$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa File: NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa (raw, json) Hash identifier: nkiJCd+yeol2oVUclexpULjCZMpDeMZVVrFUaMVby+Q= Subject key identifier: 35:37:54:58:15:2C:D0:48:5F:DE:79:44:63:8E:DE:78:C4:41:6B:EA Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1865 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa Signing time: Fri 17 Jan 2025 01:25:01 +0000 ROA not before: Fri 17 Jan 2025 01:25:01 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6245 (0x1865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:01 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=35375458152CD0485FDE7944638EDE78C4416BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:12:b2:95:e9:61:cf:82:d9:72:67:fd:e8: 2f:3e:ce:85:e7:8c:f6:8b:08:94:77:63:04:b2:31: a5:e1:81:8a:f2:fe:91:22:b9:75:aa:6b:0c:74:38: f7:39:de:19:d7:52:36:29:77:71:ac:0b:cc:01:ae: a6:da:50:a6:61:55:0c:11:d1:ed:fd:03:34:bf:e2: df:b0:4f:26:d6:27:50:a6:42:ee:ac:80:6f:ab:8c: f5:e4:fb:ec:3e:13:fe:fc:9e:ed:c9:d2:f5:07:81: c6:4e:0a:d3:42:04:8a:bc:9f:d4:e8:7f:9f:cc:62: 15:c1:2f:0f:57:e0:ab:86:c0:b7:fb:a0:15:70:4a: e1:2a:33:96:28:ab:f3:71:de:69:8a:d9:0a:7d:0f: 70:e5:61:cc:ce:e4:42:f9:d3:d7:b4:ff:66:04:6b: ae:96:cf:01:c7:5b:c4:6f:37:54:19:81:af:c4:3e: 31:4b:3f:14:b1:e8:38:5c:16:76:ea:63:1f:28:7c: 9a:60:3b:1b:e1:f3:cc:2d:1b:46:7c:ff:c8:81:60: 3d:3d:69:a0:18:b3:88:69:e4:49:ab:26:b5:1c:cb: 05:40:77:ca:a5:ac:cd:82:1c:e3:54:6b:fd:94:74: 83:00:ae:b0:2e:ce:29:cd:e4:ae:90:c8:63:b5:ab: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:54:58:15:2C:D0:48:5F:DE:79:44:63:8E:DE:78:C4:41:6B:EA X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NTdUWBUs0Ehf3nlEY47eeMRBa-o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.51.0/24 Signature Algorithm: sha256WithRSAEncryption 12:bf:15:c8:d7:e1:bc:7e:aa:d7:1d:8e:7b:62:97:49:d8:49: a9:df:77:37:7c:e6:aa:15:4e:a1:d1:64:06:1f:25:6b:01:7d: 8b:0c:e1:48:79:90:dc:f2:05:fb:86:8e:bd:dd:c0:4e:c6:58: 33:20:00:87:25:a8:e4:61:40:90:5e:73:fd:a1:06:a8:ba:0f: f3:8b:32:cd:66:7e:3c:f1:5e:c8:77:f7:f7:0c:25:69:e0:e7: 94:f1:ae:94:27:d3:27:72:92:36:ae:00:c5:19:92:d8:f3:41: c2:25:48:f9:0f:b1:24:73:99:2a:f1:7a:1b:9c:97:6f:f2:09: 5e:3e:5d:fa:bc:11:aa:a7:1d:5f:75:90:89:b8:cb:fc:e0:02: d8:be:84:8a:4d:c0:fd:1b:b5:c3:45:40:16:26:19:44:9f:50: 13:74:d1:f5:4d:0f:d0:72:5c:b9:43:52:9a:93:c9:6a:d9:f1: 9c:5d:d9:1b:45:71:2a:55:ee:0e:e0:5a:57:e3:26:12:4f:3b: 15:03:44:df:24:77:1f:09:1d:c3:aa:35:96:81:fd:1c:ec:68: 94:63:a4:11:3a:f3:dc:c4:81:22:d3:77:20:0e:21:ae:83:4d: 93:a6:32:eb:1d:7b:56:e8:97:90:cb:44:7f:85:9a:ee:17:46: df:80:8f:ee -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM1Mzc1NDU4MTUyQ0Qw NDg1RkRFNzk0NDYzOEVERTc4QzQ0MTZCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtVxKylelhz4LZcmf96C8+zoXnjPaLCJR3YwSyMaXhgYry/pEi uXWqawx0OPc53hnXUjYpd3GsC8wBrqbaUKZhVQwR0e39AzS/4t+wTybWJ1CmQu6s gG+rjPXk++w+E/78nu3J0vUHgcZOCtNCBIq8n9Tof5/MYhXBLw9X4KuGwLf7oBVw SuEqM5Yoq/Nx3mmK2Qp9D3DlYczO5EL509e0/2YEa66WzwHHW8RvN1QZga/EPjFL PxSx6DhcFnbqYx8ofJpgOxvh88wtG0Z8/8iBYD09aaAYs4hp5EmrJrUcywVAd8ql rM2CHONUa/2UdIMArrAuzinN5K6QyGO1qwZHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUNTdUWBUs0Ehf3nlEY47eeMRBa+owHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L05UZFVXQlVzMEVoZjNu bEVZNDdlZU1SQmEtby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TMwDQYJKoZIhvcNAQELBQADggEBABK/FcjX4bx+qtcdjntil0nYSanfdzd8 5qoVTqHRZAYfJWsBfYsM4Uh5kNzyBfuGjr3dwE7GWDMgAIclqORhQJBec/2hBqi6 D/OLMs1mfjzxXsh39/cMJWng55TxrpQn0ydykjauAMUZktjzQcIlSPkPsSRzmSrx ehucl2/yCV4+Xfq8EaqnHV91kIm4y/zgAti+hIpNwP0btcNFQBYmGUSfUBN00fVN D9ByXLlDUpqTyWrZ8Zxd2RtFcSpV7g7gWlfjJhJPOxUDRN8kdx8JHcOqNZaB/Rzs aJRjpBE689zEgSLTdyAOIa6DTZOmMusde1bol5DLRH+Fmu4XRt+Aj+4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:30 2025 by rpki-client