$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/RFFl6m-GbsjBvHf6TRQRizlkS7s.roa File: RFFl6m-GbsjBvHf6TRQRizlkS7s.roa (raw, json) Hash identifier: duSL4PUCLrmqPFzCUU3T0Huw1DiHvSkzeO9cV+t5+wI= Subject key identifier: 44:51:65:EA:6F:86:6E:C8:C1:BC:77:FA:4D:14:11:8B:39:64:4B:BB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1899 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RFFl6m-GbsjBvHf6TRQRizlkS7s.roa Signing time: Fri 17 Jan 2025 01:25:18 +0000 ROA not before: Fri 17 Jan 2025 01:25:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6297 (0x1899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=445165EA6F866EC8C1BC77FA4D14118B39644BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:69:64:b5:af:4d:d4:6d:9a:35:eb:8e:ff: 16:7a:ce:69:ba:1d:b2:68:aa:7b:09:04:4e:0a:1b: e6:dd:d3:d7:74:3d:ff:f4:cc:34:f5:5f:53:4f:f9: 00:69:a4:e5:d2:60:b0:ed:f9:3d:3a:09:e4:59:5d: a8:51:0e:bd:f0:6d:1f:5e:d2:1d:07:5b:e3:d0:3b: 35:c3:d5:b3:81:7e:04:79:00:5d:b7:2e:0c:45:93: 98:6d:a7:ae:84:9b:c2:a3:46:e9:32:46:06:be:9b: 24:65:3f:d0:07:71:62:bc:17:9f:ce:1f:4c:01:9d: 10:32:3e:0a:2a:b2:c8:63:57:31:cf:a3:5f:68:27: 7e:27:09:1d:c4:bb:61:28:56:6b:bb:49:7a:23:3f: 46:ff:31:65:fb:bb:dc:05:4f:18:d8:b0:b5:5c:7b: a3:56:d2:1d:93:48:78:0e:e8:1b:1b:4c:b2:4a:c1: e1:eb:18:4b:8a:b3:8f:df:43:19:d7:80:6f:fc:87: ee:c1:d4:f8:b2:07:c4:18:e7:52:b9:a3:e4:26:d1: 72:c4:23:53:80:15:4c:72:56:b6:6b:e4:d7:b1:08: bc:83:01:c8:2c:06:66:0d:21:13:43:28:b3:f5:8e: 6b:81:b9:98:11:31:e6:dd:24:f6:88:d0:fd:bb:f3: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:51:65:EA:6F:86:6E:C8:C1:BC:77:FA:4D:14:11:8B:39:64:4B:BB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/RFFl6m-GbsjBvHf6TRQRizlkS7s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.2.0/24 Signature Algorithm: sha256WithRSAEncryption 16:db:31:cd:27:f4:af:c3:1c:83:b5:d1:3f:42:a7:4a:75:5d: 87:c8:25:6c:19:9c:2f:1d:fb:73:8c:1c:51:2b:c5:1c:af:b1: 25:15:1d:81:51:d4:c2:03:8e:df:b5:db:1e:72:80:07:80:05: e9:8b:86:35:4b:6b:f8:e0:90:64:1a:89:29:9b:f9:9f:a0:d7: 7a:87:30:8c:5c:86:2a:55:b4:37:b8:ed:7d:0b:c3:47:ca:ca: 94:05:0e:ed:83:da:f3:06:7d:c1:62:ea:35:5d:a4:7f:1e:72: 8c:bd:7f:4b:df:00:43:4c:7b:49:60:a5:be:2f:86:9d:c3:c9: 84:7c:c6:e1:6b:55:52:2e:59:b0:d7:b1:61:d6:54:57:17:2a: 82:ad:b3:47:e6:37:a9:aa:f5:70:02:e1:02:26:39:2a:70:98: 54:24:4c:a0:0d:d4:52:03:83:de:10:ed:be:74:0e:60:b0:b9: 43:b4:82:63:1c:a1:a8:3f:7e:41:a1:6e:68:6e:e2:19:bb:33: 3b:66:12:fb:0d:ae:f1:4d:64:55:b8:c5:cd:3f:07:6a:4d:60: b6:57:92:10:f8:45:f3:29:8c:c8:58:c7:d7:bb:6b:9b:7e:83: 75:e9:d7:d1:ad:5e:91:fe:d5:29:79:63:b5:a9:f4:1e:8a:b0: bf:fa:93:9e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ0NTE2NUVBNkY4NjZF QzhDMUJDNzdGQTREMTQxMThCMzk2NDRCQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIJGlkta9N1G2aNeuO/xZ6zmm6HbJoqnsJBE4KG+bd09d0Pf/0 zDT1X1NP+QBppOXSYLDt+T06CeRZXahRDr3wbR9e0h0HW+PQOzXD1bOBfgR5AF23 LgxFk5htp66Em8KjRukyRga+myRlP9AHcWK8F5/OH0wBnRAyPgoqsshjVzHPo19o J34nCR3Eu2EoVmu7SXojP0b/MWX7u9wFTxjYsLVce6NW0h2TSHgO6BsbTLJKweHr GEuKs4/fQxnXgG/8h+7B1PiyB8QY51K5o+Qm0XLEI1OAFUxyVrZr5NexCLyDAcgs BmYNIRNDKLP1jmuBuZgRMebdJPaI0P2788fZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQURFFl6m+GbsjBvHf6TRQRizlkS7swHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1JGRmw2bS1HYnNqQnZI ZjZUUlFSaXpsa1M3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QIwDQYJKoZIhvcNAQELBQADggEBABbbMc0n9K/DHIO10T9Cp0p1XYfIJWwZ nC8d+3OMHFErxRyvsSUVHYFR1MIDjt+12x5ygAeABemLhjVLa/jgkGQaiSmb+Z+g 13qHMIxchipVtDe47X0Lw0fKypQFDu2D2vMGfcFi6jVdpH8ecoy9f0vfAENMe0lg pb4vhp3DyYR8xuFrVVIuWbDXsWHWVFcXKoKts0fmN6mq9XAC4QImOSpwmFQkTKAN 1FIDg94Q7b50DmCwuUO0gmMcoag/fkGhbmhu4hm7MztmEvsNrvFNZFW4xc0/B2pN YLZXkhD4RfMpjMhYx9e7a5t+g3Xp19GtXpH+1Sl5Y7Wp9B6KsL/6k54= -----END CERTIFICATE-----Generated at Sat Apr 26 14:36:48 2025 by rpki-client