$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/oTHwFHxLw7sHeCYIOnGQz_Xujjg.roa File: oTHwFHxLw7sHeCYIOnGQz_Xujjg.roa (raw, json) Hash identifier: tWfa0dWlidx5lWRqi3XK3PCx9XD6R3kUz3xJXkaqA94= Subject key identifier: A1:31:F0:14:7C:4B:C3:BB:07:78:26:08:3A:71:90:CF:F5:EE:8E:38 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 135E Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/oTHwFHxLw7sHeCYIOnGQz_Xujjg.roa Signing time: Mon 21 Apr 2025 07:31:47 +0000 ROA not before: Mon 21 Apr 2025 07:31:47 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146806 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4958 (0x135e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Apr 21 07:31:47 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A131F0147C4BC3BB077826083A7190CFF5EE8E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:cf:cf:a5:89:f6:4c:d5:4b:b8:5f:36:a5: e9:30:79:7b:9f:ee:a5:34:a7:87:13:81:d4:70:21: cc:d6:ad:85:75:1e:eb:71:36:2b:85:b0:0c:5c:26: 33:d3:43:2a:aa:3b:a1:78:5d:37:1c:55:66:20:8c: 87:28:2a:87:46:e7:f3:dd:15:16:6d:9f:8c:a2:8d: 26:85:8f:09:e8:44:1b:07:d0:5c:57:6b:ea:a0:b3: 04:04:f1:f0:94:44:87:8f:3c:22:a4:76:35:c8:50: a9:dc:cc:c0:38:7c:4e:a7:52:42:30:f0:0e:2d:b1: 1c:f0:f0:86:61:f8:30:45:97:e8:7e:1f:86:70:6b: 14:9d:a0:6b:1e:f9:d6:89:00:5e:ae:80:c5:a3:a0: b5:dd:51:1c:62:bb:cd:35:10:53:46:6f:18:62:39: 56:f5:6d:2b:e7:34:59:5f:77:63:5b:d0:48:c4:71: 9a:f5:c7:c3:dc:f3:af:9c:d1:2a:99:60:71:bb:ea: b7:c1:3c:a2:13:65:44:0e:5a:ce:6e:61:5c:04:e3: 8c:67:eb:3b:a8:98:15:aa:bc:36:a6:99:a8:a5:a0: 4c:c9:aa:78:49:51:5f:74:a8:a0:1b:0a:a9:d9:4b: 05:28:22:04:ed:91:2a:9a:a1:0e:15:ed:62:8d:e2: b7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:F0:14:7C:4B:C3:BB:07:78:26:08:3A:71:90:CF:F5:EE:8E:38 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/oTHwFHxLw7sHeCYIOnGQz_Xujjg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:49:02:20:b8:0e:98:b1:be:90:23:a9:47:e5:cf:e1:dc:1d: ed:90:83:38:d0:18:26:ec:2e:bd:de:2a:26:49:9c:c3:4d:ee: d8:6e:28:0c:8e:d0:3d:ca:ca:1d:ba:be:06:e1:b8:c3:e2:47: d8:71:8e:f1:f1:e7:db:14:a0:16:47:a6:1b:f0:39:6d:e9:08: 59:67:58:ef:78:bc:6d:7f:2f:91:2f:28:25:34:c5:31:9d:56: 02:ce:c1:a6:a6:be:7c:0b:4e:57:7b:7c:0d:7a:2c:3d:d5:48: af:bc:1f:3e:d1:fe:eb:a1:63:4a:6a:c3:6c:6b:35:7a:c9:19: fd:2b:a6:76:3c:74:6a:17:41:4a:0d:a3:0f:7c:97:9e:2f:af: ba:83:99:d9:e5:52:f2:93:8e:af:d3:d6:f5:8c:72:30:13:2d: 39:7a:fe:76:e4:d9:46:a3:e8:81:55:10:90:f6:9c:ef:72:e0: 80:f8:99:b6:a0:2d:9d:d3:9c:f0:9f:b3:47:c2:74:10:30:c2: 5f:32:3f:52:f8:7d:7a:89:67:7e:bd:2c:9c:a8:a0:5c:9e:1e: f4:43:42:7e:64:1c:8f:d1:b6:a7:65:a3:cb:72:50:46:0a:d3: e2:69:b6:78:fe:1f:50:a4:3f:88:79:a7:ff:3b:da:fe:a5:55: df:a6:7f:00 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA0MjEw NzMxNDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEExMzFGMDE0N0M0QkMz QkIwNzc4MjYwODNBNzE5MENGRjVFRThFMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTEM/PpYn2TNVLuF82pekweXuf7qU0p4cTgdRwIczWrYV1Hutx NiuFsAxcJjPTQyqqO6F4XTccVWYgjIcoKodG5/PdFRZtn4yijSaFjwnoRBsH0FxX a+qgswQE8fCURIePPCKkdjXIUKnczMA4fE6nUkIw8A4tsRzw8IZh+DBFl+h+H4Zw axSdoGse+daJAF6ugMWjoLXdURxiu801EFNGbxhiOVb1bSvnNFlfd2Nb0EjEcZr1 x8Pc86+c0SqZYHG76rfBPKITZUQOWs5uYVwE44xn6zuomBWqvDammailoEzJqnhJ UV90qKAbCqnZSwUoIgTtkSqaoQ4V7WKN4rfVAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoTHwFHxLw7sHeCYIOnGQz/XujjgwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvb1RId0ZIeEx3N3NI ZUNZSU9uR1F6X1h1ampnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEAKkkCILgOmLG+kCOpR+XP4dwd7ZCD ONAYJuwuvd4qJkmcw03u2G4oDI7QPcrKHbq+BuG4w+JH2HGO8fHn2xSgFkemG/A5 bekIWWdY73i8bX8vkS8oJTTFMZ1WAs7Bpqa+fAtOV3t8DXosPdVIr7wfPtH+66Fj SmrDbGs1eskZ/Sumdjx0ahdBSg2jD3yXni+vuoOZ2eVS8pOOr9PW9YxyMBMtOXr+ duTZRqPogVUQkPac73LggPiZtqAtndOc8J+zR8J0EDDCXzI/Uvh9eolnfr0snKig XJ4e9ENCfmQcj9G2p2Wjy3JQRgrT4mm2eP4fUKQ/iHmn/zva/qVV36Z/AA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:21 2025 by rpki-client