$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa File: R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa (raw, json) Hash identifier: I+SWMfJyw+xhNVVctHJRRCXcqcs0QrjLvPj7U6NuH/A= Subject key identifier: 47:DA:4D:2F:2D:CC:04:AD:D0:41:5D:00:52:EE:66:93:C5:E4:03:8A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1841 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa Signing time: Fri 17 Jan 2025 01:24:48 +0000 ROA not before: Fri 17 Jan 2025 01:24:48 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6209 (0x1841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:48 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=47DA4D2F2DCC04ADD0415D0052EE6693C5E4038A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:e6:80:09:76:a5:15:f5:b5:f8:9d:5d:f6: fa:cc:a8:bf:b2:6c:fe:b5:ac:09:59:b7:4b:45:31: 4b:ef:cd:b3:24:21:8f:1c:a0:a2:bb:c7:14:3c:a8: 39:9a:be:85:e6:df:40:e2:9c:b5:70:ee:04:96:52: b1:b6:a7:cd:f9:45:07:e8:49:f9:2f:d1:fa:e8:bf: 5a:62:e7:c5:14:1e:80:1b:d6:4b:2e:3e:d2:89:bb: 5e:c0:18:95:b3:7a:1e:c5:79:8c:0b:ea:d4:f9:42: b9:2d:b7:e2:3f:29:71:8d:cd:e1:a8:46:d6:fb:3e: 24:68:cb:64:94:88:2f:ab:6f:31:fb:66:f5:64:f9: 4f:96:8b:f5:2a:ba:90:66:15:42:f3:f8:1f:9d:8c: cc:47:63:4e:3b:fd:dc:6c:60:d7:ed:73:6e:0d:fe: 9b:6e:6a:e2:b4:82:64:3a:3c:b6:1c:99:71:a2:89: 67:6a:50:a6:76:d6:89:02:57:41:5d:c0:c9:1a:a9: a4:6e:1c:b4:58:e4:2f:dd:d3:d1:c5:e5:22:b8:df: c4:7e:38:78:c3:33:1c:49:58:b9:de:c2:c3:8f:b8: f4:c0:20:f3:3b:be:92:e8:56:6f:56:93:d1:19:44: 13:31:04:a0:71:2c:17:1b:6c:bb:10:2e:b2:d3:a4: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DA:4D:2F:2D:CC:04:AD:D0:41:5D:00:52:EE:66:93:C5:E4:03:8A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.0.0/24 Signature Algorithm: sha256WithRSAEncryption 81:36:ab:3d:c9:20:2c:d4:51:25:d8:9a:32:7c:53:37:d0:2d: c7:c7:5c:0c:5b:56:57:3c:5f:43:8e:90:88:b0:90:f5:d8:6c: 33:82:bb:bf:f1:d0:b5:1e:52:d7:d7:de:2e:18:d5:9a:56:b9: 7f:5e:12:fc:99:ee:f2:b1:6d:8b:6b:58:4f:5f:7d:da:7a:80: 3f:7f:eb:39:96:2d:78:5a:9d:34:56:62:5e:a4:62:73:40:1b: 17:32:83:6b:ee:6a:6a:d4:ae:bd:cc:72:05:7e:da:b5:ba:10: 2a:35:f8:bb:5d:d3:c1:32:92:0f:09:ab:7a:88:d6:36:13:88: 5d:b6:8f:98:f8:09:55:28:9a:e5:ae:c6:24:ae:85:ee:bb:a4: 52:d1:54:a2:79:ce:0a:0e:f7:bd:32:f6:52:34:b4:5e:bd:af: 80:f2:05:1e:94:8e:79:11:83:03:70:16:7e:06:7e:3d:60:40: 76:22:0b:ad:c4:0b:aa:39:7a:82:3f:d3:cc:16:f4:19:82:63: 29:43:61:4f:23:41:53:c8:a0:9d:b7:d5:a9:61:b0:23:6f:c3: ce:9f:b6:13:91:4b:24:63:a4:77:05:1f:86:a8:1a:32:ca:7b: a3:5c:cc:4a:f2:07:53:bb:37:d9:34:ae:4e:96:8e:a5:45:83: 55:ef:4c:13 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ3REE0RDJGMkRDQzA0 QUREMDQxNUQwMDUyRUU2NjkzQzVFNDAzOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL8OaACXalFfW1+J1d9vrMqL+ybP61rAlZt0tFMUvvzbMkIY8c oKK7xxQ8qDmavoXm30DinLVw7gSWUrG2p835RQfoSfkv0frov1pi58UUHoAb1ksu PtKJu17AGJWzeh7FeYwL6tT5Qrktt+I/KXGNzeGoRtb7PiRoy2SUiC+rbzH7ZvVk +U+Wi/UqupBmFULz+B+djMxHY047/dxsYNftc24N/ptuauK0gmQ6PLYcmXGiiWdq UKZ21okCV0FdwMkaqaRuHLRY5C/d09HF5SK438R+OHjDMxxJWLnewsOPuPTAIPM7 vpLoVm9Wk9EZRBMxBKBxLBcbbLsQLrLTpMGHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUR9pNLy3MBK3QQV0AUu5mk8XkA4owHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1I5cE5MeTNNQkszUVFW MEFVdTVtazhYa0E0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QAwDQYJKoZIhvcNAQELBQADggEBAIE2qz3JICzUUSXYmjJ8UzfQLcfHXAxb Vlc8X0OOkIiwkPXYbDOCu7/x0LUeUtfX3i4Y1ZpWuX9eEvyZ7vKxbYtrWE9ffdp6 gD9/6zmWLXhanTRWYl6kYnNAGxcyg2vuamrUrr3McgV+2rW6ECo1+Ltd08Eykg8J q3qI1jYTiF22j5j4CVUomuWuxiSuhe67pFLRVKJ5zgoO970y9lI0tF69r4DyBR6U jnkRgwNwFn4Gfj1gQHYiC63EC6o5eoI/08wW9BmCYylDYU8jQVPIoJ231alhsCNv w86fthORSyRjpHcFH4aoGjLKe6NczEryB1O7N9k0rk6WjqVFg1XvTBM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:26 2025 by rpki-client