$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/9vRXwR4njOWIArqIlUDPe_2NMRk.roa File: 9vRXwR4njOWIArqIlUDPe_2NMRk.roa (raw, json) Hash identifier: W60sJPrABKdOlAV6OB2Xr7WsFNNzAfMEgmwWZQqujAk= Subject key identifier: F6:F4:57:C1:1E:27:8C:E5:88:02:BA:88:95:40:CF:7B:FD:8D:31:19 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 187A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9vRXwR4njOWIArqIlUDPe_2NMRk.roa Signing time: Fri 17 Jan 2025 01:25:07 +0000 ROA not before: Fri 17 Jan 2025 01:25:07 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6266 (0x187a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:07 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F6F457C11E278CE58802BA889540CF7BFD8D3119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:b0:71:5a:de:6b:84:0d:c2:5a:8e:80:12: c0:9e:18:11:ae:b4:13:8e:b1:6e:6d:97:1e:33:5c: f4:c9:fb:52:64:88:6e:b4:c8:47:89:88:38:e7:50: 3a:e9:d8:00:25:d6:5d:98:00:9b:65:8d:82:50:e5: d8:d3:17:b3:38:7c:fc:b9:f2:5c:78:f3:ac:0c:ea: ae:db:f5:59:ae:4e:58:bd:ce:39:6d:15:57:ea:6a: 7b:b4:37:16:a3:eb:1b:0e:c4:c8:ac:81:54:5e:35: 65:ff:f6:61:9c:2a:f7:52:73:b5:22:77:dd:52:f3: 5b:aa:6b:c2:90:ef:06:85:b0:10:2b:67:03:b9:4e: 94:76:c6:e9:1c:4f:aa:5b:1a:c0:a8:09:e8:96:0d: ec:85:03:69:ad:a1:4d:53:1f:4d:55:40:2a:63:5c: 5d:7e:83:ba:a7:4c:3f:12:40:3d:37:33:b9:b8:9c: b4:d8:78:90:e4:6f:ad:99:1f:9e:0d:65:4f:21:45: b1:14:b9:08:ed:67:d4:73:9b:ca:dd:02:8e:23:92: 92:7d:5b:79:26:d8:5b:80:82:b6:58:c3:55:14:ad: b4:2d:d1:84:1e:10:52:80:3e:20:b7:f2:bb:8d:d0: e6:a7:3c:a7:17:d6:25:5b:14:92:14:52:c9:61:12: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F4:57:C1:1E:27:8C:E5:88:02:BA:88:95:40:CF:7B:FD:8D:31:19 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9vRXwR4njOWIArqIlUDPe_2NMRk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.13.0/24 Signature Algorithm: sha256WithRSAEncryption c4:de:d6:21:be:f5:3e:86:6b:05:04:6f:89:a5:77:b1:75:0f: a4:ce:de:d3:ac:eb:a7:c4:21:ae:7e:f0:77:c6:de:3a:cd:f8: 44:ec:8f:6e:71:8d:75:6e:f8:f4:27:9d:87:08:9e:93:32:eb: ea:32:dc:e2:7e:92:11:a2:82:c7:de:1f:ee:ef:19:73:ad:5f: 9f:7d:50:53:df:b1:f3:86:8d:31:a8:69:6c:67:fe:86:fc:95: 73:fb:ed:27:52:f7:19:26:6f:29:4d:a2:c9:96:bc:ff:f3:86: b3:70:49:f7:f6:6e:91:25:0c:c6:93:d6:d0:fb:31:c7:48:bb: df:ab:cc:54:84:70:d2:88:03:82:b1:7f:f3:49:7a:be:fa:83: 11:60:f9:a4:07:bc:a5:eb:16:c9:c5:a2:d7:eb:e0:9f:6f:e3: 72:23:ad:80:45:b3:cb:a2:38:09:2b:93:6d:e5:a3:6f:93:5d: 31:3d:0f:66:4f:f3:2a:ca:46:a0:c6:99:4b:fe:b4:ae:aa:0c: d3:17:4a:fe:74:30:42:c1:bf:ce:35:3b:a7:58:3c:12:8c:4b: 41:99:14:67:2b:9d:bf:2d:ae:4b:ed:6e:b4:08:d3:16:01:64: 60:93:d4:f6:34:21:19:cd:ae:d6:6b:6a:71:62:87:6a:79:fd: 9e:0c:17:de -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEY2RjQ1N0MxMUUyNzhD RTU4ODAyQkE4ODk1NDBDRjdCRkQ4RDMxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjtLBxWt5rhA3CWo6AEsCeGBGutBOOsW5tlx4zXPTJ+1JkiG60 yEeJiDjnUDrp2AAl1l2YAJtljYJQ5djTF7M4fPy58lx486wM6q7b9VmuTli9zjlt FVfqanu0Nxaj6xsOxMisgVReNWX/9mGcKvdSc7Uid91S81uqa8KQ7waFsBArZwO5 TpR2xukcT6pbGsCoCeiWDeyFA2mtoU1TH01VQCpjXF1+g7qnTD8SQD03M7m4nLTY eJDkb62ZH54NZU8hRbEUuQjtZ9Rzm8rdAo4jkpJ9W3km2FuAgrZYw1UUrbQt0YQe EFKAPiC38ruN0OanPKcX1iVbFJIUUslhEqqhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU9vRXwR4njOWIArqIlUDPe/2NMRkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Lzl2Ulh3UjRuak9XSUFy cUlsVURQZV8yTk1Say5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3Q0wDQYJKoZIhvcNAQELBQADggEBAMTe1iG+9T6GawUEb4mld7F1D6TO3tOs 66fEIa5+8HfG3jrN+ETsj25xjXVu+PQnnYcInpMy6+oy3OJ+khGigsfeH+7vGXOt X599UFPfsfOGjTGoaWxn/ob8lXP77SdS9xkmbylNosmWvP/zhrNwSff2bpElDMaT 1tD7McdIu9+rzFSEcNKIA4Kxf/NJer76gxFg+aQHvKXrFsnFotfr4J9v43IjrYBF s8uiOAkrk23lo2+TXTE9D2ZP8yrKRqDGmUv+tK6qDNMXSv50MELBv841O6dYPBKM S0GZFGcrnb8trkvtbrQI0xYBZGCT1PY0IRnNrtZranFih2p5/Z4MF94= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:50 2025 by rpki-client