$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa File: Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa (raw, json) Hash identifier: 4QNq8d0VtB6oG2QwO/L+5ZkvkjUbj2rQQZaPMRUqq1U= Subject key identifier: 1A:1B:35:FB:D1:1A:95:23:18:37:CC:1F:75:6F:EA:13:FD:41:D6:69 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 184E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa Signing time: Fri 17 Jan 2025 01:24:53 +0000 ROA not before: Fri 17 Jan 2025 01:24:53 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6222 (0x184e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:53 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1A1B35FBD11A95231837CC1F756FEA13FD41D669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:44:fc:ca:8d:68:1e:96:fa:bf:44:e5:1f: 85:e7:bc:7c:04:5c:9d:28:51:34:43:cd:49:21:a0: 64:5a:be:8b:d4:be:a5:f4:64:2a:2c:a0:26:f7:ab: 1d:ed:f9:c7:1d:da:72:ee:07:c2:f7:5b:a3:2b:1e: 1a:65:f9:61:95:1b:a0:95:e6:fc:1e:29:c1:99:7c: 6d:c7:d2:c1:1c:38:cd:99:09:14:76:01:d8:05:8b: ff:ac:25:b9:43:b8:3c:81:6f:ca:80:03:25:3b:00: b9:12:cb:08:3f:27:ca:10:ff:3a:6a:24:e4:a6:ce: 43:e5:5e:eb:d3:95:d4:9d:90:ad:3f:e4:9b:32:55: 8f:9d:59:8c:4e:be:9b:a6:68:55:b1:35:e0:51:ea: 8a:5f:9d:3c:09:df:f7:c3:a2:d0:17:54:51:17:1d: c3:e7:1f:cd:bd:ac:3b:f8:04:8b:15:56:bc:05:26: 2d:9f:d8:00:cc:93:01:da:11:25:d4:ff:02:58:07: b5:0a:35:50:5f:41:8f:1c:51:e3:0d:13:b9:44:16: ca:88:1c:8b:fb:52:e0:89:32:bd:e8:1d:84:9e:f9: f1:5f:b8:89:87:86:f5:01:f8:fc:fb:05:76:9b:22: f5:f5:28:9a:a2:ce:30:47:7d:9d:05:34:49:39:24: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1B:35:FB:D1:1A:95:23:18:37:CC:1F:75:6F:EA:13:FD:41:D6:69 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Ghs1-9EalSMYN8wfdW_qE_1B1mk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.15.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:4a:ba:c8:a7:72:d7:00:4c:12:0a:bd:8b:1b:1b:a7:8f:ea: 37:53:72:24:ad:06:f9:02:cd:aa:1a:33:11:f0:38:eb:34:60: 8a:96:c7:b7:47:fa:a3:f5:bc:4f:ec:28:1d:af:c4:2a:fe:bd: dc:17:07:b7:c6:e0:eb:2c:6e:a3:74:01:86:80:da:71:90:58: 1e:7b:a7:b6:26:fe:92:a2:2d:51:c6:0a:4f:bb:f9:b0:82:b2: 95:ee:6c:7b:82:26:7a:f2:56:73:60:5a:c1:22:0b:6d:e2:0b: 96:d0:51:13:3a:42:e1:6d:ea:47:ba:b2:81:39:d6:bc:1d:52: 52:ba:40:0d:2a:20:90:11:43:ac:81:ca:b6:35:3d:77:db:9a: 8c:ea:51:2f:06:ef:28:31:22:54:90:4d:66:65:b1:c7:79:a9: 0a:77:1d:bc:8b:76:97:ca:7c:d3:de:34:4f:76:06:b1:70:6f: 3a:33:93:9d:7f:1f:4b:54:4e:4f:c9:cf:48:cf:d9:9f:b6:4b: 76:95:5c:a2:21:c3:57:10:a5:ac:35:e0:3b:27:ef:f1:ed:51: 9f:92:b4:05:c4:fb:d6:88:d7:0b:b0:97:51:2b:0c:75:e0:bf: d2:cc:c7:60:b5:6d:f0:ae:32:8c:a8:06:d7:b7:ae:cc:1c:3f: fc:8d:30:65 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFBMUIzNUZCRDExQTk1 MjMxODM3Q0MxRjc1NkZFQTEzRkQ0MUQ2NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKq0T8yo1oHpb6v0TlH4XnvHwEXJ0oUTRDzUkhoGRavovUvqX0 ZCosoCb3qx3t+ccd2nLuB8L3W6MrHhpl+WGVG6CV5vweKcGZfG3H0sEcOM2ZCRR2 AdgFi/+sJblDuDyBb8qAAyU7ALkSywg/J8oQ/zpqJOSmzkPlXuvTldSdkK0/5Jsy VY+dWYxOvpumaFWxNeBR6opfnTwJ3/fDotAXVFEXHcPnH829rDv4BIsVVrwFJi2f 2ADMkwHaESXU/wJYB7UKNVBfQY8cUeMNE7lEFsqIHIv7UuCJMr3oHYSe+fFfuImH hvUB+Pz7BXabIvX1KJqizjBHfZ0FNEk5JBMLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUGhs1+9EalSMYN8wfdW/qE/1B1mkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0doczEtOUVhbFNNWU44 d2ZkV19xRV8xQjFtay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3Q8wDQYJKoZIhvcNAQELBQADggEBAA1KusinctcATBIKvYsbG6eP6jdTciSt BvkCzaoaMxHwOOs0YIqWx7dH+qP1vE/sKB2vxCr+vdwXB7fG4OssbqN0AYaA2nGQ WB57p7Ym/pKiLVHGCk+7+bCCspXubHuCJnryVnNgWsEiC23iC5bQURM6QuFt6ke6 soE51rwdUlK6QA0qIJARQ6yByrY1PXfbmozqUS8G7ygxIlSQTWZlscd5qQp3HbyL dpfKfNPeNE92BrFwbzozk51/H0tUTk/Jz0jP2Z+2S3aVXKIhw1cQpaw14Dsn7/Ht UZ+StAXE+9aI1wuwl1ErDHXgv9LMx2C1bfCuMoyoBte3rswcP/yNMGU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:47 2025 by rpki-client