$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/krfPRDv5zvWiFPpV7weQFS6h0CE.roa File: krfPRDv5zvWiFPpV7weQFS6h0CE.roa (raw, json) Hash identifier: WxYdudw0s2KRXFRCIr7gzkMY53glRPq6Szdw3Ohh65I= Subject key identifier: 92:B7:CF:44:3B:F9:CE:F5:A2:14:FA:55:EF:07:90:15:2E:A1:D0:21 Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4C2A Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/krfPRDv5zvWiFPpV7weQFS6h0CE.roa Signing time: Tue 25 Mar 2025 06:07:55 +0000 ROA not before: Tue 25 Mar 2025 06:07:55 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63603 IP address blocks: 103.102.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19498 (0x4c2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Mar 25 06:07:55 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=92B7CF443BF9CEF5A214FA55EF0790152EA1D021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:91:45:2c:07:24:b4:af:c4:37:8e:f4:29: b2:2a:91:c1:11:48:02:18:ab:4b:b6:12:66:ca:ac: a0:18:7c:20:75:0f:84:8d:17:c8:3f:31:63:dd:bf: ae:37:36:39:97:fe:ed:ef:e8:38:28:49:71:ce:d8: 3b:8b:f4:06:47:31:50:2e:c8:1b:6c:8b:a9:29:6d: 9a:71:3b:b2:d3:26:fa:74:73:56:9a:b7:2e:80:8e: 60:af:b8:50:48:1a:2b:7d:cc:7d:b8:54:99:b7:f0: 75:27:80:21:88:38:33:39:0b:28:02:00:7f:77:9c: 26:df:4c:55:11:63:36:3f:9a:a9:6e:ce:b3:ee:5f: 3b:6d:9a:e5:b5:e6:a8:fc:ea:b3:d6:fa:e3:d9:ef: e8:0a:b3:91:45:24:6f:fb:ac:86:55:6e:cd:8b:4b: f9:34:97:49:87:a4:01:4d:e8:fd:bc:fe:f0:ad:75: db:68:3c:5b:a2:26:a4:ef:fa:d9:e1:1e:8c:93:de: 3c:a9:1b:3a:94:4b:34:66:73:03:af:b1:b8:68:55: 07:ed:5c:07:af:ae:af:a0:36:df:65:a4:d4:f6:ce: 4d:0e:a8:8e:91:fb:e5:3a:84:68:4d:42:b0:26:d2: a9:8f:e0:d2:13:6a:f4:cb:cf:d0:1a:a8:13:21:cc: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B7:CF:44:3B:F9:CE:F5:A2:14:FA:55:EF:07:90:15:2E:A1:D0:21 X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/krfPRDv5zvWiFPpV7weQFS6h0CE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.102.197.0/24 Signature Algorithm: sha256WithRSAEncryption 82:42:df:f9:58:5f:9a:57:ad:ed:69:7c:b0:c1:04:a1:23:b7: 60:1c:f6:a1:59:1e:ae:a7:88:78:24:5a:86:a8:b5:5d:66:58: 13:25:0e:2f:52:9b:0c:13:00:ac:75:4c:0c:4b:30:02:ec:ba: 8d:e1:0e:90:08:08:9a:b9:16:51:af:02:f2:ac:35:8e:b5:9a: 5a:9d:79:b4:58:b3:16:f7:40:0d:e3:13:f1:21:8e:02:84:fb: d5:7d:a6:91:9e:75:45:49:ea:18:bc:5c:85:b8:ad:f3:ec:be: 58:e9:ae:29:26:e5:b7:88:6c:78:98:5d:9c:73:09:9d:b2:a3: a3:64:bf:ed:c0:28:8f:5c:0b:a5:8b:0a:07:45:c2:3c:ed:1b: 25:42:45:40:1b:12:e7:23:60:47:9f:24:d7:9a:58:8d:68:3d: 03:75:4f:b9:93:b7:a3:6a:b7:a0:62:67:bb:7d:63:cf:79:24: f0:a5:f0:23:9e:62:e9:47:92:94:94:97:50:91:2b:dc:49:8c: 92:4a:3a:d6:43:9b:bb:35:b1:d8:51:db:58:bf:d8:35:05:de: bd:72:42:60:ad:4e:e6:90:11:19:6d:df:33:2e:02:38:c2:23: c4:ee:fd:7a:e1:28:17:8f:1d:7d:07:83:fd:b4:a7:aa:41:be: a2:eb:7c:28 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICTCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw NjA3NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkyQjdDRjQ0M0JGOUNF RjVBMjE0RkE1NUVGMDc5MDE1MkVBMUQwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHF5FFLAcktK/EN470KbIqkcERSAIYq0u2EmbKrKAYfCB1D4SN F8g/MWPdv643NjmX/u3v6DgoSXHO2DuL9AZHMVAuyBtsi6kpbZpxO7LTJvp0c1aa ty6AjmCvuFBIGit9zH24VJm38HUngCGIODM5CygCAH93nCbfTFURYzY/mqluzrPu XzttmuW15qj86rPW+uPZ7+gKs5FFJG/7rIZVbs2LS/k0l0mHpAFN6P28/vCtddto PFuiJqTv+tnhHoyT3jypGzqUSzRmcwOvsbhoVQftXAevrq+gNt9lpNT2zk0OqI6R ++U6hGhNQrAm0qmP4NITavTLz9AaqBMhzJqTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkrfPRDv5zvWiFPpV7weQFS6h0CEwHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgva3JmUFJEdjV6dldp RlBwVjd3ZVFGUzZoMENFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdmxTANBgkqhkiG9w0BAQsFAAOCAQEAgkLf+Vhfmlet7Wl8sMEEoSO3YBz2 oVkerqeIeCRahqi1XWZYEyUOL1KbDBMArHVMDEswAuy6jeEOkAgImrkWUa8C8qw1 jrWaWp15tFizFvdADeMT8SGOAoT71X2mkZ51RUnqGLxchbit8+y+WOmuKSblt4hs eJhdnHMJnbKjo2S/7cAoj1wLpYsKB0XCPO0bJUJFQBsS5yNgR58k15pYjWg9A3VP uZO3o2q3oGJnu31jz3kk8KXwI55i6UeSlJSXUJEr3EmMkko61kObuzWx2FHbWL/Y NQXevXJCYK1O5pARGW3fMy4COMIjxO79euEoF48dfQeD/bSnqkG+out8KA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:22 2025 by rpki-client