$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-iq9Exxs54claD8d9I595ayuVWE.roa File: -iq9Exxs54claD8d9I595ayuVWE.roa (raw, json) Hash identifier: p+ZlOHsMTimwiYnN/2yGW7wYB5GRNU5wulm9lhqh9UI= Subject key identifier: FA:2A:BD:13:1C:6C:E7:87:25:68:3F:1D:F4:8E:7D:E5:AC:AE:55:61 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1812 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-iq9Exxs54claD8d9I595ayuVWE.roa Signing time: Fri 17 Jan 2025 01:24:32 +0000 ROA not before: Fri 17 Jan 2025 01:24:32 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6162 (0x1812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:32 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FA2ABD131C6CE78725683F1DF48E7DE5ACAE5561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:42:0e:a2:83:92:95:e1:33:2f:3b:ed:a9: 83:1b:69:01:7c:bc:0c:73:b8:70:0b:90:be:74:60: fb:c3:0e:84:67:34:f9:af:87:30:71:43:3f:41:3b: 2a:eb:f4:26:66:ef:e3:ab:3c:e9:d0:2e:02:ae:14: 5e:71:fc:87:a7:a5:67:15:e5:d5:f5:4a:9d:20:a5: 13:3d:51:ed:9a:67:ec:27:28:a7:9f:8c:dc:c9:1a: 18:08:67:7d:0d:8e:a7:9f:3c:1d:ea:8b:f7:2c:39: a2:9c:e2:9e:74:33:86:d0:fb:30:a3:cb:3e:f8:0e: 60:1b:25:bc:bc:3d:f3:97:71:2c:9b:ad:e7:cf:3b: 13:d7:fd:45:97:9c:93:c7:fb:f4:b2:4b:92:11:7e: e5:64:b9:9f:81:48:03:6c:8a:82:2f:15:e6:3a:d7: ef:02:60:d2:44:ea:53:b3:39:36:00:14:7b:1d:82: 5e:05:4c:73:28:27:cd:8e:fd:51:02:9c:73:2e:6d: 9a:9f:87:d8:20:08:59:52:17:cc:5e:54:ed:3c:c1: fa:89:48:ff:7b:9f:35:e9:2c:34:56:9a:ef:fd:4b: b3:69:75:92:17:46:ec:c2:e6:76:34:8d:80:ad:37: 62:2e:e1:34:34:c3:06:1d:fc:ba:06:4e:56:db:c0: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2A:BD:13:1C:6C:E7:87:25:68:3F:1D:F4:8E:7D:E5:AC:AE:55:61 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-iq9Exxs54claD8d9I595ayuVWE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.7.0/24 Signature Algorithm: sha256WithRSAEncryption 04:53:a4:22:bd:5d:d3:43:e3:c5:1e:85:fb:71:01:82:26:79: 7e:39:e1:29:96:c1:ca:77:f3:42:71:ee:3e:6d:eb:0f:8b:81: 10:6b:63:36:66:47:ef:ee:3a:01:7c:5e:f4:9a:0b:59:d1:d7: 07:8e:a3:80:d2:80:f3:aa:a2:a9:0f:66:7f:13:38:cc:f4:5f: ac:78:62:1c:97:15:de:3a:25:16:77:f1:d2:de:3d:38:13:34: 1f:98:94:2c:40:db:20:45:e3:29:84:19:8f:38:25:78:f7:55: aa:64:c8:f8:fe:ad:5e:51:b9:3e:3f:ce:64:b0:7b:47:57:d3: 1f:e1:3c:77:1d:7f:4f:b5:01:50:7f:6b:fe:3d:b5:1c:c7:f5: 32:e7:3a:4e:be:2f:13:4e:9f:39:a9:a3:dc:c6:b4:96:41:22: 6b:bb:d8:56:5c:07:fb:30:db:9f:b2:94:25:d0:f2:33:fb:59: f7:46:cb:8f:35:aa:f0:a2:65:6b:54:bd:2f:1e:58:12:72:30: fd:9d:55:94:c9:84:ce:5c:5a:ec:57:94:94:c4:f7:9e:8d:9d: 05:5e:b2:40:02:72:33:8a:47:c3:b7:24:bb:f9:35:78:48:27: 4a:e2:bd:99:22:60:70:c4:4d:c1:1a:eb:90:ed:e5:22:f8:8c: f1:49:71:1c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZBMkFCRDEzMUM2Q0U3 ODcyNTY4M0YxREY0OEU3REU1QUNBRTU1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/gUIOooOSleEzLzvtqYMbaQF8vAxzuHALkL50YPvDDoRnNPmv hzBxQz9BOyrr9CZm7+OrPOnQLgKuFF5x/IenpWcV5dX1Sp0gpRM9Ue2aZ+wnKKef jNzJGhgIZ30NjqefPB3qi/csOaKc4p50M4bQ+zCjyz74DmAbJby8PfOXcSybrefP OxPX/UWXnJPH+/SyS5IRfuVkuZ+BSANsioIvFeY61+8CYNJE6lOzOTYAFHsdgl4F THMoJ82O/VECnHMubZqfh9ggCFlSF8xeVO08wfqJSP97nzXpLDRWmu/9S7NpdZIX RuzC5nY0jYCtN2Iu4TQ0wwYd/LoGTlbbwNiNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU+iq9Exxs54claD8d9I595ayuVWEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly1pcTlFeHhzNTRjbGFE OGQ5STU5NWF5dVZXRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QcwDQYJKoZIhvcNAQELBQADggEBAARTpCK9XdND48UehftxAYImeX454SmW wcp380Jx7j5t6w+LgRBrYzZmR+/uOgF8XvSaC1nR1weOo4DSgPOqoqkPZn8TOMz0 X6x4YhyXFd46JRZ38dLePTgTNB+YlCxA2yBF4ymEGY84JXj3VapkyPj+rV5RuT4/ zmSwe0dX0x/hPHcdf0+1AVB/a/49tRzH9TLnOk6+LxNOnzmpo9zGtJZBImu72FZc B/sw25+ylCXQ8jP7WfdGy481qvCiZWtUvS8eWBJyMP2dVZTJhM5cWuxXlJTE956N nQVeskACcjOKR8O3JLv5NXhIJ0rivZkiYHDETcEa65Dt5SL4jPFJcRw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:36:41 2025 by rpki-client