$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-Pj_Kwl8_sOZal6_RCHehRiKOa0.roa File: -Pj_Kwl8_sOZal6_RCHehRiKOa0.roa (raw, json) Hash identifier: NAz/w/3MrCPb6kKAdRlbZM3dvQ2Wcc7ilDmyFHAxL5g= Subject key identifier: F8:F8:FF:2B:09:7C:FE:C3:99:6A:5E:BF:44:21:DE:85:18:8A:39:AD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1862 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-Pj_Kwl8_sOZal6_RCHehRiKOa0.roa Signing time: Fri 17 Jan 2025 01:25:00 +0000 ROA not before: Fri 17 Jan 2025 01:25:00 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6242 (0x1862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:00 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F8F8FF2B097CFEC3996A5EBF4421DE85188A39AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:2d:40:28:4c:b5:7b:18:01:a2:7e:1e:99: d4:91:da:d6:f8:cf:98:74:8e:b4:5e:8a:d5:0a:c0: 22:b2:6b:db:89:65:f8:40:75:be:a3:b9:47:40:07: 0d:4d:12:d9:ab:37:29:2f:67:89:98:07:14:40:96: c6:14:8a:23:92:d2:71:0d:0f:c0:93:6b:aa:cf:8a: 33:dc:f5:cc:4e:b9:1b:bf:a2:4b:c1:be:5e:fa:ee: fc:bc:e3:cb:f4:2b:46:da:7f:1e:03:7e:88:25:35: 52:82:e4:2c:2f:ab:8c:b0:f1:cc:cf:5f:cb:08:95: 54:c6:b1:e8:47:8f:7e:7a:eb:e8:2c:e9:23:95:6d: 8b:b8:cf:be:f5:ce:ef:59:56:cd:d3:93:21:18:5c: 45:77:c5:6f:3b:ae:30:69:64:97:d3:fd:db:77:84: 17:62:bd:8f:ac:9d:68:80:79:1b:11:a9:17:70:46: b1:05:5b:af:c8:c2:b3:4c:27:e7:cc:c6:3f:48:b3: 5b:7e:89:14:02:c6:03:88:c1:10:e8:a8:56:4f:b4: d9:dd:16:d2:49:fd:4c:72:2b:53:d4:86:7a:c2:6a: 66:b9:99:8f:ca:83:58:a9:d4:16:02:75:8e:6f:66: 10:88:a5:a6:90:4b:06:46:df:88:08:44:7a:3d:9c: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F8:FF:2B:09:7C:FE:C3:99:6A:5E:BF:44:21:DE:85:18:8A:39:AD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-Pj_Kwl8_sOZal6_RCHehRiKOa0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.40.0/24 Signature Algorithm: sha256WithRSAEncryption b8:0c:21:c1:db:2e:e1:8e:a6:7a:04:89:6c:b9:1c:ec:da:dc: 12:f0:0d:ea:e3:d2:57:a7:31:42:72:59:ad:2d:53:93:8f:ce: e4:c4:32:39:fc:70:5a:2b:3f:01:49:0e:80:79:86:7b:05:2a: c0:88:29:35:0e:59:ca:d0:19:f8:bf:70:e2:f1:21:f0:26:f5: 3e:05:2f:4f:0b:18:c7:25:b7:83:ca:b8:0b:83:56:69:53:f7: dd:7b:1c:9f:c3:4d:7c:34:17:c3:1d:b5:89:95:4f:e5:1f:d9: 3c:37:95:57:e7:2e:ad:dd:b7:c3:d1:29:e2:ba:15:86:27:6e: 0d:17:b9:93:d6:fe:a7:5c:05:0e:8b:2d:93:e4:09:4c:61:51: d1:79:67:2b:4a:99:02:47:2b:bc:11:4e:17:c7:3d:2e:30:5b: c8:2d:46:fe:d2:46:bb:d8:6c:0b:d9:52:6f:8c:d8:e9:15:c0: 9b:29:39:5a:83:0c:87:b3:00:6c:7e:63:b7:9c:a2:98:f5:9e: 20:fd:04:96:7a:02:65:2f:f4:68:45:91:a8:94:23:e5:9a:41: f9:95:fc:13:68:a2:77:8d:ac:5f:9c:ce:22:3f:3c:9c:e7:ff: ce:45:53:c4:aa:13:de:cd:1c:73:dc:0c:02:df:0c:3e:b3:59: 96:da:bc:d4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEY4RjhGRjJCMDk3Q0ZF QzM5OTZBNUVCRjQ0MjFERTg1MTg4QTM5QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuay1AKEy1exgBon4emdSR2tb4z5h0jrReitUKwCKya9uJZfhA db6juUdABw1NEtmrNykvZ4mYBxRAlsYUiiOS0nEND8CTa6rPijPc9cxOuRu/okvB vl767vy848v0K0bafx4DfoglNVKC5Cwvq4yw8czPX8sIlVTGsehHj3566+gs6SOV bYu4z771zu9ZVs3TkyEYXEV3xW87rjBpZJfT/dt3hBdivY+snWiAeRsRqRdwRrEF W6/IwrNMJ+fMxj9Is1t+iRQCxgOIwRDoqFZPtNndFtJJ/UxyK1PUhnrCama5mY/K g1ip1BYCdY5vZhCIpaaQSwZG34gIRHo9nFBRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU+Pj/Kwl8/sOZal6/RCHehRiKOa0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly1Qal9Ld2w4X3NPWmFs Nl9SQ0hlaFJpS09hMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SgwDQYJKoZIhvcNAQELBQADggEBALgMIcHbLuGOpnoEiWy5HOza3BLwDerj 0lenMUJyWa0tU5OPzuTEMjn8cForPwFJDoB5hnsFKsCIKTUOWcrQGfi/cOLxIfAm 9T4FL08LGMclt4PKuAuDVmlT9917HJ/DTXw0F8MdtYmVT+Uf2Tw3lVfnLq3dt8PR KeK6FYYnbg0XuZPW/qdcBQ6LLZPkCUxhUdF5ZytKmQJHK7wRThfHPS4wW8gtRv7S RrvYbAvZUm+M2OkVwJspOVqDDIezAGx+Y7ecopj1niD9BJZ6AmUv9GhFkaiUI+Wa QfmV/BNooneNrF+cziI/PJzn/85FU8SqE97NHHPcDALfDD6zWZbavNQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:22 2025 by rpki-client