$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa File: Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa (raw, json) Hash identifier: V8Hg16fUpRzSliHJtySREgc77zm+zvwlnT5P4X7pkZ8= Subject key identifier: 4E:DE:93:A8:81:92:CB:EB:27:F5:EA:17:B3:C4:79:C4:DF:6D:05:EB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18B6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa Signing time: Fri 17 Jan 2025 01:25:27 +0000 ROA not before: Fri 17 Jan 2025 01:25:27 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6326 (0x18b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:27 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4EDE93A88192CBEB27F5EA17B3C479C4DF6D05EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:5e:a5:e4:ff:5f:44:53:76:67:64:1d:59: 9f:f1:84:3b:6a:2d:9f:6c:0d:30:3b:34:47:ce:2e: 6f:34:b1:09:39:df:ed:28:2f:6f:20:5e:03:08:4f: 2d:8d:0d:4f:ce:10:51:fd:cf:0f:f4:19:bd:96:93: 2e:97:11:af:28:d1:4c:19:73:0f:29:f6:a8:df:1b: 41:5e:ed:b9:17:e6:14:74:9c:0b:20:d4:f8:a8:05: 57:62:b1:68:0a:be:49:7f:bc:2a:ea:c8:58:14:b2: 6e:f5:89:a0:dd:9c:90:b0:c6:c2:ad:f2:20:0b:1e: 0c:b4:6a:a8:9c:3f:bd:c3:38:8c:b0:d8:77:4e:69: 4b:02:e0:c4:5a:51:47:81:00:d6:f5:6e:57:47:b7: 1b:d9:08:44:ef:0a:8f:e8:11:93:d2:08:88:e2:b8: 2b:9a:46:4d:99:a4:5d:29:33:2d:4e:58:72:ea:dd: 8e:fa:94:97:20:96:c7:0c:96:00:e0:b1:e9:e9:82: b6:43:9f:aa:17:c1:e8:4e:ae:2a:5f:fa:a6:be:8e: b5:22:1d:ff:e3:b8:93:c7:b1:69:1b:53:67:a2:83: 1d:53:8e:32:aa:ad:8a:3c:d1:47:e3:a6:34:63:65: 9d:9b:65:e3:8a:86:0d:23:51:b9:25:98:23:48:24: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DE:93:A8:81:92:CB:EB:27:F5:EA:17:B3:C4:79:C4:DF:6D:05:EB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Tt6TqIGSy-sn9eoXs8R5xN9tBes.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.40.0/22 Signature Algorithm: sha256WithRSAEncryption a7:73:45:a6:e5:ce:45:ba:b6:21:e6:73:fb:b5:3d:4e:02:af: 0f:de:04:30:fb:bf:60:d4:c4:bd:32:9c:9d:ff:1e:96:cd:31: 37:04:aa:9e:0a:f8:7a:f0:23:b0:ec:ee:6e:da:16:75:3f:17: 76:39:a0:d2:05:64:21:cb:21:f0:96:04:80:d7:f0:00:44:2d: cf:ed:e8:52:c6:75:e5:2b:db:eb:be:5f:c3:75:b5:5b:55:b0: a4:00:bb:ff:b1:a5:f0:40:00:fe:63:65:a0:a2:f7:11:64:7b: 2c:e5:32:66:5e:ec:65:7d:42:f3:07:57:58:86:d7:94:ba:68: ed:ac:93:1d:0b:4c:11:79:9b:9b:47:a0:76:c5:3e:be:9d:3d: fe:cf:22:b4:34:f7:70:3e:a2:ea:25:cc:a7:50:95:a2:1f:e2: 6f:df:23:44:b3:c1:77:c7:87:ee:67:69:48:7c:e4:77:40:57: 76:2d:50:71:c2:69:8c:c2:fe:7c:35:32:81:1f:45:47:74:5b: 83:72:03:e3:de:21:05:b0:f1:28:31:38:6a:58:33:3c:81:74: fb:57:d0:f7:cb:cc:f5:cf:b4:29:65:55:97:a8:47:ad:bd:9c: f5:10:d5:42:9d:c6:95:d8:ee:d9:54:4c:fa:a7:cb:ca:b9:8b: 4e:cd:82:63 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRFREU5M0E4ODE5MkNC RUIyN0Y1RUExN0IzQzQ3OUM0REY2RDA1RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpYV6l5P9fRFN2Z2QdWZ/xhDtqLZ9sDTA7NEfOLm80sQk53+0o L28gXgMITy2NDU/OEFH9zw/0Gb2Wky6XEa8o0UwZcw8p9qjfG0Fe7bkX5hR0nAsg 1PioBVdisWgKvkl/vCrqyFgUsm71iaDdnJCwxsKt8iALHgy0aqicP73DOIyw2HdO aUsC4MRaUUeBANb1bldHtxvZCETvCo/oEZPSCIjiuCuaRk2ZpF0pMy1OWHLq3Y76 lJcglscMlgDgsenpgrZDn6oXwehOripf+qa+jrUiHf/juJPHsWkbU2eigx1TjjKq rYo80UfjpjRjZZ2bZeOKhg0jUbklmCNIJLsBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUTt6TqIGSy+sn9eoXs8R5xN9tBeswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1R0NlRxSUdTeS1zbjll b1hzOFI1eE45dEJlcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SgwDQYJKoZIhvcNAQELBQADggEBAKdzRablzkW6tiHmc/u1PU4Crw/eBDD7 v2DUxL0ynJ3/HpbNMTcEqp4K+HrwI7Ds7m7aFnU/F3Y5oNIFZCHLIfCWBIDX8ABE Lc/t6FLGdeUr2+u+X8N1tVtVsKQAu/+xpfBAAP5jZaCi9xFkeyzlMmZe7GV9QvMH V1iG15S6aO2skx0LTBF5m5tHoHbFPr6dPf7PIrQ093A+ouolzKdQlaIf4m/fI0Sz wXfHh+5naUh85HdAV3YtUHHCaYzC/nw1MoEfRUd0W4NyA+PeIQWw8SgxOGpYMzyB dPtX0PfLzPXPtCllVZeoR629nPUQ1UKdxpXY7tlUTPqny8q5i07NgmM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:32 2025 by rpki-client