$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa File: Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa (raw, json) Hash identifier: xrjAz0cXg9Km+8Uj7QIIH8QZpIm8hFDS9819Ta3qkfg= Subject key identifier: 39:ED:44:96:19:B5:03:47:E6:A0:DA:98:58:A1:A5:63:80:C4:72:59 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 181A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa Signing time: Fri 17 Jan 2025 01:24:35 +0000 ROA not before: Fri 17 Jan 2025 01:24:35 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6170 (0x181a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:35 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=39ED449619B50347E6A0DA9858A1A56380C47259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:44:98:4d:08:e0:46:63:91:47:24:bd:04: 39:13:b5:3d:f9:52:43:90:1a:91:e6:f3:06:a0:fd: a8:03:d3:76:9a:7f:77:44:82:5c:f9:fb:7e:c7:04: 6d:25:39:37:40:97:cd:2f:e7:a3:77:5e:68:3f:42: fb:b7:32:85:38:98:a1:10:a0:45:ce:b8:4f:46:2e: 5d:6f:52:8c:78:c9:39:2e:80:1e:49:55:12:5a:3f: 0b:c3:82:13:7d:20:e4:4c:63:70:0b:6a:3a:46:3a: 6f:15:57:57:01:94:e9:ef:c0:24:75:5d:e3:f6:ee: 21:fd:ff:43:32:7c:6b:f4:09:6c:23:a5:23:36:04: 21:20:ce:3b:d0:48:bc:14:ec:4a:a7:3f:b0:8e:31: a4:81:77:6d:e6:cb:06:6d:ff:cd:d3:86:70:46:74: c2:5e:8c:52:fd:3b:74:ec:6c:fb:45:6b:60:42:cb: 32:c9:9b:7b:4f:64:ed:83:b6:14:a8:b4:45:f0:c7: 15:df:48:e9:24:ca:d1:ec:a4:b3:2e:cf:1e:f5:d4: d9:f4:a2:70:49:ec:89:a7:04:64:6b:a2:94:a0:22: 21:79:a4:2a:f6:85:8b:5a:d3:e8:ca:d9:77:14:81: a3:3f:72:42:bf:f6:1b:e0:cc:aa:0e:06:4c:b7:f0: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:ED:44:96:19:B5:03:47:E6:A0:DA:98:58:A1:A5:63:80:C4:72:59 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Oe1Elhm1A0fmoNqYWKGlY4DEclk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.45.0/24 Signature Algorithm: sha256WithRSAEncryption 60:66:ee:d6:a3:4d:df:fe:30:00:57:21:eb:fd:ed:f4:ba:c5: 3c:66:e9:68:ca:a4:ff:ac:f3:bc:0d:e9:21:48:f5:3f:28:21: cd:1c:49:ec:63:17:da:05:26:5c:1d:ba:87:7d:26:c2:82:61: c5:0f:2c:67:3e:18:7d:85:38:37:0e:47:bb:e6:90:9d:e0:29: 3b:6d:71:a5:1d:aa:77:ac:50:3c:2a:d7:a7:74:3a:e7:da:81: 8c:d8:9c:27:ae:9a:5e:fb:35:c4:af:c1:8d:b3:70:b3:b3:c1: 23:f5:9c:dc:78:2a:02:1f:53:a3:32:3c:db:47:64:44:95:a8: 69:1a:7a:68:e0:f6:53:1b:40:0f:c0:9f:8d:ad:1d:b2:f6:3d: 12:fa:03:3c:81:c0:6f:65:86:b8:c4:70:4e:4a:49:db:a8:d7: 1b:2e:be:da:a5:da:f7:18:de:66:4e:c6:97:44:18:15:64:70: 64:72:97:67:7a:22:f0:a6:e5:b7:f0:89:d6:eb:2d:fa:ee:ce: db:ec:ab:22:90:ee:29:36:7b:73:41:d0:3d:46:41:04:c3:7d: f2:e0:07:11:04:71:85:0b:b1:eb:7b:46:d9:36:d6:b8:fe:e1: 02:ad:53:4b:9e:a3:03:a3:a0:cb:07:8e:3a:62:a4:e4:02:78: 87:32:48:f1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM5RUQ0NDk2MTlCNTAz NDdFNkEwREE5ODU4QTFBNTYzODBDNDcyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNjkSYTQjgRmORRyS9BDkTtT35UkOQGpHm8wag/agD03aaf3dE glz5+37HBG0lOTdAl80v56N3Xmg/Qvu3MoU4mKEQoEXOuE9GLl1vUox4yTkugB5J VRJaPwvDghN9IORMY3ALajpGOm8VV1cBlOnvwCR1XeP27iH9/0MyfGv0CWwjpSM2 BCEgzjvQSLwU7EqnP7COMaSBd23mywZt/83ThnBGdMJejFL9O3TsbPtFa2BCyzLJ m3tPZO2DthSotEXwxxXfSOkkytHspLMuzx711Nn0onBJ7ImnBGRropSgIiF5pCr2 hYta0+jK2XcUgaM/ckK/9hvgzKoOBky38LYbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUOe1Elhm1A0fmoNqYWKGlY4DEclkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L09lMUVsaG0xQTBmbW9O cVlXS0dsWTRERWNsay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3S0wDQYJKoZIhvcNAQELBQADggEBAGBm7tajTd/+MABXIev97fS6xTxm6WjK pP+s87wN6SFI9T8oIc0cSexjF9oFJlwduod9JsKCYcUPLGc+GH2FODcOR7vmkJ3g KTttcaUdqnesUDwq16d0OufagYzYnCeuml77NcSvwY2zcLOzwSP1nNx4KgIfU6My PNtHZESVqGkaemjg9lMbQA/An42tHbL2PRL6AzyBwG9lhrjEcE5KSduo1xsuvtql 2vcY3mZOxpdEGBVkcGRyl2d6IvCm5bfwidbrLfruztvsqyKQ7ik2e3NB0D1GQQTD ffLgBxEEcYULset7Rtk21rj+4QKtU0ueowOjoMsHjjpipOQCeIcySPE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:21 2025 by rpki-client