$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa File: XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa (raw, json) Hash identifier: /aMlqden7HQCQC55SNShHbOjCkkdS/x+Tt9qbrtCg80= Subject key identifier: 5D:45:2E:01:73:52:5F:F3:EA:DC:8D:0F:52:28:AF:F0:B4:48:6D:E7 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 182A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa Signing time: Fri 17 Jan 2025 01:24:41 +0000 ROA not before: Fri 17 Jan 2025 01:24:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6186 (0x182a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5D452E0173525FF3EADC8D0F5228AFF0B4486DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:bb:e2:17:e3:e9:e5:aa:7c:24:48:48:54: 4a:26:e3:94:d1:6b:ed:b8:a4:f0:ca:bd:e4:0d:e0: f8:b9:91:cb:c1:fd:cd:0c:4d:df:6f:4b:9e:99:c2: fa:cd:9b:6a:03:eb:f5:d2:b3:a3:72:bb:3b:f6:c4: 20:a3:f5:37:9a:bb:ec:c8:5b:a4:7a:44:c9:c8:27: 7d:5c:6f:c6:e8:28:8d:eb:db:9c:5a:b3:b1:c8:b5: 7d:f7:f4:4b:7f:fd:be:ce:c2:b6:3e:5d:03:b9:e5: 79:08:30:17:95:ae:54:e7:ad:45:19:38:c8:36:60: 50:f5:d2:a7:a1:50:54:2c:c9:2a:b5:59:a7:64:3f: 3b:8a:2c:79:5a:8f:de:6d:46:74:25:94:40:18:cd: 0d:72:dd:0b:17:44:1c:0d:ae:97:ec:fc:97:74:d4: 43:22:a1:c0:f7:5f:18:92:84:2d:10:5f:d4:03:6d: d2:4f:94:ed:5f:a0:fb:2f:ee:e2:f3:85:cc:36:af: 7a:3b:1a:29:0c:ec:9d:51:8e:39:81:cf:2d:dc:b5: 94:0c:f2:cc:82:9d:f6:11:a6:bd:f3:5b:7b:e1:c6: 9a:dc:38:b8:ee:d9:00:99:e4:54:25:12:55:d7:ac: 3b:a4:2e:6a:25:ea:db:99:8b:b2:72:0d:c5:da:46: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:45:2E:01:73:52:5F:F3:EA:DC:8D:0F:52:28:AF:F0:B4:48:6D:E7 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.13.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b1:1e:79:63:45:4c:de:e4:0d:09:cd:f0:f7:29:2e:83:95: 82:83:95:a3:e1:57:39:10:35:56:40:97:02:68:42:4b:b8:82: 86:98:c8:45:35:86:b5:3d:2c:ab:07:e2:f4:be:f7:0d:0e:20: f9:d1:29:92:3c:2a:b4:e1:1e:88:7f:90:bd:db:2a:59:f6:9a: 3d:a2:7d:bb:7d:55:9d:b7:f3:7c:77:42:7a:f5:56:e6:8d:ae: e3:80:2f:ce:3f:d6:67:e5:60:81:3b:7d:e2:0c:40:41:eb:14: 99:af:dd:6c:4b:35:82:c3:39:05:e3:0b:6f:a8:d0:da:47:4a: 62:c0:e6:4f:51:51:07:1e:f2:8f:e1:1f:e4:92:9b:f1:41:6c: b1:ea:db:c1:db:da:2e:70:27:e6:51:dd:22:1c:b4:6f:6d:f3: 0d:12:e3:3a:fd:f6:a3:37:62:96:36:83:89:b9:b8:81:d1:58: 7d:8b:38:89:b5:41:db:5d:21:58:e6:d5:3f:38:26:37:7f:d2: 21:65:df:15:24:a7:fd:23:8c:87:5b:13:b1:16:ff:c4:1a:5d: 97:f3:2b:0e:91:ae:3f:e1:31:9d:54:26:58:48:e6:91:a7:30: 17:77:8a:a3:00:0b:e2:e8:67:34:e1:91:59:9d:a3:b3:e2:a5: c6:73:1e:30 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVENDUyRTAxNzM1MjVG RjNFQURDOEQwRjUyMjhBRkYwQjQ0ODZERTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzUbviF+Pp5ap8JEhIVEom45TRa+24pPDKveQN4Pi5kcvB/c0M Td9vS56ZwvrNm2oD6/XSs6Nyuzv2xCCj9Teau+zIW6R6RMnIJ31cb8boKI3r25xa s7HItX339Et//b7OwrY+XQO55XkIMBeVrlTnrUUZOMg2YFD10qehUFQsySq1Wadk PzuKLHlaj95tRnQllEAYzQ1y3QsXRBwNrpfs/Jd01EMiocD3XxiShC0QX9QDbdJP lO1foPsv7uLzhcw2r3o7GikM7J1RjjmBzy3ctZQM8syCnfYRpr3zW3vhxprcOLju 2QCZ5FQlElXXrDukLmol6tuZi7JyDcXaRpb5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXUUuAXNSX/Pq3I0PUiiv8LRIbecwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1hVVXVBWE5TWF9QcTNJ MFBVaWl2OExSSWJlYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3Q0wDQYJKoZIhvcNAQELBQADggEBADyxHnljRUze5A0JzfD3KS6DlYKDlaPh VzkQNVZAlwJoQku4goaYyEU1hrU9LKsH4vS+9w0OIPnRKZI8KrThHoh/kL3bKln2 mj2ifbt9VZ2383x3Qnr1VuaNruOAL84/1mflYIE7feIMQEHrFJmv3WxLNYLDOQXj C2+o0NpHSmLA5k9RUQce8o/hH+SSm/FBbLHq28Hb2i5wJ+ZR3SIctG9t8w0S4zr9 9qM3YpY2g4m5uIHRWH2LOIm1QdtdIVjm1T84Jjd/0iFl3xUkp/0jjIdbE7EW/8Qa XZfzKw6Rrj/hMZ1UJlhI5pGnMBd3iqMAC+LoZzThkVmdo7PipcZzHjA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:12 2025 by rpki-client