:1b:7a:0b: 8c:4f:f9:83:da:bb:04:11:08:45:ba:88:f9:26:dd: b6:36:1e:35:c8:2d:30:fa:cf:20:97:ed:88:5e:5a: e5:c7:5b:24:44:72:e7:73:37:f9:5e:e3:59:87:40: fb:e1:0f:09:33:d2:b9:18:9c:dc:9c:ca:25:f9:03: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:A8:97:6C:2B:E4:8C:B1:5D:CE:97:53:BF:70:A8:52:01:34:97 X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/kF2ol2wr5IyxXc6XU79wqFIBNJc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.202.116.0/24 Signature Algorithm: sha256WithRSAEncryption 69:7c:ec:1b:33:63:30:96:8c:ea:52:17:ec:62:da:ef:7b:bf: 4a:80:cf:34:37:70:ba:b1:13:11:34:f1:df:33:88:04:46:5e: 28:a7:e3:5f:d8:df:20:00:01:fa:d3:3a:70:a9:f2:8a:e6:7a: ff:67:41:73:2d:49:b8:9a:fe:08:61:cf:35:54:33:e2:3f:6a: 85:10:f2:39:19:d7:e5:5c:b3:08:5a:4c:57:c8:08:a8:26:f5: 7c:47:f1:b4:21:e6:a5:1c:df:20:90:d5:cf:cf:fe:e1:26:5e: 94:bb:b9:92:11:16:3a:3c:47:ff:ed:2c:ca:33:63:b1:5f:f0: 58:87:11:08:62:56:5c:6b:ed:56:68:69:9e:da:99:a2:e6:57: 69:96:dd:b9:ff:ab:88:ac:45:77:e3:fd:79:7b:b9:99:93:80: 43:f7:8e:d3:bd:c6:bc:d9:e7:dc:97:a1:d4:aa:46:54:24:a0: 76:99:1a:18:65:96:b3:a9:1e:f0:7a:1c:8c:09:cc:89:de:0c: 4c:b8:d5:af:d5:f8:60:32:52:fa:d9:5b:ea:73:1f:0b:67:b1: 3d:7a:ee:50:ad:e8:8e:fe:d1:bb:01:d4:b6:e7:94:3c:2c:63: b4:57:60:ad:57:01:8e:63:57:16:7f:9d:64:22:33:3a:c1:92: 07:01:79:15 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICI00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTA0MDgw MzE2NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDkwNURBODk3NkMyQkU0 OENCMTVEQ0U5NzUzQkY3MEE4NTIwMTM0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW6vetQAsFh+HNXZQQTapr7mu1X3mvFmzKmYHy/zN6tQlV/bUd qd0J4JdlCns4Ev+jq7V9b9HGMYDs/QJeYAB9BWePZ6uJvsQHC9p8ym+O2Qvsiegc mjrZuaRwYEM7+OvGwdnc7oqG3GUSk4jWtt885d6nqdimR+cDtOjtocnEnY2DnxAG AbSVmzwb8z2pTwU6DunK/no3zrmbAWN0TR5FGSQxPkR4E5BPCG8+7NSPXWKGvJwc ewkLrPqZhYoAqRt6C4xP+YPauwQRCEW6iPkm3bY2HjXILTD6zyCX7YheWuXHWyRE cudzN/le41mHQPvhDwkz0rkYnNycyiX5A//hAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkF2ol2wr5IyxXc6XU79wqFIBNJcwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQva0Yyb2wyd3I1SXl4 WGM2WFU3OXdxRklCTkpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfKdDANBgkqhkiG9w0BAQsFAAOCAQEAaXzsGzNjMJaM6lIX7GLa73u/SoDP NDdwurETETTx3zOIBEZeKKfjX9jfIAAB+tM6cKnyiuZ6/2dBcy1JuJr+CGHPNVQz 4j9qhRDyORnX5VyzCFpMV8gIqCb1fEfxtCHmpRzfIJDVz8/+4SZelLu5khEWOjxH /+0syjNjsV/wWIcRCGJWXGvtVmhpntqZouZXaZbduf+riKxFd+P9eXu5mZOAQ/eO 073GvNnn3Jeh1KpGVCSgdpkaGGWWs6ke8HocjAnMid4MTLjVr9X4YDJS+tlb6nMf C2exPXruUK3ojv7RuwHUtueUPCxjtFdgrVcBjmNXFn+dZCIzOsGSBwF5FQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:00 2025 by rpki-client