$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa File: NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa (raw, json) Hash identifier: FmAYO8d5yAuCtdbCugxWbgBBEt/0Wzn/qRnibtSEE0c= Subject key identifier: 35:1D:58:7B:91:7C:04:D2:F3:4F:9B:87:01:08:72:5C:74:89:D9:CA Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18C6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa Signing time: Fri 17 Jan 2025 01:25:33 +0000 ROA not before: Fri 17 Jan 2025 01:25:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6342 (0x18c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=351D587B917C04D2F34F9B870108725C7489D9CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:dd:cc:3d:03:23:56:be:37:db:14:47:a4: b1:a4:a6:e8:ab:94:ee:f3:c1:6a:ad:78:69:93:9d: db:a2:b6:75:f7:dc:3d:17:81:a5:41:b7:55:ea:28: fe:d8:ef:99:13:7b:af:f9:2d:14:17:15:95:d7:60: d4:79:15:5b:e0:a6:66:d3:ed:ff:a7:8e:d6:50:96: 5c:89:2b:e2:f3:2b:14:79:4c:08:5d:0f:f2:56:d0: 57:ae:fd:a4:96:75:61:b1:64:07:e6:1c:ec:f5:ba: ac:0c:bd:4e:9e:eb:62:4b:84:b6:1e:cb:82:a0:68: 6a:5c:d9:32:85:dc:80:ad:eb:41:b2:92:26:29:2c: 99:d4:99:0b:49:69:b9:3e:92:93:7d:a2:97:e9:54: 81:c7:87:99:76:6f:38:2c:44:11:f1:e8:4f:a4:af: 71:94:ae:c1:43:0c:b7:87:49:ee:5e:2b:fc:99:3c: 0e:e9:3c:14:e4:ca:08:fa:3b:12:5e:1d:39:3e:51: 24:18:e2:dd:74:68:df:5c:2b:79:cd:1f:b7:e0:5b: c3:a2:b8:c7:f3:83:1d:04:36:db:f7:a5:7c:5e:6c: d9:21:20:bb:c0:71:e4:77:4c:2f:74:9e:05:78:7a: 56:50:2f:96:1c:ae:6c:7c:41:0e:08:46:c6:4a:97: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1D:58:7B:91:7C:04:D2:F3:4F:9B:87:01:08:72:5C:74:89:D9:CA X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption c8:ae:24:bd:50:c0:af:1b:e7:d7:fe:ff:ed:29:9c:ef:1a:ec: aa:96:01:34:80:93:ad:40:00:ff:f1:91:39:01:13:e5:79:59: 9f:b9:9b:b6:e6:1f:19:0a:1b:7e:68:c0:ff:1d:7d:f5:02:71: 9f:da:bd:16:14:5e:ca:00:ac:4f:00:51:fc:6b:98:55:53:24: 48:1d:90:24:77:f1:0d:9b:37:35:91:f7:6e:34:91:5f:a4:42: 7f:28:92:8c:db:8c:1c:ad:48:04:11:f5:54:97:cd:b5:8f:91: 69:11:2c:04:64:43:02:4d:5a:5f:8d:19:bb:d1:9e:42:30:6c: b6:8d:8e:b9:b0:6a:25:ab:5e:bb:bc:52:92:56:e7:b5:3a:c3: 66:74:d1:2b:4e:ba:c1:80:b0:65:5b:f5:05:ea:85:b6:ca:ff: e1:4f:36:3a:5f:29:72:71:d8:0b:05:35:b0:c9:f8:6a:66:d2: cd:b5:56:3d:97:43:fa:33:ca:6f:3b:c8:3c:e5:46:87:a6:32: 51:47:c3:15:9b:9d:02:03:a0:bd:53:10:38:c5:be:ea:52:c9: fa:1d:14:d6:da:d9:78:c5:56:49:a7:d2:24:ac:ca:63:0d:45: 31:7b:ed:8f:77:2b:95:67:69:af:46:ef:9e:b1:cc:13:c1:77: d7:11:45:5c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM1MUQ1ODdCOTE3QzA0 RDJGMzRGOUI4NzAxMDg3MjVDNzQ4OUQ5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0SN3MPQMjVr432xRHpLGkpuirlO7zwWqteGmTnduitnX33D0X gaVBt1XqKP7Y75kTe6/5LRQXFZXXYNR5FVvgpmbT7f+njtZQllyJK+LzKxR5TAhd D/JW0Feu/aSWdWGxZAfmHOz1uqwMvU6e62JLhLYey4KgaGpc2TKF3ICt60GykiYp LJnUmQtJabk+kpN9opfpVIHHh5l2bzgsRBHx6E+kr3GUrsFDDLeHSe5eK/yZPA7p PBTkygj6OxJeHTk+USQY4t10aN9cK3nNH7fgW8OiuMfzgx0ENtv3pXxebNkhILvA ceR3TC90ngV4elZQL5Ycrmx8QQ4IRsZKlw+fAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUNR1Ye5F8BNLzT5uHAQhyXHSJ2cowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L05SMVllNUY4Qk5MelQ1 dUhBUWh5WEhTSjJjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3VwwDQYJKoZIhvcNAQELBQADggEBAMiuJL1QwK8b59f+/+0pnO8a7KqWATSA k61AAP/xkTkBE+V5WZ+5m7bmHxkKG35owP8dffUCcZ/avRYUXsoArE8AUfxrmFVT JEgdkCR38Q2bNzWR9240kV+kQn8okozbjBytSAQR9VSXzbWPkWkRLARkQwJNWl+N GbvRnkIwbLaNjrmwaiWrXru8UpJW57U6w2Z00StOusGAsGVb9QXqhbbK/+FPNjpf KXJx2AsFNbDJ+Gpm0s21Vj2XQ/ozym87yDzlRoemMlFHwxWbnQIDoL1TEDjFvupS yfodFNba2XjFVkmn0iSsymMNRTF77Y93K5Vnaa9G756xzBPBd9cRRVw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:35 2025 by rpki-client