$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa File: bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa (raw, json) Hash identifier: GXxSuzFWnX9l4KG0PBTIq+NKZvnrfJQYZ9z0Hl0Rhc8= Subject key identifier: 6C:E3:13:1F:66:84:0C:D9:04:83:82:0E:23:55:F7:61:8F:3F:32:6A Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E Certificate serial: 12A1 Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa Signing time: Fri 17 Jan 2025 01:27:08 +0000 ROA not before: Fri 17 Jan 2025 01:27:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 131530 IP address blocks: 103.150.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4769 (0x12a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E Validity Not Before: Jan 17 01:27:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6CE3131F66840CD90483820E2355F7618F3F326A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:65:57:6c:ef:05:8f:95:36:a6:3b:8b:9b: 72:60:0f:c0:83:89:0c:f2:df:4f:db:07:91:cb:43: d3:9f:23:4c:7e:d8:ba:2d:04:12:c4:7b:df:d4:38: 35:20:d0:00:e6:3a:3d:91:fd:3d:0b:e1:55:18:40: bc:8c:ea:80:df:6f:55:79:4b:d0:eb:90:5c:7e:f8: ba:66:20:25:4f:62:b2:83:02:1a:0e:3b:48:e7:0b: 81:62:b3:20:87:de:e6:f1:42:a4:a9:d5:4e:ad:01: e2:99:23:61:da:0a:d4:c8:2e:ea:46:d1:76:d4:1a: fe:c2:72:ae:20:8b:96:3b:08:41:90:a2:73:b1:4c: 1f:59:2a:0c:47:34:d2:90:6f:93:f7:a9:9b:6a:ce: 02:25:7b:26:8b:61:45:a1:f2:33:9b:f7:30:7f:e9: 1a:71:2a:3b:d7:10:76:aa:86:ef:0a:f5:19:08:75: 00:17:39:07:5a:85:1c:ae:e8:69:21:c6:ae:98:2f: 50:29:a1:9c:89:57:61:05:36:29:3c:b2:a3:86:91: 0c:c4:13:5f:a9:e0:72:9c:07:c9:13:ae:5b:c0:16: 3e:0e:21:95:9f:2e:3a:67:25:e9:95:41:34:8b:92: 85:93:51:a5:1c:6e:7d:62:b3:12:dc:c9:73:ec:20: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E3:13:1F:66:84:0C:D9:04:83:82:0E:23:55:F7:61:8F:3F:32:6A X509v3 Authority Key Identifier: keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.150.130.0/23 Signature Algorithm: sha256WithRSAEncryption 45:88:fc:3a:03:c0:4b:0b:ae:06:bc:74:cd:83:8c:4f:85:51: 44:80:22:f0:5d:f2:8d:04:12:3a:73:51:ee:40:b1:72:9d:86: c5:f5:b4:62:0b:73:30:de:2e:fa:18:c4:9a:6e:59:4e:d4:87: c4:42:06:c7:ca:c5:eb:3b:b3:ee:e3:dc:e9:76:5c:de:2e:b8: 83:b7:af:98:3c:4c:61:82:3b:25:72:e1:e1:ba:85:1a:e3:58: 95:10:f6:da:3e:89:23:33:61:6d:06:17:65:75:7f:0b:b5:12: 97:69:d2:41:bb:bd:33:11:c3:c9:86:a5:7d:75:68:36:03:33: f1:6a:2b:f8:a2:9a:5b:c8:22:e4:df:83:47:6c:8f:89:87:aa: 11:1a:31:2a:00:3e:dc:71:dc:80:f6:3f:d7:ae:54:35:eb:21: 59:55:5d:a6:c0:52:dd:a3:fa:91:56:3f:cd:17:28:10:2a:e8: 49:f3:91:2c:36:81:4d:3d:14:dc:06:ff:4b:0b:c7:1c:7c:93: 80:6d:45:6e:25:60:04:ed:a2:f9:d9:2e:e3:cc:9e:53:46:c4: fc:7a:bb:33:6b:3b:40:4c:b8:5d:51:75:ff:d5:26:dd:39:a0: 72:50:13:6c:c1:74:06:9a:0e:5a:1d:cf:8a:19:7f:6e:0f:3c: dd:0f:49:a1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEFC NkY1Mjg4NjUyOTJFMTk4Rjk4QjY4QjcyRDk4RDEzMEFGNTMyRTAeFw0yNTAxMTcw MTI3MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZDRTMxMzFGNjY4NDBD RDkwNDgzODIwRTIzNTVGNzYxOEYzRjMyNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeSGVXbO8Fj5U2pjuLm3JgD8CDiQzy30/bB5HLQ9OfI0x+2Lot BBLEe9/UODUg0ADmOj2R/T0L4VUYQLyM6oDfb1V5S9DrkFx++LpmICVPYrKDAhoO O0jnC4FisyCH3ubxQqSp1U6tAeKZI2HaCtTILupG0XbUGv7Ccq4gi5Y7CEGQonOx TB9ZKgxHNNKQb5P3qZtqzgIleyaLYUWh8jOb9zB/6RpxKjvXEHaqhu8K9RkIdQAX OQdahRyu6Gkhxq6YL1ApoZyJV2EFNik8sqOGkQzEE1+p4HKcB8kTrlvAFj4OIZWf LjpnJemVQTSLkoWTUaUcbn1isxLcyXPsIFLlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbOMTH2aEDNkEg4IOI1X3YY8/MmowHwYDVR0jBBgwFoAUCrb1KIZSkuGY+Yto ty2Y0TCvUy4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk2 Ny9DcmIxS0laU2t1R1ktWXRvdHkyWTBUQ3ZVeTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0NyYjFLSVpTa3VHWS1ZdG90eTJZMFRDdlV5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5NjcvYk9NVEgyYUVETmtF ZzRJT0kxWDNZWThfTW1vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeWgjANBgkqhkiG9w0BAQsFAAOCAQEARYj8OgPASwuuBrx0zYOMT4VRRIAi 8F3yjQQSOnNR7kCxcp2GxfW0YgtzMN4u+hjEmm5ZTtSHxEIGx8rF6zuz7uPc6XZc 3i64g7evmDxMYYI7JXLh4bqFGuNYlRD22j6JIzNhbQYXZXV/C7USl2nSQbu9MxHD yYalfXVoNgMz8Wor+KKaW8gi5N+DR2yPiYeqERoxKgA+3HHcgPY/165UNeshWVVd psBS3aP6kVY/zRcoECroSfORLDaBTT0U3Ab/SwvHHHyTgG1FbiVgBO2i+dku48ye U0bE/Hq7M2s7QEy4XVF1/9Um3TmgclATbMF0BpoOWh3Pihl/bg883Q9JoQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:02 2025 by rpki-client