$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/J7gFHNst-19CENBbt69T70jxjB8.roa File: J7gFHNst-19CENBbt69T70jxjB8.roa (raw, json) Hash identifier: 0rXJucwoLc7aLIrMSn3PnG+fx1J6SFzWBj9++34tyzY= Subject key identifier: 27:B8:05:1C:DB:2D:FB:5F:42:10:D0:5B:B7:AF:53:EF:48:F1:8C:1F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 188A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/J7gFHNst-19CENBbt69T70jxjB8.roa Signing time: Fri 17 Jan 2025 01:25:12 +0000 ROA not before: Fri 17 Jan 2025 01:25:12 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6282 (0x188a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:12 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=27B8051CDB2DFB5F4210D05BB7AF53EF48F18C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:05:b7:5e:4d:ce:e1:32:4c:60:10:1d:1e: b4:d8:25:5b:d3:1e:25:21:dd:c0:2d:5b:0b:f6:c8: ca:58:8a:94:0d:56:e6:23:38:cf:3e:f6:f7:57:25: 49:e5:32:49:4c:1d:12:b5:e4:98:91:49:55:24:b3: 00:d8:23:e6:fc:12:d6:69:05:c2:74:dd:e2:9d:54: b4:01:58:54:f9:f1:db:5c:12:4c:89:e4:06:0a:04: 38:73:8e:1c:69:b9:9b:1a:9b:84:5f:39:8b:f4:cf: 10:0d:ff:5b:ab:df:67:63:78:ed:cb:69:3d:ff:70: bd:73:de:40:68:71:9c:fa:17:d0:8d:c0:56:b2:f5: 8a:c1:d3:00:0f:d7:92:e4:a3:15:8b:d9:70:cc:b2: f1:16:da:de:e2:d4:8d:f0:84:e0:de:62:df:10:8e: 29:d2:41:d7:7f:3d:ea:4d:88:e1:db:3e:8f:7f:8f: 1a:81:10:4b:fb:c8:e8:54:3f:00:c8:80:59:bf:17: 6a:bf:9c:aa:bc:6d:e7:3d:ad:f6:57:b9:40:df:d7: 8c:3d:12:f4:96:de:da:9b:2c:9d:7a:da:57:60:3c: cc:49:2d:37:a5:4e:bc:61:95:04:4e:41:24:9e:e0: 84:91:33:9f:c8:56:4c:f0:d7:bd:be:9e:16:b4:7b: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:05:1C:DB:2D:FB:5F:42:10:D0:5B:B7:AF:53:EF:48:F1:8C:1F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/J7gFHNst-19CENBbt69T70jxjB8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.46.0/24 Signature Algorithm: sha256WithRSAEncryption db:e1:85:1b:bc:df:c9:d1:38:2b:a8:d4:da:07:2b:a7:38:01: f7:52:23:de:2f:64:ef:75:5f:15:15:e5:eb:df:48:a9:5a:62: 47:1c:84:c7:45:d3:18:3a:f1:9f:73:4f:b3:ff:86:bd:d3:5a: a4:5a:6c:95:80:27:eb:51:ce:37:3f:cb:8a:55:75:ea:fc:3c: 32:eb:f5:f2:cf:2a:55:4e:23:13:6c:5c:46:5a:14:0f:06:64: 87:66:72:a8:e5:e4:95:dc:1a:e3:c6:da:1b:98:8e:f0:44:19: b4:a3:21:63:01:9d:3e:32:a0:ef:87:cd:07:e6:fd:25:de:b1: 50:56:1d:f8:97:63:08:65:d5:57:0f:47:bb:1f:c7:b4:06:e4: c7:4c:62:c3:8b:88:20:fc:30:b1:14:96:84:b5:d3:2f:86:54: c6:37:70:22:cb:a9:6a:c9:37:b6:7c:0b:50:5f:28:09:e9:af: a7:91:9a:0f:a7:e0:e1:1c:5d:87:e1:99:7b:48:8a:5c:21:3c: ac:5d:5e:c3:be:c2:fc:d0:0a:5f:ea:f6:de:35:cf:d9:7e:fb: eb:8c:e5:1b:98:bc:82:32:1b:83:3c:80:9e:72:f0:01:89:4e: b3:7a:4b:4c:54:42:bf:03:3b:43:cf:c2:1a:af:30:b7:2f:4c: 08:32:e9:0f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI3QjgwNTFDREIyREZC NUY0MjEwRDA1QkI3QUY1M0VGNDhGMThDMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkEQW3Xk3O4TJMYBAdHrTYJVvTHiUh3cAtWwv2yMpYipQNVuYj OM8+9vdXJUnlMklMHRK15JiRSVUkswDYI+b8EtZpBcJ03eKdVLQBWFT58dtcEkyJ 5AYKBDhzjhxpuZsam4RfOYv0zxAN/1ur32djeO3LaT3/cL1z3kBocZz6F9CNwFay 9YrB0wAP15LkoxWL2XDMsvEW2t7i1I3whODeYt8QjinSQdd/PepNiOHbPo9/jxqB EEv7yOhUPwDIgFm/F2q/nKq8bec9rfZXuUDf14w9EvSW3tqbLJ162ldgPMxJLTel TrxhlQROQSSe4ISRM5/IVkzw172+nha0eze1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUJ7gFHNst+19CENBbt69T70jxjB8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0o3Z0ZITnN0LTE5Q0VO QmJ0NjlUNzBqeGpCOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3S4wDQYJKoZIhvcNAQELBQADggEBANvhhRu838nROCuo1NoHK6c4AfdSI94v ZO91XxUV5evfSKlaYkcchMdF0xg68Z9zT7P/hr3TWqRabJWAJ+tRzjc/y4pVder8 PDLr9fLPKlVOIxNsXEZaFA8GZIdmcqjl5JXcGuPG2huYjvBEGbSjIWMBnT4yoO+H zQfm/SXesVBWHfiXYwhl1VcPR7sfx7QG5MdMYsOLiCD8MLEUloS10y+GVMY3cCLL qWrJN7Z8C1BfKAnpr6eRmg+n4OEcXYfhmXtIilwhPKxdXsO+wvzQCl/q9t41z9l+ ++uM5RuYvIIyG4M8gJ5y8AGJTrN6S0xUQr8DO0PPwhqvMLcvTAgy6Q8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:09 2025 by rpki-client