$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/WBf34_hMjoOqOaVD2oCSjUw2JoA.roa File: WBf34_hMjoOqOaVD2oCSjUw2JoA.roa (raw, json) Hash identifier: gcMt1D4BCIe79qQu52UFgaUR+ejWrsJU/GUCyiwuM2U= Subject key identifier: 58:17:F7:E3:F8:4C:8E:83:AA:39:A5:43:DA:80:92:8D:4C:36:26:80 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1877 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WBf34_hMjoOqOaVD2oCSjUw2JoA.roa Signing time: Fri 17 Jan 2025 01:25:05 +0000 ROA not before: Fri 17 Jan 2025 01:25:05 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 103.221.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6263 (0x1877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:05 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5817F7E3F84C8E83AA39A543DA80928D4C362680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:b6:2f:9b:54:a2:e8:84:2c:2e:98:35:eb: 52:94:e1:e2:fc:6e:1b:c4:4e:71:70:b0:de:6a:0a: a2:a3:05:78:c0:e0:3b:e7:a0:7a:bf:9b:50:51:21: c3:bb:4c:a5:d5:c9:a1:3b:f7:5c:0e:4d:13:fa:15: 36:fb:9e:65:a4:e6:92:e4:c8:89:e6:20:d5:6b:86: 8f:ed:be:21:3c:75:20:52:99:2c:c1:94:8a:a0:98: ba:d4:c6:78:90:03:bb:1a:ee:84:67:25:b7:15:2a: 9b:80:dd:4e:f2:d4:ac:cc:d2:fa:fe:87:c3:f2:da: dc:d7:67:ce:fe:df:f0:9c:88:09:cd:74:7d:36:18: 15:3e:33:21:7c:59:da:34:bb:4d:36:d1:be:0c:1c: e1:b5:5b:ae:ef:76:16:e5:e5:88:2d:da:04:3c:71: 1a:12:30:c0:6f:4c:53:eb:f7:8d:a9:23:8d:60:0d: 2a:0f:92:ba:d0:26:37:dd:d7:44:ef:d8:73:9f:82: 2d:e5:13:02:fa:83:d0:b7:63:21:a3:53:18:05:93: d3:3b:ac:90:8f:37:da:32:62:35:62:9b:14:3b:24: 05:ec:72:fb:24:bf:53:58:7e:8e:6e:ab:82:cc:49: 94:c8:40:77:a7:79:2b:9c:1f:6a:df:46:b2:88:ce: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:17:F7:E3:F8:4C:8E:83:AA:39:A5:43:DA:80:92:8D:4C:36:26:80 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/WBf34_hMjoOqOaVD2oCSjUw2JoA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.36.0/22 Signature Algorithm: sha256WithRSAEncryption 84:c4:37:e5:ea:c0:ae:5a:62:b5:41:fb:8a:f9:89:70:24:0b: 54:ae:0a:04:4d:f9:2b:95:f0:f6:5a:fb:0e:a6:4d:bf:7c:bf: 5c:77:c1:31:93:20:fc:b0:e4:51:81:2c:d7:4d:73:4d:7c:a5: 1e:dd:2e:96:cc:83:75:0e:dc:df:5f:1d:b0:83:bf:58:2e:b2: 2f:b1:69:54:92:01:c7:b3:72:af:34:b4:16:3e:d4:5b:94:77: bf:fc:ea:cb:cb:bf:0a:ae:db:fa:84:58:39:df:ec:3b:cf:ce: 9f:d8:9d:9c:41:58:19:22:df:e3:12:40:01:37:15:f8:4a:c3: 19:3f:77:d6:ce:ce:1c:43:60:a6:eb:83:96:f8:98:93:a1:03: 3b:7a:a4:f0:4f:f4:97:32:35:84:69:36:ee:91:15:a9:0a:ab: 42:09:03:e4:7a:b5:50:c5:77:3f:da:b3:7f:e8:ba:23:fb:fa: d8:1d:37:2f:d4:2b:5f:37:14:a4:39:34:b1:16:95:26:16:13: 5e:f8:a3:93:a8:a4:07:5e:2b:97:14:e2:51:e9:1a:df:10:ee: a1:77:f2:2b:01:7c:23:95:9f:93:0e:31:d7:ea:d8:00:3b:8b: 65:1f:2c:df:5c:5d:e5:79:69:4b:9c:69:5c:f7:03:dc:21:d9: 38:e5:e5:f9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU4MTdGN0UzRjg0QzhF ODNBQTM5QTU0M0RBODA5MjhENEMzNjI2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9f7Yvm1Si6IQsLpg161KU4eL8bhvETnFwsN5qCqKjBXjA4Dvn oHq/m1BRIcO7TKXVyaE791wOTRP6FTb7nmWk5pLkyInmINVrho/tviE8dSBSmSzB lIqgmLrUxniQA7sa7oRnJbcVKpuA3U7y1KzM0vr+h8Py2tzXZ87+3/CciAnNdH02 GBU+MyF8Wdo0u0020b4MHOG1W67vdhbl5Ygt2gQ8cRoSMMBvTFPr942pI41gDSoP krrQJjfd10Tv2HOfgi3lEwL6g9C3YyGjUxgFk9M7rJCPN9oyYjVimxQ7JAXscvsk v1NYfo5uq4LMSZTIQHeneSucH2rfRrKIztWvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUWBf34/hMjoOqOaVD2oCSjUw2JoAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1dCZjM0X2hNam9PcU9h VkQyb0NTalV3MkpvQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SQwDQYJKoZIhvcNAQELBQADggEBAITEN+XqwK5aYrVB+4r5iXAkC1SuCgRN +SuV8PZa+w6mTb98v1x3wTGTIPyw5FGBLNdNc018pR7dLpbMg3UO3N9fHbCDv1gu si+xaVSSAcezcq80tBY+1FuUd7/86svLvwqu2/qEWDnf7DvPzp/YnZxBWBki3+MS QAE3FfhKwxk/d9bOzhxDYKbrg5b4mJOhAzt6pPBP9JcyNYRpNu6RFakKq0IJA+R6 tVDFdz/as3/ouiP7+tgdNy/UK183FKQ5NLEWlSYWE174o5OopAdeK5cU4lHpGt8Q 7qF38isBfCOVn5MOMdfq2AA7i2UfLN9cXeV5aUucaVz3A9wh2Tjl5fk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:27 2025 by rpki-client