$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/GRQWmU7kj2MtZz8P0rhABLNxJmo.roa File: GRQWmU7kj2MtZz8P0rhABLNxJmo.roa (raw, json) Hash identifier: xODLseQ5OuG7zJVn2IeWVbKpN/ynDTW7X462XK2DiW0= Subject key identifier: 19:14:16:99:4E:E4:8F:63:2D:67:3F:0F:D2:B8:40:04:B3:71:26:6A Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 1BCB Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GRQWmU7kj2MtZz8P0rhABLNxJmo.roa Signing time: Fri 17 Jan 2025 01:27:35 +0000 ROA not before: Fri 17 Jan 2025 01:27:35 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139021 IP address blocks: 43.250.116.0/22 maxlen: 24 103.108.192.0/22 maxlen: 24 103.235.184.0/22 maxlen: 24 150.242.224.0/22 maxlen: 24 219.234.0.0/21 maxlen: 24 219.234.8.0/21 maxlen: 24 219.234.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7115 (0x1bcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 17 01:27:35 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=191416994EE48F632D673F0FD2B84004B371266A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:07:11:f0:49:44:fe:8f:1b:5c:a9:95:00: 8b:44:c5:ea:79:8d:3b:9a:21:9b:cc:84:17:03:c4: e1:f9:b4:38:92:2e:27:38:81:ab:20:26:89:03:10: ad:3f:ec:45:ad:55:89:9f:af:cd:7c:36:38:d4:d2: cf:30:74:d0:6b:87:d6:ae:b6:74:0b:4b:d3:f5:0b: bc:7b:ce:13:64:c5:fa:f6:cb:1c:86:05:23:3d:0b: 2b:65:5b:42:cb:96:56:53:fb:6c:de:cb:95:75:4a: 44:59:9a:2c:a5:fe:fc:08:2a:d6:0a:0c:b6:90:04: 93:a5:54:bf:e3:cb:4a:43:0c:bc:cc:be:e2:67:56: c0:4e:af:dd:04:28:0b:7c:96:3c:90:83:28:45:e1: bf:33:a3:81:cf:91:57:08:a8:90:59:2c:b6:d6:3a: 9f:8f:e3:77:ab:00:d8:3d:ac:bb:0e:fc:7f:2a:20: 78:ff:1f:56:f0:fb:9d:15:66:d7:60:2a:80:6a:93: 5e:e8:c2:32:02:ec:51:66:38:ed:80:6a:7f:fe:eb: 09:62:66:c1:a3:e4:29:f8:58:25:2e:ef:e1:30:a1: de:66:b9:fd:b9:46:62:ad:55:34:ab:3e:2d:72:8d: 74:7f:e1:c7:18:27:23:68:a2:20:f3:94:0f:06:b4: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:14:16:99:4E:E4:8F:63:2D:67:3F:0F:D2:B8:40:04:B3:71:26:6A X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GRQWmU7kj2MtZz8P0rhABLNxJmo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.116.0/22 103.108.192.0/22 103.235.184.0/22 150.242.224.0/22 219.234.0.0/19 Signature Algorithm: sha256WithRSAEncryption 6b:21:74:23:06:39:5a:b9:6a:50:5f:98:b1:7d:ac:bf:46:5b: 9d:c4:92:b5:05:82:b4:5b:7d:ee:84:a8:46:af:1e:38:26:8d: 4f:6c:f3:36:52:a8:22:c4:2f:6c:59:64:1d:36:ab:60:89:27: af:2a:c0:95:c5:ba:cc:a7:f1:a2:7f:de:2a:ec:76:51:90:20: 3e:d0:ab:bc:8f:6e:73:e5:aa:b4:42:7a:88:e6:ad:ac:0b:88: d5:0a:f1:d7:c6:3a:71:e3:2b:b3:91:00:5f:18:98:bc:5b:83: 5f:f2:89:e5:01:cf:1f:64:db:4e:8e:eb:b6:0a:3a:05:db:52: 7f:d9:2e:3d:06:2a:a8:01:ac:2f:42:29:3d:87:5c:f2:c9:ab: 7d:81:06:ff:2b:a1:d2:69:80:6c:6d:85:e2:8c:c5:15:a2:fa: ac:5b:1b:45:31:bb:22:9d:18:4f:b9:67:64:c0:2b:88:44:12: cf:0a:76:02:4f:60:d2:ec:b9:24:09:c3:98:61:6b:e2:73:3b: 2e:70:91:73:64:d6:d5:e3:ef:7b:71:2e:de:01:5a:8f:f8:5f: 83:68:d5:df:eb:8c:ab:39:bb:44:7a:02:ff:89:b4:de:11:b9: a6:23:78:08:c4:32:ea:8b:ba:69:fe:75:9d:dd:bf:b1:57:5b: ab:86:8c:3b -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICG8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNTAxMTcw MTI3MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE5MTQxNjk5NEVFNDhG NjMyRDY3M0YwRkQyQjg0MDA0QjM3MTI2NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq7gcR8ElE/o8bXKmVAItExep5jTuaIZvMhBcDxOH5tDiSLic4 gasgJokDEK0/7EWtVYmfr818NjjU0s8wdNBrh9autnQLS9P1C7x7zhNkxfr2yxyG BSM9CytlW0LLllZT+2zey5V1SkRZmiyl/vwIKtYKDLaQBJOlVL/jy0pDDLzMvuJn VsBOr90EKAt8ljyQgyhF4b8zo4HPkVcIqJBZLLbWOp+P43erANg9rLsO/H8qIHj/ H1bw+50VZtdgKoBqk17owjIC7FFmOO2Aan/+6wliZsGj5Cn4WCUu7+Ewod5muf25 RmKtVTSrPi1yjXR/4ccYJyNooiDzlA8GtMvrAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUGRQWmU7kj2MtZz8P0rhABLNxJmowHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvR1JRV21VN2tqMk10 Wno4UDByaEFCTE54Sm1vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEw HgMEAiv6dAMEAmdswAMEAmfruAMEApby4AMEBdvqADANBgkqhkiG9w0BAQsFAAOC AQEAayF0IwY5WrlqUF+YsX2sv0ZbncSStQWCtFt97oSoRq8eOCaNT2zzNlKoIsQv bFlkHTarYIknryrAlcW6zKfxon/eKux2UZAgPtCrvI9uc+WqtEJ6iOatrAuI1Qrx 18Y6ceMrs5EAXxiYvFuDX/KJ5QHPH2TbTo7rtgo6BdtSf9kuPQYqqAGsL0IpPYdc 8smrfYEG/yuh0mmAbG2F4ozFFaL6rFsbRTG7Ip0YT7lnZMAriEQSzwp2Ak9g0uy5 JAnDmGFr4nM7LnCRc2TW1ePve3Eu3gFaj/hfg2jV3+uMqzm7RHoC/4m03hG5piN4 CMQy6ou6af51nd2/sVdbq4aMOw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:23 2025 by rpki-client