$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3238/jHn4wbtBBL_NI2yHT-HejHu5DR8.roa File: jHn4wbtBBL_NI2yHT-HejHu5DR8.roa (raw, json) Hash identifier: MVwJ+ea07YYJ+ojjvSV6NaIkYGlp6i5oCdATarZYHHw= Subject key identifier: 8C:79:F8:C1:BB:41:04:BF:CD:23:6C:87:4F:E1:DE:8C:7B:B9:0D:1F Certificate issuer: /CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08 Certificate serial: 0B15 Authority key identifier: F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/jHn4wbtBBL_NI2yHT-HejHu5DR8.roa Signing time: Fri 21 Mar 2025 03:30:54 +0000 ROA not before: Fri 21 Mar 2025 03:30:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4837 IP address blocks: 103.21.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2837 (0xb15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08 Validity Not Before: Mar 21 03:30:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8C79F8C1BB4104BFCD236C874FE1DE8C7BB90D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:df:72:95:2f:bd:7f:d9:31:b5:7b:b4:c2: 28:d9:8b:51:a1:a2:dd:f4:1e:6c:a6:fe:ef:fd:1e: 96:6a:80:9c:c2:24:ff:5f:87:6c:3e:43:7a:d0:ca: de:a4:95:eb:43:67:f0:0d:70:62:cd:b0:21:da:2b: 96:eb:d6:6e:df:46:a5:da:f6:d9:ea:6e:a9:ae:30: 20:8e:79:7a:83:0e:df:02:2a:f2:9f:7a:a3:ad:8e: e6:3c:aa:f6:2f:d1:80:83:cb:3e:89:66:da:9d:39: 55:e3:7b:69:09:99:42:c1:8a:31:cb:83:ed:01:5e: 46:a6:8c:f9:0f:29:af:b9:ef:39:86:ab:39:7a:03: c1:6a:8b:f5:78:2d:22:72:4a:a1:c4:34:4b:d2:9f: 47:32:0e:4f:7f:2a:af:3a:0c:84:23:6b:98:6d:bb: f2:60:11:d6:9f:6f:81:66:cd:67:4a:78:3a:ca:b3: 54:5b:2b:1c:0a:58:4c:a8:ec:df:5d:eb:10:d3:2f: b1:18:f2:95:63:08:eb:ec:0c:ae:bf:28:55:1c:5e: ff:ea:e7:88:ac:d7:b6:70:4d:3d:85:cd:3d:ee:14: 3d:5b:68:3f:81:99:ce:b1:3f:f7:5f:80:9a:8a:8d: f0:c9:b3:f0:c0:0c:c8:d7:d0:fa:4c:09:f7:14:55: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:79:F8:C1:BB:41:04:BF:CD:23:6C:87:4F:E1:DE:8C:7B:B9:0D:1F X509v3 Authority Key Identifier: keyid:F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/jHn4wbtBBL_NI2yHT-HejHu5DR8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.21.103.0/24 Signature Algorithm: sha256WithRSAEncryption c2:5f:f9:16:bb:23:04:04:f3:38:c1:e2:35:ac:8b:4d:40:df: 3a:2d:fb:93:25:4e:0b:70:c0:ab:cc:f4:d6:3f:24:9d:a0:7e: f2:84:a9:30:60:18:fc:f6:e1:27:8c:37:55:f5:bc:81:3d:25: 00:2b:ae:3e:70:de:b5:46:3e:4b:ef:e4:4a:f9:9a:e2:b9:b7: e6:93:d2:db:23:c8:54:51:9f:4e:47:de:44:51:5f:5e:05:ec: b1:1c:3b:d1:85:62:ed:92:07:00:83:4c:58:95:a4:15:fe:72: 9f:88:47:01:c1:f0:79:47:d4:b6:a1:27:69:07:35:4c:a5:9e: 6b:40:60:b1:d1:9e:f8:f5:de:c3:1c:1b:dd:b2:c1:69:86:21: 81:81:3d:e6:88:ae:ae:f8:58:cc:83:ff:04:6c:a5:db:8b:09: d3:9e:c1:95:e4:de:22:49:5f:6d:4e:0e:45:bf:8a:55:43:26: 64:13:36:98:84:c2:6a:fa:d8:fb:b3:3a:43:00:71:1f:ab:93: 79:f5:6e:63:48:11:5e:8d:e8:63:7f:ff:89:fc:bc:06:33:0f: 6b:f4:33:8d:f6:55:a2:b2:09:1d:97:11:c8:ae:61:5c:5d:1d: 25:9f:12:51:e0:aa:67:bd:64:ce:10:0a:5e:5f:9b:ce:96:52: d7:97:7a:30 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjM2 QjhCNkI5ODJEN0JGRkY1MjQ3REE2NDhFRjY3M0Y3NzE2RUYwODAeFw0yNTAzMjEw MzMwNTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhDNzlGOEMxQkI0MTA0 QkZDRDIzNkM4NzRGRTFERThDN0JCOTBEMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcMN9ylS+9f9kxtXu0wijZi1Ghot30Hmym/u/9HpZqgJzCJP9f h2w+Q3rQyt6kletDZ/ANcGLNsCHaK5br1m7fRqXa9tnqbqmuMCCOeXqDDt8CKvKf eqOtjuY8qvYv0YCDyz6JZtqdOVXje2kJmULBijHLg+0BXkamjPkPKa+57zmGqzl6 A8Fqi/V4LSJySqHENEvSn0cyDk9/Kq86DIQja5htu/JgEdafb4FmzWdKeDrKs1Rb KxwKWEyo7N9d6xDTL7EY8pVjCOvsDK6/KFUcXv/q54is17ZwTT2FzT3uFD1baD+B mc6xP/dfgJqKjfDJs/DADMjX0PpMCfcUVctZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUjHn4wbtBBL/NI2yHT+HejHu5DR8wHwYDVR0jBBgwFoAU82uLa5gte//1JH2m SO9nP3cW7wgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIz OC84MnVMYTVndGVfXzFKSDJtU085blAzY1c3d2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzgydUxhNWd0ZV9fMUpIMm1TTzluUDNjVzd3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMzgvakhuNHdidEJCTF9O STJ5SFQtSGVqSHU1RFI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcVZzANBgkqhkiG9w0BAQsFAAOCAQEAwl/5FrsjBATzOMHiNayLTUDfOi37 kyVOC3DAq8z01j8knaB+8oSpMGAY/PbhJ4w3VfW8gT0lACuuPnDetUY+S+/kSvma 4rm35pPS2yPIVFGfTkfeRFFfXgXssRw70YVi7ZIHAINMWJWkFf5yn4hHAcHweUfU tqEnaQc1TKWea0BgsdGe+PXewxwb3bLBaYYhgYE95oiurvhYzIP/BGyl24sJ057B leTeIklfbU4ORb+KVUMmZBM2mITCavrY+7M6QwBxH6uTefVuY0gRXo3oY3//ify8 BjMPa/QzjfZVorIJHZcRyK5hXF0dJZ8SUeCqZ71kzhAKXl+bzpZS15d6MA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:22 2025 by rpki-client