$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3072/iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa File: iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa (raw, json) Hash identifier: VFlZwps23vOfszl/xI666p5cIFMApotbCUDEqAgSDdk= Subject key identifier: 8B:2C:C6:AE:EE:63:D1:2F:83:3E:85:06:2A:6E:30:B1:92:9E:F3:F6 Certificate issuer: /CN=C2BFB235F570652A8BCB0416F6FCC4443F658CA1 Certificate serial: 1BD6 Authority key identifier: C2:BF:B2:35:F5:70:65:2A:8B:CB:04:16:F6:FC:C4:44:3F:65:8C:A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa Signing time: Fri 20 Dec 2024 01:55:06 +0000 ROA not before: Fri 20 Dec 2024 01:55:06 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4837 IP address blocks: 103.163.180.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/wr-yNfVwZSqLywQW9vzERD9ljKE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/wr-yNfVwZSqLywQW9vzERD9ljKE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7126 (0x1bd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2BFB235F570652A8BCB0416F6FCC4443F658CA1 Validity Not Before: Dec 20 01:55:06 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8B2CC6AEEE63D12F833E85062A6E30B1929EF3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:f5:82:47:3b:65:4f:56:44:cb:93:8a:35: f9:6b:4e:88:85:51:ab:1a:04:2d:70:61:0e:fc:0b: 8b:f3:84:89:d0:de:5a:f5:2c:5b:f4:ed:96:24:61: e4:37:29:b8:91:fd:29:f8:64:ed:6c:57:c3:15:b8: cf:1b:7d:f8:a9:b1:28:52:6a:9b:71:3e:63:96:3d: e0:03:6f:d8:a6:15:cf:13:97:09:1e:f8:b2:e1:35: e2:48:55:29:40:b1:2a:b7:5b:27:70:61:19:b5:3f: 39:fe:94:2f:6e:07:91:a8:fb:88:f3:d0:f9:61:49: 1e:21:39:5a:a6:7d:6a:a6:cd:91:71:f3:f5:1e:61: 15:85:4b:f7:d8:75:2e:74:c2:fc:1d:bc:33:cd:79: fb:00:06:2c:dd:6f:fd:3e:7f:b0:bc:51:a7:08:65: dc:b3:18:0d:7f:53:13:4a:e3:7c:58:32:64:66:5a: 03:1a:15:38:41:43:74:ac:4c:9d:b2:c1:59:88:61: 60:74:f6:35:42:9c:94:13:20:9c:8d:9b:4a:9b:82: 4b:b4:36:95:87:88:33:76:e7:c8:5c:53:fe:ee:66: 2c:c0:48:67:c0:5e:ab:3d:ac:70:79:fd:fd:0f:4c: 21:ac:33:ad:a8:57:db:fc:ed:dd:18:ac:cb:23:00: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2C:C6:AE:EE:63:D1:2F:83:3E:85:06:2A:6E:30:B1:92:9E:F3:F6 X509v3 Authority Key Identifier: keyid:C2:BF:B2:35:F5:70:65:2A:8B:CB:04:16:F6:FC:C4:44:3F:65:8C:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/wr-yNfVwZSqLywQW9vzERD9ljKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wr-yNfVwZSqLywQW9vzERD9ljKE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3072/iyzGru5j0S-DPoUGKm4wsZKe8_Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.163.180.0/24 Signature Algorithm: sha256WithRSAEncryption 69:90:a0:6b:84:64:14:a7:70:39:8a:25:1f:a5:77:83:58:84: bf:8a:cb:9f:7a:dd:0a:ba:41:cf:3e:4e:5f:e2:3b:c8:94:fe: 8a:b5:33:af:ad:e0:cf:78:86:5a:02:c1:7e:ca:03:6f:af:a1: ca:6e:ca:3f:8a:da:15:d9:06:d5:f7:42:c3:f2:0e:79:b1:a8: 51:96:b2:c3:ef:14:a2:19:91:ce:ec:a7:02:42:80:d7:5c:3c: 3d:e0:3c:e8:5e:66:9d:4c:f3:b0:53:1d:76:c4:19:b7:da:a5: 2b:77:f7:c1:5b:4f:4d:63:74:1d:9a:a5:4b:4f:3e:ab:09:55: bf:75:5e:88:bf:31:f2:d0:8e:34:f5:84:96:77:a1:27:d7:cf: 98:3c:36:13:17:1d:80:ee:d4:21:f3:9c:90:ff:cc:fb:87:b9: be:f8:b7:b3:10:69:5f:92:77:a1:13:20:22:da:e3:33:b6:04: 29:19:5d:76:82:08:83:db:09:a7:d8:7b:35:ec:1d:6b:5c:c4: d3:b0:66:a0:34:e1:42:d5:1f:1b:f2:e0:5a:88:4b:14:f3:af: f5:73:a8:77:a5:ab:c1:dd:b5:a8:0b:91:34:7e:e2:29:e6:f2: 5b:8d:7c:4a:37:fa:32:bc:33:51:b1:ff:2b:4d:17:a9:fd:ed: a7:3a:c9:83 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJC RkIyMzVGNTcwNjUyQThCQ0IwNDE2RjZGQ0M0NDQzRjY1OENBMTAeFw0yNDEyMjAw MTU1MDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhCMkNDNkFFRUU2M0Qx MkY4MzNFODUwNjJBNkUzMEIxOTI5RUYzRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLUPWCRztlT1ZEy5OKNflrToiFUasaBC1wYQ78C4vzhInQ3lr1 LFv07ZYkYeQ3KbiR/Sn4ZO1sV8MVuM8bffipsShSaptxPmOWPeADb9imFc8Tlwke +LLhNeJIVSlAsSq3WydwYRm1Pzn+lC9uB5Go+4jz0PlhSR4hOVqmfWqmzZFx8/Ue YRWFS/fYdS50wvwdvDPNefsABizdb/0+f7C8UacIZdyzGA1/UxNK43xYMmRmWgMa FThBQ3SsTJ2ywVmIYWB09jVCnJQTIJyNm0qbgku0NpWHiDN258hcU/7uZizASGfA Xqs9rHB5/f0PTCGsM62oV9v87d0YrMsjAJMfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUiyzGru5j0S+DPoUGKm4wsZKe8/YwHwYDVR0jBBgwFoAUwr+yNfVwZSqLywQW 9vzERD9ljKEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3 Mi93ci15TmZWd1pTcUx5d1FXOXZ6RVJEOWxqS0UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dyLXlOZlZ3WlNxTHl3UVc5dnpFUkQ5bGpLRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNzIvaXl6R3J1NWowUy1E UG9VR0ttNHdzWktlOF9ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGejtDANBgkqhkiG9w0BAQsFAAOCAQEAaZCga4RkFKdwOYolH6V3g1iEv4rL n3rdCrpBzz5OX+I7yJT+irUzr63gz3iGWgLBfsoDb6+hym7KP4raFdkG1fdCw/IO ebGoUZayw+8UohmRzuynAkKA11w8PeA86F5mnUzzsFMddsQZt9qlK3f3wVtPTWN0 HZqlS08+qwlVv3VeiL8x8tCONPWElnehJ9fPmDw2ExcdgO7UIfOckP/M+4e5vvi3 sxBpX5J3oRMgItrjM7YEKRlddoIIg9sJp9h7Newda1zE07BmoDThQtUfG/LgWohL FPOv9XOod6Wrwd21qAuRNH7iKebyW418Sjf6MrwzUbH/K00Xqf3tpzrJgw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:28:11 2025 by rpki-client