$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/jZYYEWocgaa7kE62wHrtcbhmeqg.roa File: jZYYEWocgaa7kE62wHrtcbhmeqg.roa (raw, json) Hash identifier: imxvfDsgpwHiKGk2ShLZNPp9PfRPBN6EzLl65EE3xwI= Subject key identifier: 8D:96:18:11:6A:1C:81:A6:BB:90:4E:B6:C0:7A:ED:71:B8:66:7A:A8 Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Certificate serial: 0DB6 Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/jZYYEWocgaa7kE62wHrtcbhmeqg.roa Signing time: Fri 21 Mar 2025 03:27:39 +0000 ROA not before: Fri 21 Mar 2025 03:27:39 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 21859 IP address blocks: 103.116.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F Validity Not Before: Mar 21 03:27:39 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8D9618116A1C81A6BB904EB6C07AED71B8667AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:bc:22:92:cb:bb:61:76:7d:cf:4c:47:19: f1:3e:fa:74:b7:69:4a:a9:5f:38:25:61:fa:c2:a8: af:a7:52:8f:bb:f4:f2:6b:5e:9b:f8:ff:26:45:65: 7b:1f:73:5a:89:ae:82:64:22:2d:c2:9b:2a:64:4d: 6c:95:8b:5c:c2:10:b0:2a:ee:b2:8f:8b:ca:2e:f8: 02:17:fb:23:b0:47:61:60:1c:13:b7:ca:74:6c:35: 76:de:55:4b:0c:dd:8e:01:c9:2a:dc:b8:47:3b:62: f1:15:37:1f:19:4b:94:f8:a3:b9:7b:30:76:27:1b: 74:a1:4e:b6:df:37:99:c1:79:a7:c2:8f:9f:92:3f: 7e:51:b2:ac:59:8b:7f:68:e6:f3:67:0f:3c:80:de: c4:c0:12:22:c2:07:be:d4:a7:f6:cb:ee:87:40:d8: a1:93:6a:8b:ab:be:fb:c4:48:09:1c:33:85:c2:44: 17:a7:44:9a:76:39:1d:09:0b:e1:aa:2d:a8:84:eb: 07:49:e3:a9:09:f4:08:6f:1e:01:18:07:ec:7e:fb: cd:05:cb:2d:b4:e2:74:b4:b4:e9:ad:28:21:e6:6c: 84:2b:e2:ef:40:c9:af:d8:3d:53:64:ae:0c:80:7a: 9d:22:ad:a2:83:52:c7:b0:47:9a:9c:4d:1e:95:ad: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:18:11:6A:1C:81:A6:BB:90:4E:B6:C0:7A:ED:71:B8:66:7A:A8 X509v3 Authority Key Identifier: keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/jZYYEWocgaa7kE62wHrtcbhmeqg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.148.0/24 Signature Algorithm: sha256WithRSAEncryption 96:f4:ec:67:82:84:af:9d:9d:57:bf:41:8a:f2:ab:d5:0f:e2: 55:c9:60:68:e5:d3:74:1f:75:ad:62:23:fa:ad:07:cf:9a:a5: a3:b6:aa:e3:a3:de:a0:81:df:24:25:4c:40:86:05:42:bf:e4: ea:39:14:e3:e3:a2:00:45:99:c2:68:00:fc:4a:1e:3b:ac:d0: 75:56:01:7d:95:34:3c:34:79:32:9c:23:2f:e4:71:5d:26:d1: 33:af:e9:a3:31:58:63:70:72:39:6e:83:0c:7d:73:d4:1b:6b: d9:d3:b7:8f:38:6a:4e:38:da:10:df:1b:74:ac:04:e2:fb:a4: 87:91:ae:0c:aa:17:a7:40:18:b2:5f:04:74:ab:de:44:74:64: d4:53:9f:14:59:03:9a:08:1d:d4:c6:3d:7f:14:8a:cf:26:59: 57:22:6b:75:82:49:6a:14:5a:ea:7a:7f:81:94:b7:ab:65:1d: 20:ab:fc:33:ce:64:2c:84:d1:0f:a6:0d:12:0f:79:dd:92:c1: d1:a9:e7:13:b2:b4:9f:50:a7:7f:c7:73:05:ce:ff:68:7f:0b: 90:2e:1d:49:d4:f8:db:4d:ca:43:44:7f:5a:37:48:e6:d8:cf: 06:86:c9:9b:0f:d2:1a:de:a7:6a:2c:82:e6:24:5b:8c:8d:cc: ac:cf:67:77 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkFE NkI0M0MwOUQwNDkwQTBERjdGODkxREY5RjYzQjUyMENGMjEwRjAeFw0yNTAzMjEw MzI3MzlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhEOTYxODExNkExQzgx QTZCQjkwNEVCNkMwN0FFRDcxQjg2NjdBQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLO7wiksu7YXZ9z0xHGfE++nS3aUqpXzglYfrCqK+nUo+79PJr Xpv4/yZFZXsfc1qJroJkIi3CmypkTWyVi1zCELAq7rKPi8ou+AIX+yOwR2FgHBO3 ynRsNXbeVUsM3Y4BySrcuEc7YvEVNx8ZS5T4o7l7MHYnG3ShTrbfN5nBeafCj5+S P35RsqxZi39o5vNnDzyA3sTAEiLCB77Up/bL7odA2KGTaourvvvESAkcM4XCRBen RJp2OR0JC+GqLaiE6wdJ46kJ9AhvHgEYB+x++80Fyy204nS0tOmtKCHmbIQr4u9A ya/YPVNkrgyAep0iraKDUsewR5qcTR6Vrdu1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUjZYYEWocgaa7kE62wHrtcbhmeqgwHwYDVR0jBBgwFoAU+ta0PAnQSQoN9/iR 359jtSDPIQ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 MS8tdGEwUEFuUVNRb045X2lSMzU5anRTRFBJUTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy10YTBQQW5RU1FvTjlfaVIzNTlqdFNEUElROC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDEvalpZWUVXb2NnYWE3 a0U2MndIcnRjYmhtZXFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGd0lDANBgkqhkiG9w0BAQsFAAOCAQEAlvTsZ4KEr52dV79BivKr1Q/iVclg aOXTdB91rWIj+q0Hz5qlo7aq46PeoIHfJCVMQIYFQr/k6jkU4+OiAEWZwmgA/Eoe O6zQdVYBfZU0PDR5MpwjL+RxXSbRM6/pozFYY3ByOW6DDH1z1Btr2dO3jzhqTjja EN8bdKwE4vukh5GuDKoXp0AYsl8EdKveRHRk1FOfFFkDmggd1MY9fxSKzyZZVyJr dYJJahRa6np/gZS3q2UdIKv8M85kLITRD6YNEg953ZLB0annE7K0n1Cnf8dzBc7/ aH8LkC4dSdT4203KQ0R/WjdI5tjPBobJmw/SGt6naiyC5iRbjI3MrM9ndw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:41:25 2025 by rpki-client