$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/3Jt8Shy40KYAMNf3dIAe6VcncXE.roa File: 3Jt8Shy40KYAMNf3dIAe6VcncXE.roa (raw, json) Hash identifier: GxlOFrogJZU3P61b7HSI9WnkYomH7tohg44luzIGQbk= Subject key identifier: DC:9B:7C:4A:1C:B8:D0:A6:00:30:D7:F7:74:80:1E:E9:57:27:71:71 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1828 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3Jt8Shy40KYAMNf3dIAe6VcncXE.roa Signing time: Fri 17 Jan 2025 01:24:41 +0000 ROA not before: Fri 17 Jan 2025 01:24:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6184 (0x1828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DC9B7C4A1CB8D0A60030D7F774801EE957277171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:73:33:77:d7:01:69:f5:98:8c:72:2c:a2: 46:f0:17:ba:f0:60:c3:19:b1:47:ef:84:9a:c1:2c: 19:81:08:90:14:a3:d0:ec:35:7f:55:03:dc:05:73: cf:a8:9e:48:42:a5:d2:c8:cd:98:6e:ae:ad:83:48: 95:a4:1d:e6:45:66:82:bb:29:c3:88:39:84:e4:1c: c8:ea:70:88:bb:64:91:98:fc:5a:b1:64:3a:7b:98: ae:34:be:c9:1d:d8:fe:b9:4a:b2:42:4e:c5:c9:dc: f6:f7:a5:57:da:af:83:0d:86:e3:97:d7:35:18:70: e8:6a:15:e6:2e:31:1e:85:27:37:cf:ac:1b:6d:7f: 9c:6e:6c:dd:a2:25:bb:03:c1:36:6a:55:50:ea:25: 5d:89:9e:31:97:a4:6a:eb:8a:9b:b7:58:e7:ab:83: ba:d9:e5:b2:1b:8e:92:c1:fd:71:02:f6:b3:a3:02: 8a:83:4d:cf:54:be:8c:d1:f2:0a:88:af:59:46:f9: 3d:34:06:cb:71:7c:2a:c2:33:6c:46:a6:2c:ae:cd: cd:a8:03:d4:b9:5f:ec:60:7f:22:b9:7b:20:8f:c5: 2e:77:57:14:46:26:da:44:5e:c9:3b:e4:71:a2:ff: c8:bc:b3:be:b6:d7:09:f2:e0:b8:b0:d1:40:fd:30: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:7C:4A:1C:B8:D0:A6:00:30:D7:F7:74:80:1E:E9:57:27:71:71 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3Jt8Shy40KYAMNf3dIAe6VcncXE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.48.0/24 Signature Algorithm: sha256WithRSAEncryption 50:54:1a:71:5b:aa:3b:2b:60:dc:76:4a:f1:19:06:e0:27:33: 43:f2:7d:f8:53:7c:c0:67:16:17:93:34:bc:41:19:8d:6e:f6: e5:ea:c1:87:84:d1:4a:da:2c:ba:b3:83:d5:c8:e8:eb:3a:3e: 73:b9:e5:58:f9:75:44:0f:73:7d:eb:da:42:34:b5:50:3a:02: 11:78:0f:5f:3c:b4:bd:dc:84:52:df:11:2d:e4:55:9e:d7:dc: 0b:55:1a:f2:51:b8:af:a9:20:d5:55:2a:da:76:b3:12:af:b8: 1b:12:87:e1:54:f8:00:b6:23:a1:e1:eb:1a:44:47:40:d6:0a: 11:b0:ae:62:be:f5:0f:14:b7:00:28:d7:91:fc:97:f5:ac:cf: 22:8f:a5:db:12:c9:f2:9a:b1:c6:3e:3b:d2:a1:5f:fc:ab:27: 58:d5:f6:11:1c:a6:d4:50:7c:a7:03:f2:63:ea:c4:87:a6:28: 40:ae:a7:89:bd:e0:9e:75:59:8c:da:85:2c:c1:82:04:0e:e5: 1b:6c:a6:3a:c2:e8:65:aa:2f:c9:ba:cc:74:8c:f9:78:1d:5e: 39:8c:45:66:eb:cb:59:d8:c5:fa:f7:39:c3:d0:9e:bb:04:8e: 81:50:34:8e:83:e1:6c:6d:80:cc:73:24:bc:3d:db:ec:ae:3d: 87:8d:8d:cf -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERDOUI3QzRBMUNCOEQw QTYwMDMwRDdGNzc0ODAxRUU5NTcyNzcxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+gnMzd9cBafWYjHIsokbwF7rwYMMZsUfvhJrBLBmBCJAUo9Ds NX9VA9wFc8+onkhCpdLIzZhurq2DSJWkHeZFZoK7KcOIOYTkHMjqcIi7ZJGY/Fqx ZDp7mK40vskd2P65SrJCTsXJ3Pb3pVfar4MNhuOX1zUYcOhqFeYuMR6FJzfPrBtt f5xubN2iJbsDwTZqVVDqJV2JnjGXpGrripu3WOerg7rZ5bIbjpLB/XEC9rOjAoqD Tc9UvozR8gqIr1lG+T00BstxfCrCM2xGpiyuzc2oA9S5X+xgfyK5eyCPxS53VxRG JtpEXsk75HGi/8i8s7621wny4Liw0UD9MHG9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU3Jt8Shy40KYAMNf3dIAe6VcncXEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzNKdDhTaHk0MEtZQU1O ZjNkSUFlNlZjbmNYRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TAwDQYJKoZIhvcNAQELBQADggEBAFBUGnFbqjsrYNx2SvEZBuAnM0PyffhT fMBnFheTNLxBGY1u9uXqwYeE0UraLLqzg9XI6Os6PnO55Vj5dUQPc33r2kI0tVA6 AhF4D188tL3chFLfES3kVZ7X3AtVGvJRuK+pINVVKtp2sxKvuBsSh+FU+AC2I6Hh 6xpER0DWChGwrmK+9Q8UtwAo15H8l/WszyKPpdsSyfKascY+O9KhX/yrJ1jV9hEc ptRQfKcD8mPqxIemKECup4m94J51WYzahSzBggQO5RtspjrC6GWqL8m6zHSM+Xgd XjmMRWbry1nYxfr3OcPQnrsEjoFQNI6D4WxtgMxzJLw92+yuPYeNjc8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:36 2025 by rpki-client