$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/bnw9kTdy3BRTsgqC_SqOm6AZd-4.roa File: bnw9kTdy3BRTsgqC_SqOm6AZd-4.roa (raw, json) Hash identifier: CAs55FBJOva6KhEngyLR6yYd66qA1+au5mjD/3r8Dqk= Subject key identifier: 6E:7C:3D:91:37:72:DC:14:53:B2:0A:82:FD:2A:8E:9B:A0:19:77:EE Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 3053 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/bnw9kTdy3BRTsgqC_SqOm6AZd-4.roa Signing time: Sun 30 Mar 2025 19:58:15 +0000 ROA not before: Sun 30 Mar 2025 19:58:15 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4816 IP address blocks: 103.39.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12371 (0x3053) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:15 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6E7C3D913772DC1453B20A82FD2A8E9BA01977EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:f6:9d:ac:48:39:3a:c9:fa:b7:c8:ce:5d: 7d:d5:8f:68:be:f6:92:8c:cb:35:b4:03:b0:df:6a: de:14:85:11:1c:f8:6c:2c:f2:cc:72:00:90:01:e1: b8:39:61:2e:ca:6d:ae:5f:1b:4e:3e:15:b4:2b:39: b3:ad:a3:49:3b:cb:a8:7a:9b:4c:a7:b9:5e:50:a9: ee:db:7c:ae:ff:c8:95:c7:56:f4:4c:8e:94:f6:9b: f4:fc:5d:e8:bb:60:a6:5b:92:a1:16:55:91:49:80: 69:26:84:db:77:17:76:b3:6b:19:55:cf:95:a9:b0: 68:bc:51:74:bd:03:e0:33:45:cc:f5:5c:ff:92:f7: bf:b7:14:ba:92:8b:ee:46:ba:82:66:8f:b8:5a:50: e1:ec:f0:22:c8:d5:86:97:8e:92:51:b2:85:2d:93: 5e:90:af:9d:d4:d4:e7:01:58:d5:f4:0f:a0:93:5c: 42:76:c9:8f:f8:7b:5c:83:30:eb:45:82:c1:a3:fc: b6:d3:81:01:ea:58:5c:0b:b3:fe:45:d9:56:37:1a: d9:b3:dc:25:f4:1f:27:5d:d2:e2:8b:31:e4:c8:96: b6:11:7d:92:ec:e4:2a:2e:d6:29:13:f0:86:b3:84: 98:75:44:88:3c:97:00:a7:d1:5f:cd:79:4d:c8:b1: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7C:3D:91:37:72:DC:14:53:B2:0A:82:FD:2A:8E:9B:A0:19:77:EE X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/bnw9kTdy3BRTsgqC_SqOm6AZd-4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.39.224.0/21 Signature Algorithm: sha256WithRSAEncryption 27:e2:55:17:8f:bf:8c:d0:5a:fb:ca:27:f5:6a:05:81:27:0b: 86:79:7d:df:c0:b1:32:29:a6:db:a8:f5:72:f8:19:19:ba:0b: 32:cd:0e:86:c9:a3:84:67:93:b6:fb:0e:38:91:ae:ff:bf:e3: 23:dc:5c:c0:6d:5f:91:77:14:db:9b:90:73:68:e9:3a:6f:7d: a7:96:81:f2:70:17:03:c4:63:83:d6:ae:40:f0:18:a8:8e:c0: 89:a6:e9:da:5a:7b:eb:21:db:f6:97:5b:fe:34:1f:25:7d:b4: d8:cd:34:27:9f:09:e3:33:ac:83:af:31:b0:1d:b2:ff:80:bf: 51:c6:75:2f:d5:35:84:d3:01:8f:ed:c1:08:74:1c:d1:28:47: 21:f3:06:20:cf:01:7d:57:b3:ff:2c:7d:97:03:71:f9:85:f8: e5:07:24:79:48:f0:cc:3c:e6:3b:e7:99:2a:75:0d:39:57:cc: a8:22:29:cf:1c:af:1c:aa:15:13:ae:d6:e6:f2:c8:85:98:7d: b7:10:e9:5c:d6:c6:25:7c:7a:76:95:11:50:98:e5:d9:ab:ba: 80:9b:2d:96:71:14:a9:8a:f5:3d:f4:93:64:c9:86:81:13:52: 99:3f:27:40:ef:14:cc:c7:e2:4c:27:c7:07:b7:17:fb:3d:ec: d1:db:67:0f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZFN0MzRDkxMzc3MkRD MTQ1M0IyMEE4MkZEMkE4RTlCQTAxOTc3RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLr/adrEg5Osn6t8jOXX3Vj2i+9pKMyzW0A7Dfat4UhREc+Gws 8sxyAJAB4bg5YS7Kba5fG04+FbQrObOto0k7y6h6m0ynuV5Qqe7bfK7/yJXHVvRM jpT2m/T8Xei7YKZbkqEWVZFJgGkmhNt3F3azaxlVz5WpsGi8UXS9A+AzRcz1XP+S 97+3FLqSi+5GuoJmj7haUOHs8CLI1YaXjpJRsoUtk16Qr53U1OcBWNX0D6CTXEJ2 yY/4e1yDMOtFgsGj/LbTgQHqWFwLs/5F2VY3Gtmz3CX0Hydd0uKLMeTIlrYRfZLs 5Cou1ikT8IazhJh1RIg8lwCn0V/NeU3Ises/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbnw9kTdy3BRTsgqC/SqOm6AZd+4wHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvYm53OWtUZHkzQlJU c2dxQ19TcU9tNkFaZC00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA2cn4DANBgkqhkiG9w0BAQsFAAOCAQEAJ+JVF4+/jNBa+8on9WoFgScLhnl9 38CxMimm26j1cvgZGboLMs0OhsmjhGeTtvsOOJGu/7/jI9xcwG1fkXcU25uQc2jp Om99p5aB8nAXA8Rjg9auQPAYqI7Aiabp2lp76yHb9pdb/jQfJX202M00J58J4zOs g68xsB2y/4C/UcZ1L9U1hNMBj+3BCHQc0ShHIfMGIM8BfVez/yx9lwNx+YX45Qck eUjwzDzmO+eZKnUNOVfMqCIpzxyvHKoVE67W5vLIhZh9txDpXNbGJXx6dpURUJjl 2au6gJstlnEUqYr1PfSTZMmGgRNSmT8nQO8UzMfiTCfHB7cX+z3s0dtnDw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:14:51 2025 by rpki-client