$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa File: GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa (raw, json) Hash identifier: 928dRUj1J55CfAKqNLbSCwzEROLy17GMVjfadn4TcTk= Subject key identifier: 18:97:FA:A7:EE:4E:C0:95:D0:33:02:8D:6F:14:AA:41:19:A3:75:74 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1832 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa Signing time: Fri 17 Jan 2025 01:24:43 +0000 ROA not before: Fri 17 Jan 2025 01:24:43 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4812 IP address blocks: 103.24.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6194 (0x1832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:43 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1897FAA7EE4EC095D033028D6F14AA4119A37574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:c6:91:d3:31:7b:8d:a0:7f:3d:60:e2:dc: 5f:f3:c4:40:d8:6a:c6:54:6b:07:88:ec:88:0a:38: cb:d4:76:f9:c5:a6:64:92:e4:1c:75:5f:6d:92:9e: 62:84:0a:d8:26:0c:92:86:b2:96:e9:a2:d6:b9:bd: 81:58:b8:f8:fb:84:2c:d8:94:8c:71:65:ec:03:49: 99:38:a3:be:8e:61:d7:9d:e7:c3:71:ff:71:36:81: c7:a9:23:12:b2:3b:d4:0e:b8:31:93:2f:ed:0c:e0: 32:5f:3a:37:0a:2f:93:d8:02:ad:17:14:af:19:b7: 64:04:71:14:19:af:43:ae:29:24:00:16:cc:f2:92: 5f:77:7a:15:a8:11:c0:52:ec:a9:1f:68:9d:8e:36: d5:ec:6a:3c:b9:0a:c0:45:dc:5e:a8:a6:aa:20:7a: 9c:28:d4:91:70:a8:82:d2:96:4d:b3:0c:d4:de:85: a3:dd:88:93:1d:12:d2:5d:e7:6b:13:7d:5d:fc:ee: 56:c5:20:7b:18:3a:76:e2:57:e9:6d:9f:11:48:98: 96:5a:86:67:2c:4f:c5:cf:0a:55:6b:2e:b9:79:a5: fc:58:3d:a6:89:27:d0:84:ee:d6:37:82:69:14:e3: d9:d1:af:31:4a:cb:21:98:07:b0:fc:d1:52:6e:28: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:97:FA:A7:EE:4E:C0:95:D0:33:02:8D:6F:14:AA:41:19:A3:75:74 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GJf6p-5OwJXQMwKNbxSqQRmjdXQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.118.0/23 Signature Algorithm: sha256WithRSAEncryption 40:3b:d1:a2:87:dd:55:61:99:54:67:75:6c:d6:38:e3:9a:59: 73:6d:ab:9d:03:50:93:5a:15:52:bb:6e:1d:da:47:69:8d:4e: a6:3e:fb:fb:40:8a:46:87:4f:7e:1d:7a:7d:e2:e7:89:b7:6d: 7d:21:da:9a:50:49:af:04:44:83:75:4a:33:23:98:e5:ef:0a: 3b:d0:77:d2:36:06:ae:09:bc:97:9f:3a:68:d7:5a:28:51:0c: 79:0c:49:56:4a:b2:47:83:ad:29:61:23:a5:70:75:e6:85:d5: 68:08:ec:31:c3:29:94:e7:1a:ea:62:5f:b2:ea:3e:20:8c:70: f1:e2:3b:38:a2:f3:b7:2f:80:ac:20:fd:87:d7:1d:ba:c7:fa: 45:b3:01:0c:0d:6a:21:0a:f8:b2:0c:e5:1b:ba:f2:fd:78:7f: 7d:80:4e:47:bd:02:e2:3d:dd:2e:98:fb:24:2d:15:00:0c:f2: 1a:ec:ff:c0:eb:27:ee:b5:60:05:f4:1e:92:3c:2d:e2:f4:e2: 5f:50:7a:05:92:de:ba:1b:b2:81:b1:c3:72:e4:e0:2e:0c:e5: 89:ad:92:3e:67:7c:53:c3:55:d0:19:3c:52:3e:d0:5d:56:50: fa:c7:f5:ee:e0:ac:f2:cb:cb:83:76:dd:0c:14:1e:5d:b9:aa: e1:5e:43:94 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE4OTdGQUE3RUU0RUMw OTVEMDMzMDI4RDZGMTRBQTQxMTlBMzc1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWCsaR0zF7jaB/PWDi3F/zxEDYasZUaweI7IgKOMvUdvnFpmSS 5Bx1X22SnmKECtgmDJKGspbpota5vYFYuPj7hCzYlIxxZewDSZk4o76OYded58Nx /3E2gcepIxKyO9QOuDGTL+0M4DJfOjcKL5PYAq0XFK8Zt2QEcRQZr0OuKSQAFszy kl93ehWoEcBS7KkfaJ2ONtXsajy5CsBF3F6opqogepwo1JFwqILSlk2zDNTehaPd iJMdEtJd52sTfV387lbFIHsYOnbiV+ltnxFImJZahmcsT8XPClVrLrl5pfxYPaaJ J9CE7tY3gmkU49nRrzFKyyGYB7D80VJuKKUtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUGJf6p+5OwJXQMwKNbxSqQRmjdXQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0dKZjZwLTVPd0pYUU13 S05ieFNxUVJtamRYUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnGHYwDQYJKoZIhvcNAQELBQADggEBAEA70aKH3VVhmVRndWzWOOOaWXNtq50D UJNaFVK7bh3aR2mNTqY++/tAikaHT34den3i54m3bX0h2ppQSa8ERIN1SjMjmOXv CjvQd9I2Bq4JvJefOmjXWihRDHkMSVZKskeDrSlhI6VwdeaF1WgI7DHDKZTnGupi X7LqPiCMcPHiOzii87cvgKwg/YfXHbrH+kWzAQwNaiEK+LIM5Ru68v14f32ATke9 AuI93S6Y+yQtFQAM8hrs/8DrJ+61YAX0HpI8LeL04l9QegWS3robsoGxw3Lk4C4M 5Ymtkj5nfFPDVdAZPFI+0F1WUPrH9e7grPLLy4N23QwUHl25quFeQ5Q= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:11 2025 by rpki-client