$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa File: SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa (raw, json) Hash identifier: Lssgwg/LDS2Gc0apDKaxQyM7zkkn1Wrj9+vmCV3/eVQ= Subject key identifier: 49:F8:51:85:4C:31:45:06:21:B0:B3:A9:88:02:B2:4B:6A:BD:86:C6 Certificate issuer: /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177 Certificate serial: 1BD2 Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa Signing time: Fri 17 Jan 2025 01:27:31 +0000 ROA not before: Fri 17 Jan 2025 01:27:31 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 131530 IP address blocks: 103.98.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7122 (0x1bd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177 Validity Not Before: Jan 17 01:27:31 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=49F851854C31450621B0B3A98802B24B6ABD86C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:eb:12:7c:e3:76:ab:f0:98:e6:c6:62:d1: 09:8c:07:69:59:76:e0:c7:3d:bc:c3:bf:64:a2:e7: 02:ce:cf:be:48:83:80:22:8b:d1:01:8e:12:a1:9f: 00:41:28:34:4e:a4:b0:73:e0:e0:3e:8a:63:4b:af: 9c:36:c0:5f:fd:b9:06:a4:4c:9d:1f:bf:32:8f:5a: 50:98:c1:fd:88:6e:1b:01:17:0e:fe:21:02:13:ae: 45:fb:a2:de:a7:fb:79:0a:d1:f0:9f:f5:2a:25:c0: 62:2d:5f:3e:60:55:44:49:cc:8b:60:38:cd:54:1e: 33:25:13:25:2a:02:fc:2f:83:33:1d:b5:6a:6e:34: ce:f7:66:a6:82:7b:b8:96:62:34:19:8b:a5:86:54: 8a:a6:73:2d:86:d3:68:30:d4:c9:d0:94:b9:5d:18: 07:c0:9c:aa:69:34:50:84:a8:26:93:76:f2:98:bc: 2e:28:e6:ca:78:3a:00:5f:6c:1d:67:7f:ed:c7:2c: 0c:81:32:39:67:df:cc:cd:84:a2:38:8e:b0:e0:b2: 81:37:be:3c:a0:a9:4c:d1:7a:f4:bb:d7:66:3f:74: c2:9c:6d:fc:20:74:0c:f8:2e:68:94:f1:0b:c9:6f: 02:dc:a9:28:26:36:b6:e9:0c:36:37:6f:44:f5:f4: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F8:51:85:4C:31:45:06:21:B0:B3:A9:88:02:B2:4B:6A:BD:86:C6 X509v3 Authority Key Identifier: keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.98.164.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:28:c1:84:40:d9:1c:8e:29:a0:3b:5f:60:42:a1:7b:31:ea: d1:12:76:a1:03:c1:2d:b3:40:3c:f2:c2:d9:b7:eb:7f:9f:2e: 26:2d:c7:76:a3:8d:1b:03:5a:de:06:0b:43:cd:ac:b6:16:83: 68:03:21:d5:98:15:ca:90:18:1c:d8:c2:4f:21:87:20:9a:10: 6d:63:c4:05:9c:98:27:b7:48:78:c4:4a:86:79:50:4d:42:c8: 6a:9f:58:44:72:75:26:37:e4:cd:1d:a5:3f:bb:55:65:f3:56: a4:d5:4d:44:9f:4c:25:65:19:f1:8b:3e:bb:51:fa:03:f6:ca: a7:a6:2a:87:62:60:ef:dd:7c:70:bb:41:18:fa:7d:80:a5:ab: c5:2a:ee:a5:b2:f2:5c:e7:77:f1:c1:6b:35:89:de:b1:1b:c4: 00:f4:80:c8:10:35:d0:fd:51:a5:6c:31:ab:91:d3:03:91:5e: 72:af:1d:2d:21:ab:ee:c6:3f:fa:45:24:14:75:2f:bc:ef:f1: 23:ca:e0:63:d1:ec:99:33:b6:34:4a:a1:c2:6d:fd:7a:8b:7b: b9:58:69:1d:b6:e0:b4:83:1c:19:2d:9d:37:ff:57:ab:7a:48: 8e:87:e4:b1:be:bf:b7:3d:39:02:31:3b:b0:88:f0:84:29:01: f9:e2:a5:b1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEy MUExMUFBQzRFQUUwQTYzMDY1OUIzMUEyMzBCMDhENkI1ODE3NzAeFw0yNTAxMTcw MTI3MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ5Rjg1MTg1NEMzMTQ1 MDYyMUIwQjNBOTg4MDJCMjRCNkFCRDg2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXousSfON2q/CY5sZi0QmMB2lZduDHPbzDv2Si5wLOz75Ig4Ai i9EBjhKhnwBBKDROpLBz4OA+imNLr5w2wF/9uQakTJ0fvzKPWlCYwf2IbhsBFw7+ IQITrkX7ot6n+3kK0fCf9SolwGItXz5gVURJzItgOM1UHjMlEyUqAvwvgzMdtWpu NM73ZqaCe7iWYjQZi6WGVIqmcy2G02gw1MnQlLldGAfAnKppNFCEqCaTdvKYvC4o 5sp4OgBfbB1nf+3HLAyBMjln38zNhKI4jrDgsoE3vjygqUzRevS712Y/dMKcbfwg dAz4LmiU8QvJbwLcqSgmNrbpDDY3b0T19DPrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUSfhRhUwxRQYhsLOpiAKyS2q9hsYwHwYDVR0jBBgwFoAUaiGhGqxOrgpjBlmz GiMLCNa1gXcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2 NC9haUdoR3F4T3JncGpCbG16R2lNTENOYTFnWGMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2FpR2hHcXhPcmdwakJsbXpHaU1MQ05hMWdYYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NjQvU2ZoUmhVd3hSUVlo c0xPcGlBS3lTMnE5aHNZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdipDANBgkqhkiG9w0BAQsFAAOCAQEAiijBhEDZHI4poDtfYEKhezHq0RJ2 oQPBLbNAPPLC2bfrf58uJi3HdqONGwNa3gYLQ82sthaDaAMh1ZgVypAYHNjCTyGH IJoQbWPEBZyYJ7dIeMRKhnlQTULIap9YRHJ1JjfkzR2lP7tVZfNWpNVNRJ9MJWUZ 8Ys+u1H6A/bKp6Yqh2Jg7918cLtBGPp9gKWrxSrupbLyXOd38cFrNYnesRvEAPSA yBA10P1RpWwxq5HTA5Fecq8dLSGr7sY/+kUkFHUvvO/xI8rgY9HsmTO2NEqhwm39 eot7uVhpHbbgtIMcGS2dN/9Xq3pIjofksb6/tz05AjE7sIjwhCkB+eKlsQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:46 2025 by rpki-client