$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/3i_fqOyCixDOFRGuJU8aWVuIYz0.roa File: 3i_fqOyCixDOFRGuJU8aWVuIYz0.roa (raw, json) Hash identifier: E3dM1DYELSLPRvNEh4DQg3wlF+uD26l3SHZ4DTZ8aAU= Subject key identifier: DE:2F:DF:A8:EC:82:8B:10:CE:15:11:AE:25:4F:1A:59:5B:88:63:3D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1904 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3i_fqOyCixDOFRGuJU8aWVuIYz0.roa Signing time: Fri 17 Jan 2025 01:25:56 +0000 ROA not before: Fri 17 Jan 2025 01:25:56 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6404 (0x1904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:56 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DE2FDFA8EC828B10CE1511AE254F1A595B88633D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:2f:59:25:6c:f2:ce:3b:76:5a:fb:26:18: 53:29:be:03:47:63:f5:e0:0c:5c:aa:ce:bd:c7:24: c5:d4:3f:f9:a4:f0:d7:e9:42:b7:20:bb:4b:ef:8a: 1b:c7:02:19:50:eb:d0:b5:e4:8b:1e:4e:90:c1:09: cf:49:92:78:28:d0:2c:3e:fd:91:7c:54:c0:ad:5d: 46:6a:06:eb:43:98:2d:7c:c0:06:54:64:a7:84:f7: 36:c7:a6:21:51:7a:38:24:c4:a9:41:1e:e8:0c:11: 61:64:cb:d9:1c:5d:71:c3:37:ae:7d:54:78:82:9a: bc:0e:30:d1:e5:80:f2:ee:e6:31:0a:1f:9a:90:94: 7b:e5:58:a1:db:29:bb:0f:2b:fb:55:75:9f:95:ad: 0e:a1:0c:f0:94:ad:a3:46:13:be:0d:ee:93:7f:74: 82:31:1c:6e:46:ec:b7:ea:af:97:c0:45:aa:f4:f2: b3:b1:cb:01:2d:8e:63:27:f7:5b:1d:7d:49:89:a7: 28:c9:4f:c0:fb:4b:a5:3b:e0:24:9f:59:71:aa:fd: fc:6a:7f:7f:af:5d:ec:96:37:fc:e3:26:b6:2a:d9: 39:5c:91:80:0d:1a:e2:1d:ca:51:f1:7d:60:19:0c: 8f:62:8f:61:28:22:fb:7d:70:bf:58:ec:8d:43:68: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:DF:A8:EC:82:8B:10:CE:15:11:AE:25:4F:1A:59:5B:88:63:3D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3i_fqOyCixDOFRGuJU8aWVuIYz0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.4.0/22 Signature Algorithm: sha256WithRSAEncryption a2:3e:d3:d4:cb:b0:0a:df:3e:3c:6f:57:92:12:c9:05:2b:e7: 10:6a:cd:a3:5a:8b:07:ca:a5:56:0f:4a:c8:fe:d4:46:9b:7e: 40:d7:73:6e:00:a1:5f:23:cb:17:3c:d8:31:4d:87:17:4e:19: 3b:c3:9c:95:f1:92:91:ba:c0:2e:9a:28:cb:4f:b7:c4:31:67: b6:68:9b:fc:4f:1c:2c:fe:9b:5a:67:c6:d6:de:0e:3b:b1:a0: 24:b9:4b:8a:a0:f6:fa:48:29:01:d0:f1:c4:c9:dd:f0:b1:77: 8e:4b:26:0c:38:02:b2:2c:d8:2b:60:ba:c7:c1:16:a7:56:a4: 00:3d:05:91:c8:f6:16:f1:97:18:13:c7:42:5f:f1:b9:57:6c: da:60:9f:23:2d:6f:3d:6d:cb:85:45:74:82:b8:6c:27:bb:f4: 6e:e7:a4:87:a8:de:bd:39:ae:c9:98:2d:87:16:7f:dd:92:21: 52:2f:56:b4:e8:55:13:2c:1b:87:39:07:eb:87:f2:9d:c6:14: 4e:5e:9e:5d:7b:f6:12:5a:43:1d:5d:81:ba:6f:0b:f8:f8:3a: 60:d0:6f:f7:68:bb:06:a8:d7:7a:01:c0:22:b2:9c:2b:d2:5b: c1:41:05:e0:35:ea:15:0b:48:07:31:9d:50:ce:ea:9d:28:a9: bc:b5:76:53 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERFMkZERkE4RUM4MjhC MTBDRTE1MTFBRTI1NEYxQTU5NUI4ODYzM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXEi9ZJWzyzjt2WvsmGFMpvgNHY/XgDFyqzr3HJMXUP/mk8Nfp Qrcgu0vvihvHAhlQ69C15IseTpDBCc9Jkngo0Cw+/ZF8VMCtXUZqButDmC18wAZU ZKeE9zbHpiFRejgkxKlBHugMEWFky9kcXXHDN659VHiCmrwOMNHlgPLu5jEKH5qQ lHvlWKHbKbsPK/tVdZ+VrQ6hDPCUraNGE74N7pN/dIIxHG5G7Lfqr5fARar08rOx ywEtjmMn91sdfUmJpyjJT8D7S6U74CSfWXGq/fxqf3+vXeyWN/zjJrYq2TlckYAN GuIdylHxfWAZDI9ij2EoIvt9cL9Y7I1DaF5BAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU3i/fqOyCixDOFRGuJU8aWVuIYz0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzNpX2ZxT3lDaXhET0ZS R3VKVThhV1Z1SVl6MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QQwDQYJKoZIhvcNAQELBQADggEBAKI+09TLsArfPjxvV5ISyQUr5xBqzaNa iwfKpVYPSsj+1EabfkDXc24AoV8jyxc82DFNhxdOGTvDnJXxkpG6wC6aKMtPt8Qx Z7Zom/xPHCz+m1pnxtbeDjuxoCS5S4qg9vpIKQHQ8cTJ3fCxd45LJgw4ArIs2Ctg usfBFqdWpAA9BZHI9hbxlxgTx0Jf8blXbNpgnyMtbz1ty4VFdIK4bCe79G7npIeo 3r05rsmYLYcWf92SIVIvVrToVRMsG4c5B+uH8p3GFE5enl179hJaQx1dgbpvC/j4 OmDQb/douwao13oBwCKynCvSW8FBBeA16hULSAcxnVDO6p0oqby1dlM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:24 2025 by rpki-client