$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/529N81Yw86_TotvxSLL1HkfVorI.roa File: 529N81Yw86_TotvxSLL1HkfVorI.roa (raw, json) Hash identifier: Z/J4NAUbbLFm7Nacet23vx6yixEctwSw58G4eOz2Taw= Subject key identifier: E7:6F:4D:F3:56:30:F3:AF:D3:A2:DB:F1:48:B2:F5:1E:47:D5:A2:B2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 181D Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/529N81Yw86_TotvxSLL1HkfVorI.roa Signing time: Fri 17 Jan 2025 01:24:36 +0000 ROA not before: Fri 17 Jan 2025 01:24:36 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 103.221.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6173 (0x181d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:36 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E76F4DF35630F3AFD3A2DBF148B2F51E47D5A2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:4f:bf:b5:34:c6:78:80:ef:56:eb:49:aa: 44:c7:67:23:4a:73:b6:92:6c:7c:da:f4:ed:f5:5a: c1:1e:fc:8d:93:f2:95:df:46:d2:01:c2:93:62:ac: c9:62:77:46:45:ae:ca:5c:ec:87:9a:2c:dd:69:17: b4:43:f6:c6:84:55:ef:55:0d:9a:70:fa:53:04:6e: a0:a5:de:6c:2a:37:93:89:41:d6:16:64:be:d0:a7: 7c:24:8b:b5:3e:35:01:2e:2f:0c:0a:fc:80:7b:cf: 1b:0f:a0:09:54:54:4b:c1:67:cf:b2:e7:03:4e:d8: 41:27:70:81:70:72:fe:d1:1f:e8:2e:07:e5:fa:4d: dc:76:b2:b7:88:20:4b:c3:77:7d:36:e5:66:49:27: 08:85:e3:65:0b:78:0b:5f:64:15:35:23:bc:fc:3a: 8f:38:d6:22:a1:ac:fe:7e:0d:1c:2b:6e:a6:12:b0: b2:cc:4b:bb:b2:f4:8e:fb:f0:6c:bc:24:06:95:77: d0:e5:ad:f7:ac:2f:96:26:e7:7b:e8:e6:3b:66:a2: 3e:ba:28:5f:67:48:31:cb:b9:19:4d:b7:f4:b3:e0: 3c:ce:6d:07:52:d7:13:5e:68:c1:91:0d:fb:9b:21: cf:60:24:00:05:f0:4b:b7:dc:ef:bb:0a:14:8e:96: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6F:4D:F3:56:30:F3:AF:D3:A2:DB:F1:48:B2:F5:1E:47:D5:A2:B2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/529N81Yw86_TotvxSLL1HkfVorI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:2c:c9:c4:42:15:4f:e8:2a:8f:b3:ee:99:12:53:56:95:af: ae:ea:21:28:ae:bb:01:de:eb:d0:4a:7d:43:49:9e:82:d8:f0: eb:05:7e:36:33:a6:7e:82:9c:ef:35:aa:6a:b4:a1:d1:d2:43: 9a:db:4f:87:fa:29:4f:86:86:e5:e4:f8:c7:fd:13:09:19:54: 65:9e:7e:09:28:ff:83:e1:98:35:d2:03:08:4b:a9:66:2c:f6: 8e:48:b4:b7:79:85:25:49:f1:ee:c7:8d:01:78:c8:92:eb:91: 70:3b:fd:c9:25:7b:29:34:74:9d:f5:09:87:ee:71:ad:a0:4a: 56:de:22:e9:60:a1:da:82:32:cb:dc:02:95:7a:0a:6a:68:cb: 26:45:89:3a:2b:7a:99:16:c6:b4:77:05:a3:ac:81:bb:c2:7a: 1d:bb:7d:9c:3a:a6:b0:22:ae:8d:ce:6d:84:4e:67:cf:4a:19: c3:1d:35:48:cb:26:ac:da:07:ba:66:a2:46:8c:76:1d:0f:19: 89:ce:de:b3:96:81:d7:2e:83:6d:45:e1:a9:a0:54:4a:c4:ac: 26:f4:7f:07:91:92:45:2f:59:bd:52:50:e6:6e:1b:1c:6e:e0: 81:3a:50:f2:ae:b8:08:b9:a5:75:ea:b3:e2:25:da:37:58:2e: be:db:04:90 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU3NkY0REYzNTYzMEYz QUZEM0EyREJGMTQ4QjJGNTFFNDdENUEyQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfAU+/tTTGeIDvVutJqkTHZyNKc7aSbHza9O31WsEe/I2T8pXf RtIBwpNirMlid0ZFrspc7IeaLN1pF7RD9saEVe9VDZpw+lMEbqCl3mwqN5OJQdYW ZL7Qp3wki7U+NQEuLwwK/IB7zxsPoAlUVEvBZ8+y5wNO2EEncIFwcv7RH+guB+X6 Tdx2sreIIEvDd3025WZJJwiF42ULeAtfZBU1I7z8Oo841iKhrP5+DRwrbqYSsLLM S7uy9I778Gy8JAaVd9DlrfesL5Ym53vo5jtmoj66KF9nSDHLuRlNt/Sz4DzObQdS 1xNeaMGRDfubIc9gJAAF8Eu33O+7ChSOlhi9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU529N81Yw86/TotvxSLL1HkfVorIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzUyOU44MVl3ODZfVG90 dnhTTEwxSGtmVm9ySS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3TAwDQYJKoZIhvcNAQELBQADggEBACosycRCFU/oKo+z7pkSU1aVr67qISiu uwHe69BKfUNJnoLY8OsFfjYzpn6CnO81qmq0odHSQ5rbT4f6KU+GhuXk+Mf9EwkZ VGWefgko/4PhmDXSAwhLqWYs9o5ItLd5hSVJ8e7HjQF4yJLrkXA7/ckleyk0dJ31 CYfuca2gSlbeIulgodqCMsvcApV6CmpoyyZFiTorepkWxrR3BaOsgbvCeh27fZw6 prAiro3ObYROZ89KGcMdNUjLJqzaB7pmokaMdh0PGYnO3rOWgdcug21F4amgVErE rCb0fweRkkUvWb1SUOZuGxxu4IE6UPKuuAi5pXXqs+Il2jdYLr7bBJA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:28 2025 by rpki-client