$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/LMa8Y408l_kCc0SiMEKw6aDTAP4.roa File: LMa8Y408l_kCc0SiMEKw6aDTAP4.roa (raw, json) Hash identifier: RtkY88vRlEqU05qZtvZ6x4i1I9hjw3vP2DomW8c9/CM= Subject key identifier: 2C:C6:BC:63:8D:3C:97:F9:02:73:44:A2:30:42:B0:E9:A0:D3:00:FE Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1829 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/LMa8Y408l_kCc0SiMEKw6aDTAP4.roa Signing time: Fri 17 Jan 2025 01:24:41 +0000 ROA not before: Fri 17 Jan 2025 01:24:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6185 (0x1829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2CC6BC638D3C97F9027344A23042B0E9A0D300FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:78:73:27:b6:3d:d1:ca:8b:cc:ba:db:8f: 57:82:23:16:5b:11:02:1d:74:b1:cb:6c:20:64:58: 98:ff:3c:b1:21:87:2e:62:cc:47:d1:3d:e4:65:13: 8a:88:f6:b8:f9:f8:92:9a:37:a7:30:24:be:2b:ea: 47:e5:7d:1a:66:84:13:4b:d6:7c:3b:5e:6c:37:83: 15:af:ed:db:0b:2d:54:02:59:1b:75:8d:cb:19:e8: ad:58:32:30:c8:25:5c:8e:c0:06:d4:19:32:d2:af: 4d:93:21:12:1a:f1:3d:ee:99:d6:5f:04:d7:ab:c6: 7b:cb:c7:28:09:05:f6:e7:f1:10:69:91:2c:36:3c: a1:ff:2b:37:33:ff:5f:bb:2c:89:5a:ac:ca:b2:db: 53:e7:7f:0f:8a:ec:20:77:3b:95:a5:58:6e:4a:1d: 87:ad:7b:5e:1d:11:5f:2f:37:f3:d2:4a:60:50:80: a3:8c:1e:12:01:77:58:1a:d6:3c:bc:24:a3:d8:f3: 1e:4f:35:57:9f:0c:e3:4f:3f:34:e4:9d:8b:25:f6: 34:fc:43:1f:7f:9c:c9:c1:9a:09:28:e9:af:22:6d: 72:bd:00:1b:53:63:92:76:04:eb:d0:5c:29:e3:d3: be:72:f9:fd:e9:af:c7:91:d5:80:3d:e6:88:85:a5: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C6:BC:63:8D:3C:97:F9:02:73:44:A2:30:42:B0:E9:A0:D3:00:FE X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/LMa8Y408l_kCc0SiMEKw6aDTAP4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.6.0/24 Signature Algorithm: sha256WithRSAEncryption b0:9b:44:38:1c:8d:8e:ee:2f:cd:07:58:9b:8d:f6:20:99:25: 4d:f0:1a:13:02:00:b9:61:57:3c:43:29:e7:e2:c8:b9:c8:94: b0:45:a9:7a:58:71:15:7c:63:c4:54:ef:bd:77:fd:48:87:a2: 34:01:8c:ed:a5:74:b0:c2:a1:d3:b0:ef:0b:6a:9b:0a:47:ba: 30:0a:23:73:9e:0c:75:4f:3f:d8:c5:33:84:f4:f8:ef:77:39: fe:3a:c2:b5:66:1f:45:6e:7e:02:30:80:c9:94:4a:41:42:3e: 7d:c2:66:16:ac:61:2b:32:9c:6d:8f:8b:96:8e:72:87:f5:68: af:08:90:4a:21:2e:90:95:bf:34:61:32:9f:75:85:fc:8a:6b: 07:73:0d:0a:5a:ed:ed:20:6c:3c:d6:6b:6e:b2:79:b0:0f:f7: ac:57:f1:36:08:4a:1a:1d:bc:ef:6e:02:bd:f8:73:20:4f:4a: e1:90:fb:b8:5a:a5:05:1a:1f:4c:8c:8c:44:86:f8:9e:ee:a8: 8c:ec:a3:89:a3:da:9f:ad:44:4d:cf:1c:90:b8:c0:00:49:fc: 5f:a7:2d:b7:7a:06:71:20:01:36:75:4d:5a:a7:5b:69:01:e9: c2:8d:55:59:ec:a1:3d:ee:fd:5e:cf:e2:8c:27:82:c1:e4:63: dd:31:0e:50 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJDQzZCQzYzOEQzQzk3 RjkwMjczNDRBMjMwNDJCMEU5QTBEMzAwRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFlHhzJ7Y90cqLzLrbj1eCIxZbEQIddLHLbCBkWJj/PLEhhy5i zEfRPeRlE4qI9rj5+JKaN6cwJL4r6kflfRpmhBNL1nw7Xmw3gxWv7dsLLVQCWRt1 jcsZ6K1YMjDIJVyOwAbUGTLSr02TIRIa8T3umdZfBNerxnvLxygJBfbn8RBpkSw2 PKH/Kzcz/1+7LIlarMqy21Pnfw+K7CB3O5WlWG5KHYete14dEV8vN/PSSmBQgKOM HhIBd1ga1jy8JKPY8x5PNVefDONPPzTknYsl9jT8Qx9/nMnBmgko6a8ibXK9ABtT Y5J2BOvQXCnj075y+f3pr8eR1YA95oiFpen9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQULMa8Y408l/kCc0SiMEKw6aDTAP4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0xNYThZNDA4bF9rQ2Mw U2lNRUt3NmFEVEFQNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QYwDQYJKoZIhvcNAQELBQADggEBALCbRDgcjY7uL80HWJuN9iCZJU3wGhMC ALlhVzxDKefiyLnIlLBFqXpYcRV8Y8RU7713/UiHojQBjO2ldLDCodOw7wtqmwpH ujAKI3OeDHVPP9jFM4T0+O93Of46wrVmH0VufgIwgMmUSkFCPn3CZhasYSsynG2P i5aOcof1aK8IkEohLpCVvzRhMp91hfyKawdzDQpa7e0gbDzWa26yebAP96xX8TYI ShodvO9uAr34cyBPSuGQ+7hapQUaH0yMjESG+J7uqIzso4mj2p+tRE3PHJC4wABJ /F+nLbd6BnEgATZ1TVqnW2kB6cKNVVnsoT3u/V7P4owngsHkY90xDlA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:35 2025 by rpki-client