$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa File: C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa (raw, json) Hash identifier: VNpOtNOONozvg1HDaXqfHISaDXXeAHgk8IlaEMk4mLI= Subject key identifier: 0B:8B:3C:A1:07:34:AC:AD:47:0D:4E:63:4F:A7:A1:A5:C5:C6:04:60 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1811 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa Signing time: Fri 17 Jan 2025 01:24:31 +0000 ROA not before: Fri 17 Jan 2025 01:24:31 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6161 (0x1811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:31 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0B8B3CA10734ACAD470D4E634FA7A1A5C5C60460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:50:ae:4f:5a:87:02:a4:90:84:58:60:9a: 57:8b:40:fd:57:74:6b:b1:17:b5:93:d0:4c:e5:44: 2e:68:63:f8:a2:d0:c1:0f:c3:1c:4c:87:89:14:e4: 0d:ef:64:ea:61:7d:f0:db:26:80:80:23:ea:b1:d7: 93:b7:12:7e:e7:53:96:18:bb:99:4a:3f:b4:65:5e: bb:71:ae:9c:0b:bb:af:c0:ba:21:d5:05:dc:09:3e: 54:e7:55:ae:6f:e3:e8:e8:b6:45:13:9a:80:c4:53: 69:c5:59:8a:61:53:cb:c8:60:54:2d:5f:c0:fb:9e: 34:d6:86:bd:6f:9c:04:22:87:9e:d4:39:f9:89:a9: da:7e:e8:bc:99:4e:9a:35:c8:bb:84:52:6a:27:4e: 13:59:be:bd:fa:95:16:f7:6c:7c:f0:4b:19:32:80: 9b:7e:c0:a9:3c:de:a3:a5:c2:85:07:99:10:13:2c: 0b:ed:3d:48:df:fd:61:c3:92:d3:10:7d:d9:1c:16: 90:7a:14:59:1b:a7:dd:db:0e:42:a5:79:3f:61:48: a7:24:78:53:52:3a:f2:ab:7a:d9:5a:79:5d:1c:d7: b7:83:87:f1:44:93:8f:29:0b:89:4c:0b:a2:bb:03: 91:72:25:6b:1d:c6:58:e1:ed:2a:20:31:d0:cb:59: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8B:3C:A1:07:34:AC:AD:47:0D:4E:63:4F:A7:A1:A5:C5:C6:04:60 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.4.0/24 Signature Algorithm: sha256WithRSAEncryption c7:aa:52:c4:d4:9d:26:73:98:c5:0d:44:62:20:8d:0a:2e:e6: f6:39:56:34:65:94:64:c6:f8:39:b6:2b:b0:0d:8d:4b:3e:cf: dc:50:b3:8b:aa:78:79:f9:78:c4:dc:00:38:b9:3a:79:5d:d0: 15:1b:ef:3e:ef:87:5c:80:19:d1:94:2b:8e:65:68:f5:da:37: 6b:0d:1e:e4:b3:f9:6d:8b:72:f4:8b:16:20:b1:df:00:18:5f: da:95:1d:05:86:4a:71:c4:9b:47:00:08:06:8a:71:2e:87:41: 4f:14:81:5e:ec:72:28:b4:d9:ae:9d:68:c8:9a:ce:5c:67:52: 0e:63:96:d7:82:af:ac:6e:0a:f2:bd:fe:d7:20:49:aa:28:d1: 69:1c:78:3f:1b:3f:09:2e:63:38:93:1a:8b:f2:a8:59:14:87: 1b:b0:20:10:dc:b6:d6:15:c5:46:82:ec:9a:74:2e:5b:91:1a: 26:d4:64:8b:bf:5b:d9:2d:b4:e7:f1:50:0e:f7:fc:7e:65:b8: e1:71:f3:e8:2a:3b:aa:65:ef:57:3b:8c:b4:1b:eb:93:3f:82: 6a:21:fb:a9:57:8e:56:3e:4c:88:1b:a5:41:57:39:f6:32:95: 42:23:7a:06:f6:7b:6d:ae:f7:22:b1:3f:d8:c9:18:8b:54:75: bf:1b:08:d9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBCOEIzQ0ExMDczNEFD QUQ0NzBENEU2MzRGQTdBMUE1QzVDNjA0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXTVCuT1qHAqSQhFhgmleLQP1XdGuxF7WT0EzlRC5oY/ii0MEP wxxMh4kU5A3vZOphffDbJoCAI+qx15O3En7nU5YYu5lKP7RlXrtxrpwLu6/AuiHV BdwJPlTnVa5v4+jotkUTmoDEU2nFWYphU8vIYFQtX8D7njTWhr1vnAQih57UOfmJ qdp+6LyZTpo1yLuEUmonThNZvr36lRb3bHzwSxkygJt+wKk83qOlwoUHmRATLAvt PUjf/WHDktMQfdkcFpB6FFkbp93bDkKleT9hSKckeFNSOvKretlaeV0c17eDh/FE k48pC4lMC6K7A5FyJWsdxljh7SogMdDLWW4fAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUC4s8oQc0rK1HDU5jT6ehpcXGBGAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0M0czhvUWMwcksxSERV NWpUNmVocGNYR0JHQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QQwDQYJKoZIhvcNAQELBQADggEBAMeqUsTUnSZzmMUNRGIgjQou5vY5VjRl lGTG+Dm2K7ANjUs+z9xQs4uqeHn5eMTcADi5Onld0BUb7z7vh1yAGdGUK45laPXa N2sNHuSz+W2LcvSLFiCx3wAYX9qVHQWGSnHEm0cACAaKcS6HQU8UgV7scii02a6d aMiazlxnUg5jlteCr6xuCvK9/tcgSaoo0WkceD8bPwkuYziTGovyqFkUhxuwIBDc ttYVxUaC7Jp0LluRGibUZIu/W9kttOfxUA73/H5luOFx8+gqO6pl71c7jLQb65M/ gmoh+6lXjlY+TIgbpUFXOfYylUIjegb2e22u9yKxP9jJGItUdb8bCNk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:23 2025 by rpki-client