$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/RIRwhNEKIqLAlpAEtzjyMaePl20.roa File: RIRwhNEKIqLAlpAEtzjyMaePl20.roa (raw, json) Hash identifier: /9SsPAW8RVDCERMMp3ifS5mRdN9+eOC7Gb2JjXze0WM= Subject key identifier: 44:84:70:84:D1:0A:22:A2:C0:96:90:04:B7:38:F2:31:A7:8F:97:6D Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E Certificate serial: 12A0 Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/RIRwhNEKIqLAlpAEtzjyMaePl20.roa Signing time: Fri 17 Jan 2025 01:27:07 +0000 ROA not before: Fri 17 Jan 2025 01:27:07 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 103.150.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4768 (0x12a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E Validity Not Before: Jan 17 01:27:07 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=44847084D10A22A2C0969004B738F231A78F976D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:a8:32:f4:34:c7:5e:d3:5b:bc:12:d3:d0: 49:5f:b3:92:04:ea:09:88:98:a5:dc:bd:f4:42:21: 77:b1:7e:a3:0c:b5:28:20:8f:c7:2b:dc:eb:8c:a4: 02:45:43:c8:b4:ba:19:8c:89:05:03:f4:58:41:be: 52:82:9c:8a:cf:51:b0:82:02:60:4c:b4:62:a4:1e: 64:58:41:47:45:33:20:3a:b1:23:34:82:11:df:ba: 0e:e1:03:85:dd:73:8e:8c:ef:7e:2c:7e:2c:99:8a: 9a:56:65:3d:4f:48:39:a6:61:d5:f2:5d:5d:2d:be: 96:77:35:6b:11:a2:d7:cf:79:f0:a5:5e:60:bd:ab: 65:38:de:e1:a3:08:5f:cf:34:75:13:97:2f:47:88: 93:d2:3e:ab:32:38:a6:8d:89:6a:c5:81:0b:4e:47: 87:4c:e9:69:8d:f2:30:37:56:be:43:55:61:99:4a: c7:11:17:90:1e:32:8d:8f:85:63:e6:7d:68:b7:04: 81:e4:3b:53:76:97:94:33:55:24:48:d4:6a:76:63: d5:1d:cf:4e:98:fb:5c:ee:aa:65:6d:16:cd:0b:60: d9:5f:91:60:62:45:6b:6a:73:71:1d:94:d8:4b:d0: cf:7c:6c:cf:f3:be:7d:01:91:a3:33:f9:97:df:b8: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:84:70:84:D1:0A:22:A2:C0:96:90:04:B7:38:F2:31:A7:8F:97:6D X509v3 Authority Key Identifier: keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/RIRwhNEKIqLAlpAEtzjyMaePl20.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.150.130.0/23 Signature Algorithm: sha256WithRSAEncryption 00:f1:47:26:6c:23:d7:43:b3:22:92:cf:ba:8f:e1:07:b0:30: 81:7a:83:02:38:fa:56:a3:e2:d5:c7:43:43:97:ae:24:56:c7: 60:5a:c8:f0:62:3c:69:03:2f:ba:39:fd:6b:bf:76:92:34:0b: 46:d6:e5:07:0c:71:b2:1f:3d:4c:92:e3:c6:3e:82:2a:a3:36: fa:8e:e9:de:07:43:98:75:e8:a1:ff:57:9e:cc:f0:d2:81:b0: 39:23:9c:20:81:2f:68:c8:1b:49:10:26:c0:02:f4:d8:21:21: ba:36:a0:4b:16:e3:eb:1c:40:6e:61:bf:93:0b:36:7f:b2:12: b3:cd:41:40:61:6d:93:8d:e1:1e:79:cc:7f:55:69:92:e3:2f: dc:c7:91:95:e9:34:c9:19:ee:ee:2d:b8:9b:0a:7a:a6:0e:d2: f4:31:ca:0b:35:3b:e0:4f:cf:40:42:e7:b3:1d:bf:19:8a:95: e3:8d:0d:b5:c4:fd:af:0d:6f:5a:aa:3c:7e:6b:db:c7:16:e6: 22:d1:a0:90:bb:98:9e:47:02:fc:f2:d4:cb:5d:2d:c4:fd:7d: 68:7e:63:cf:2f:e1:fa:0d:77:55:9f:b0:14:64:09:a8:4e:53: 46:1c:cf:22:3d:67:37:94:57:30:54:d7:a0:b7:09:da:8c:0e: 4e:01:f7:c0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEFC NkY1Mjg4NjUyOTJFMTk4Rjk4QjY4QjcyRDk4RDEzMEFGNTMyRTAeFw0yNTAxMTcw MTI3MDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ0ODQ3MDg0RDEwQTIy QTJDMDk2OTAwNEI3MzhGMjMxQTc4Rjk3NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHRqgy9DTHXtNbvBLT0Elfs5IE6gmImKXcvfRCIXexfqMMtSgg j8cr3OuMpAJFQ8i0uhmMiQUD9FhBvlKCnIrPUbCCAmBMtGKkHmRYQUdFMyA6sSM0 ghHfug7hA4Xdc46M734sfiyZippWZT1PSDmmYdXyXV0tvpZ3NWsRotfPefClXmC9 q2U43uGjCF/PNHUTly9HiJPSPqsyOKaNiWrFgQtOR4dM6WmN8jA3Vr5DVWGZSscR F5AeMo2PhWPmfWi3BIHkO1N2l5QzVSRI1Gp2Y9Udz06Y+1zuqmVtFs0LYNlfkWBi RWtqc3EdlNhL0M98bM/zvn0BkaMz+ZffuOalAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQURIRwhNEKIqLAlpAEtzjyMaePl20wHwYDVR0jBBgwFoAUCrb1KIZSkuGY+Yto ty2Y0TCvUy4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk2 Ny9DcmIxS0laU2t1R1ktWXRvdHkyWTBUQ3ZVeTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0NyYjFLSVpTa3VHWS1ZdG90eTJZMFRDdlV5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5NjcvUklSd2hORUtJcUxB bHBBRXR6anlNYWVQbDIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeWgjANBgkqhkiG9w0BAQsFAAOCAQEAAPFHJmwj10OzIpLPuo/hB7AwgXqD Ajj6VqPi1cdDQ5euJFbHYFrI8GI8aQMvujn9a792kjQLRtblBwxxsh89TJLjxj6C KqM2+o7p3gdDmHXoof9Xnszw0oGwOSOcIIEvaMgbSRAmwAL02CEhujagSxbj6xxA bmG/kws2f7ISs81BQGFtk43hHnnMf1VpkuMv3MeRlek0yRnu7i24mwp6pg7S9DHK CzU74E/PQELnsx2/GYqV440NtcT9rw1vWqo8fmvbxxbmItGgkLuYnkcC/PLUy10t xP19aH5jzy/h+g13VZ+wFGQJqE5TRhzPIj1nN5RXMFTXoLcJ2owOTgH3wA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:36:41 2025 by rpki-client