$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Xml9HuFeJBKwLKAdCWjb897Bfm8.roa File: Xml9HuFeJBKwLKAdCWjb897Bfm8.roa (raw, json) Hash identifier: pEJa0IXsqRx7owg9FDw/UULbeiJUMuRl9YSKWzdgO94= Subject key identifier: 5E:69:7D:1E:E1:5E:24:12:B0:2C:A0:1D:09:68:DB:F3:DE:C1:7E:6F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 189A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Xml9HuFeJBKwLKAdCWjb897Bfm8.roa Signing time: Fri 17 Jan 2025 01:25:18 +0000 ROA not before: Fri 17 Jan 2025 01:25:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6298 (0x189a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5E697D1EE15E2412B02CA01D0968DBF3DEC17E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:ba:db:c4:c0:25:3e:0d:c1:d1:9b:0f:59: 9a:c9:e7:ec:5f:0a:38:c4:0a:f3:9e:b2:39:43:42: 35:b2:9e:81:c8:77:3b:3c:dd:89:a3:e1:94:1c:15: bf:e6:eb:b1:38:de:6b:59:65:b9:f5:7f:13:c2:b2: 55:ef:01:a6:1f:ad:ed:60:48:a5:36:89:c8:1c:32: 78:6b:fa:35:63:39:f2:53:d1:98:e6:a2:27:0d:32: 7f:54:3a:e4:fc:be:44:3c:65:f2:68:6b:82:de:02: 7f:5d:8e:96:9a:1c:d4:da:f1:a5:66:36:32:3e:00: 81:cb:b0:d2:b3:78:58:69:b1:9e:e2:3c:e1:af:3a: 9c:e7:ef:55:2f:01:a6:16:e9:6c:3a:a0:2f:db:13: 3c:d3:eb:ec:22:2f:50:6e:10:f0:ce:8a:6d:05:20: d3:00:eb:2f:fb:8f:26:3c:76:20:ce:17:86:ec:96: 0b:4c:05:74:f0:d4:5a:a1:5d:80:ad:df:1c:ef:6f: 18:27:67:71:4c:74:88:42:56:0c:30:3d:bc:5a:19: 28:b8:fb:83:05:64:a4:10:23:df:10:1b:f0:49:ab: 2f:9f:6d:34:aa:c7:40:a2:5d:ba:50:67:fe:6a:0d: 73:53:65:e5:53:9d:4c:39:97:3e:60:15:1f:ac:73: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:69:7D:1E:E1:5E:24:12:B0:2C:A0:1D:09:68:DB:F3:DE:C1:7E:6F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Xml9HuFeJBKwLKAdCWjb897Bfm8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.24.0/24 Signature Algorithm: sha256WithRSAEncryption a3:48:05:4f:59:dc:1d:57:7e:bd:14:62:78:b3:8b:8e:7a:f6: 04:a0:c6:41:fc:08:c7:29:9b:5f:70:2b:6a:f7:7e:de:5b:b3: a0:52:41:32:9f:81:2f:3d:2a:f5:f1:f3:ef:e7:39:ef:7d:ac: 32:ab:8f:24:92:33:ba:ea:a4:92:cc:5a:a1:88:e6:50:69:0f: 70:52:4d:16:17:7c:5e:d3:19:54:2b:d5:d9:38:66:fd:0b:cf: 2c:1e:ff:7d:e1:c5:4a:8f:07:1a:b0:94:50:5d:9a:01:b6:44: da:0e:3f:d0:91:7c:b1:fe:eb:b4:fd:32:2c:94:04:4c:b1:37: ed:ec:c4:bf:bf:36:b5:ec:b7:f8:69:7f:0d:4c:ee:bd:61:d3: 6b:71:bc:1e:a9:01:a0:3d:49:d1:9f:23:6a:23:ad:13:c1:b6: 30:22:25:46:f9:15:22:cd:d2:d4:38:a3:04:ee:5b:24:4d:eb: 4c:26:a1:7a:84:fa:4b:23:07:01:45:71:a7:42:18:0b:6e:07: 39:9e:a6:2a:be:55:fc:90:97:96:1c:8a:14:2e:1c:8b:64:5d: b3:02:71:f2:f5:34:c6:a8:e6:ad:1f:ed:17:7b:ad:b7:b3:33: c8:29:4e:24:54:07:21:77:a2:dd:7d:8b:e3:04:78:22:40:7b: f6:dc:69:4b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVFNjk3RDFFRTE1RTI0 MTJCMDJDQTAxRDA5NjhEQkYzREVDMTdFNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGUrrbxMAlPg3B0ZsPWZrJ5+xfCjjECvOesjlDQjWynoHIdzs8 3Ymj4ZQcFb/m67E43mtZZbn1fxPCslXvAaYfre1gSKU2icgcMnhr+jVjOfJT0Zjm oicNMn9UOuT8vkQ8ZfJoa4LeAn9djpaaHNTa8aVmNjI+AIHLsNKzeFhpsZ7iPOGv Opzn71UvAaYW6Ww6oC/bEzzT6+wiL1BuEPDOim0FINMA6y/7jyY8diDOF4bslgtM BXTw1FqhXYCt3xzvbxgnZ3FMdIhCVgwwPbxaGSi4+4MFZKQQI98QG/BJqy+fbTSq x0CiXbpQZ/5qDXNTZeVTnUw5lz5gFR+sc7GXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXml9HuFeJBKwLKAdCWjb897Bfm8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1htbDlIdUZlSkJLd0xL QWRDV2piODk3QmZtOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RgwDQYJKoZIhvcNAQELBQADggEBAKNIBU9Z3B1Xfr0UYnizi4569gSgxkH8 CMcpm19wK2r3ft5bs6BSQTKfgS89KvXx8+/nOe99rDKrjySSM7rqpJLMWqGI5lBp D3BSTRYXfF7TGVQr1dk4Zv0Lzywe/33hxUqPBxqwlFBdmgG2RNoOP9CRfLH+67T9 MiyUBEyxN+3sxL+/NrXst/hpfw1M7r1h02txvB6pAaA9SdGfI2ojrRPBtjAiJUb5 FSLN0tQ4owTuWyRN60wmoXqE+ksjBwFFcadCGAtuBzmepiq+VfyQl5YcihQuHItk XbMCcfL1NMao5q0f7Rd7rbezM8gpTiRUByF3ot19i+MEeCJAe/bcaUs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:22 2025 by rpki-client