$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/TFHfVA751cHS7jHgiJVox534jDc.roa File: TFHfVA751cHS7jHgiJVox534jDc.roa (raw, json) Hash identifier: 6uhr4XPAMsXDZRhUd2yY0O3csi02n5IkElZ1806zd3s= Subject key identifier: 4C:51:DF:54:0E:F9:D5:C1:D2:EE:31:E0:88:95:68:C7:9D:F8:8C:37 Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0 Certificate serial: 1BCC Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/TFHfVA751cHS7jHgiJVox534jDc.roa Signing time: Fri 17 Jan 2025 01:26:36 +0000 ROA not before: Fri 17 Jan 2025 01:26:36 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 17621 IP address blocks: 103.140.14.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7116 (0x1bcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0 Validity Not Before: Jan 17 01:26:36 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4C51DF540EF9D5C1D2EE31E0889568C79DF88C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:70:e4:39:b3:9d:fe:d4:91:6c:72:30:65: 88:8d:dc:48:0d:22:47:ed:1c:7e:34:3e:a5:32:bf: 13:63:61:da:0c:dc:b1:f1:0e:d6:c6:90:31:55:1a: 84:26:d3:9f:ca:15:0c:0a:8f:a9:d3:8e:de:76:f3: 13:3a:b3:fb:f4:1f:be:94:c6:a6:e0:ac:80:81:55: 44:48:eb:ff:7e:1d:7b:78:a6:8d:bf:71:0c:bf:14: c8:83:53:f0:25:d9:c5:c6:44:0d:2c:c3:0c:7c:ca: 8d:06:85:54:0f:37:f8:c4:e2:8a:f1:d5:21:35:73: fc:07:c2:d5:80:92:f8:ad:03:88:6e:e2:30:ec:81: 4e:f4:19:0d:9d:5e:d2:fb:d0:d9:18:16:b1:0e:33: bc:fc:4a:5b:e2:af:22:bf:1a:05:69:39:e1:be:83: fe:9b:56:ae:58:cd:50:1e:e4:0a:d7:49:e9:1f:8c: 31:5f:0b:b4:8b:1a:b2:0c:86:c0:db:4c:83:20:73: e5:14:03:83:ef:53:5a:bd:90:15:3b:f9:91:7c:74: 34:3c:a7:8d:b3:cc:c0:21:f5:56:b5:74:98:41:bf: 91:2e:0f:d7:d2:b3:cd:26:17:fa:a8:0d:60:0f:50: 97:c4:27:67:f7:3d:e1:ac:c8:e1:f5:68:7f:95:71: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:51:DF:54:0E:F9:D5:C1:D2:EE:31:E0:88:95:68:C7:9D:F8:8C:37 X509v3 Authority Key Identifier: keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/TFHfVA751cHS7jHgiJVox534jDc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.140.14.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:bf:de:84:f1:d0:1a:db:60:a6:44:fb:5f:bc:67:21:de:17: 38:16:40:b9:21:bd:0d:d3:02:dc:45:3a:cd:54:1d:f0:56:dd: b8:d2:a5:dd:2a:2e:c8:66:84:ee:60:0c:c2:85:fe:12:61:bf: c2:c8:74:95:20:b5:b6:57:0f:66:22:cd:58:a7:ad:22:65:0f: 4d:ee:1e:33:26:d3:fd:ce:32:a9:83:9d:88:5c:28:c4:b2:73: 98:b7:1e:3c:a7:d8:65:e3:dc:ce:f2:13:d6:35:03:80:5c:4b: 48:c4:0d:37:3d:3b:b5:74:89:a7:00:bd:a6:ae:fe:6d:f8:26: 67:42:32:48:43:9b:66:c1:d4:c5:19:dc:4e:75:23:30:2e:31: dc:2f:4b:e8:7a:35:c8:7b:9d:ca:3b:ac:10:14:b9:fd:2f:7d: 25:18:26:f6:bb:49:86:0d:81:02:8e:82:1d:61:13:0a:4a:59: 04:32:48:ad:1a:c6:ff:59:5f:3e:01:9b:37:e0:c2:0c:21:7b: b8:5c:99:34:67:a5:b7:7e:d4:a5:6f:d6:ae:eb:da:09:69:df: fb:44:a7:15:4f:da:0e:30:a3:07:82:c9:81:e6:99:e8:6e:f4: 75:b5:26:a9:d7:8c:75:99:e5:dd:98:22:f6:4e:99:89:3f:52: c9:39:d3:6f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYz OUQ2QzIzODg5MzQ1MUEwNkVCMzRDNTJENzdBQkMxODkwNkJFMDAeFw0yNTAxMTcw MTI2MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDNTFERjU0MEVGOUQ1 QzFEMkVFMzFFMDg4OTU2OEM3OURGODhDMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWU3DkObOd/tSRbHIwZYiN3EgNIkftHH40PqUyvxNjYdoM3LHx DtbGkDFVGoQm05/KFQwKj6nTjt528xM6s/v0H76UxqbgrICBVURI6/9+HXt4po2/ cQy/FMiDU/Al2cXGRA0swwx8yo0GhVQPN/jE4orx1SE1c/wHwtWAkvitA4hu4jDs gU70GQ2dXtL70NkYFrEOM7z8SlviryK/GgVpOeG+g/6bVq5YzVAe5ArXSekfjDFf C7SLGrIMhsDbTIMgc+UUA4PvU1q9kBU7+ZF8dDQ8p42zzMAh9Va1dJhBv5EuD9fS s80mF/qoDWAPUJfEJ2f3PeGsyOH1aH+Vca+PAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUTFHfVA751cHS7jHgiJVox534jDcwHwYDVR0jBBgwFoAULznWwjiJNFGgbrNM Utd6vBiQa+AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 OC9Mem5Xd2ppSk5GR2dick5NVXRkNnZCaVFhLUEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0x6bld3amlKTkZHZ2JyTk1VdGQ2dkJpUWEtQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTgvVEZIZlZBNzUxY0hT N2pIZ2lKVm94NTM0akRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeMDjANBgkqhkiG9w0BAQsFAAOCAQEAi7/ehPHQGttgpkT7X7xnId4XOBZA uSG9DdMC3EU6zVQd8FbduNKl3SouyGaE7mAMwoX+EmG/wsh0lSC1tlcPZiLNWKet ImUPTe4eMybT/c4yqYOdiFwoxLJzmLcePKfYZePczvIT1jUDgFxLSMQNNz07tXSJ pwC9pq7+bfgmZ0IySEObZsHUxRncTnUjMC4x3C9L6Ho1yHudyjusEBS5/S99JRgm 9rtJhg2BAo6CHWETCkpZBDJIrRrG/1lfPgGbN+DCDCF7uFyZNGelt37UpW/Wruva CWnf+0SnFU/aDjCjB4LJgeaZ6G70dbUmqdeMdZnl3Zgi9k6ZiT9SyTnTbw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:08 2025 by rpki-client