$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XtrNbuaLu57HDt_1kYWbmxreOhI.roa File: XtrNbuaLu57HDt_1kYWbmxreOhI.roa (raw, json) Hash identifier: 3XHQdme6YsqMopG8w9UO3r4WEwT4zKArdAHI7OKXZ4w= Subject key identifier: 5E:DA:CD:6E:E6:8B:BB:9E:C7:0E:DF:F5:91:85:9B:9B:1A:DE:3A:12 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18C1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XtrNbuaLu57HDt_1kYWbmxreOhI.roa Signing time: Fri 17 Jan 2025 01:25:31 +0000 ROA not before: Fri 17 Jan 2025 01:25:31 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.220.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6337 (0x18c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:31 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5EDACD6EE68BBB9EC70EDFF591859B9B1ADE3A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:33:de:22:b6:7a:5f:0e:58:27:6c:e0:e7: a4:01:da:25:55:77:7e:aa:04:66:86:0b:c4:72:ba: 7e:65:b8:1b:60:34:42:de:2b:fd:4c:af:f1:7f:71: 2d:6a:19:69:75:58:86:ec:4d:5e:74:f8:c9:e0:65: ec:44:02:4d:32:2f:57:55:42:85:3a:6b:b1:26:c4: b0:eb:15:1d:6d:75:92:db:f8:f8:12:0f:81:a8:61: 15:ab:cf:92:d2:9e:4f:b5:fc:41:a9:c1:1b:2d:ae: 60:fd:92:a4:e7:5c:21:20:b5:8e:4f:b1:ba:10:53: 85:b2:79:46:76:f9:0a:af:21:52:c0:7a:c7:fc:fd: bf:3f:26:96:76:ae:40:8d:34:1b:eb:d9:bb:74:5a: 5c:b3:6b:16:15:7b:f0:d3:bb:c2:d0:63:59:4c:35: 52:9e:ce:82:69:cc:e8:54:9a:71:62:fa:1a:8f:d7: d0:97:23:83:c0:a1:39:43:23:af:2e:78:01:d0:05: a0:80:d5:69:81:07:9c:03:d3:15:e3:9a:26:06:6d: 46:67:ac:d1:04:36:d4:c1:1d:f1:40:71:ff:f0:59: 18:88:f3:da:73:41:95:b6:07:ae:17:e3:6a:3c:b6: 91:fd:8c:2a:5c:16:32:5b:3f:34:12:28:a6:ae:ad: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DA:CD:6E:E6:8B:BB:9E:C7:0E:DF:F5:91:85:9B:9B:1A:DE:3A:12 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XtrNbuaLu57HDt_1kYWbmxreOhI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.250.0/24 Signature Algorithm: sha256WithRSAEncryption 47:2d:3a:ee:d2:10:08:e5:d9:b1:92:fb:23:6a:8f:cb:65:76: 49:e6:fc:71:86:d7:65:f4:09:85:8d:e3:84:49:3f:5d:93:1f: 87:f8:3a:ab:7d:e5:8c:1c:94:85:06:73:19:bb:13:31:e0:bb: 18:0b:95:cf:86:b0:8d:07:c9:19:3d:4f:3e:0c:37:a0:b3:61: 2a:75:bf:e5:bb:1a:ad:89:3b:2e:64:f3:64:37:c4:7e:b6:84: 57:32:6e:41:86:ea:11:94:7b:2a:50:19:eb:2a:3e:57:fd:42: 1e:08:1c:a9:90:49:1a:5a:62:a9:47:3b:d5:5a:ea:87:f2:be: c8:3e:12:42:d8:8c:b8:88:4c:15:2a:1a:6d:6b:37:aa:b7:1a: 52:ee:2b:72:f7:0b:20:87:5b:41:3d:91:f8:db:5c:e3:0d:cb: b0:de:84:e4:29:13:00:18:98:cd:13:94:f8:a1:4c:b4:7c:18: 9a:fd:ce:3c:ce:c4:6f:67:44:22:e6:f2:d8:88:3a:7a:ed:f3: aa:af:fa:12:15:4a:f7:9a:ba:09:e7:74:b7:1b:6d:59:15:24: 68:2c:a5:62:46:cf:e4:9e:c1:7b:1d:d4:d6:14:3f:6b:3a:a5: b3:f3:23:f3:7e:9e:df:1d:05:19:dd:64:44:e7:05:d7:b9:ab: 76:19:9a:3b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVFREFDRDZFRTY4QkJC OUVDNzBFREZGNTkxODU5QjlCMUFERTNBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCg9zPeIrZ6Xw5YJ2zg56QB2iVVd36qBGaGC8Ryun5luBtgNELe K/1Mr/F/cS1qGWl1WIbsTV50+MngZexEAk0yL1dVQoU6a7EmxLDrFR1tdZLb+PgS D4GoYRWrz5LSnk+1/EGpwRstrmD9kqTnXCEgtY5PsboQU4WyeUZ2+QqvIVLAesf8 /b8/JpZ2rkCNNBvr2bt0WlyzaxYVe/DTu8LQY1lMNVKezoJpzOhUmnFi+hqP19CX I4PAoTlDI68ueAHQBaCA1WmBB5wD0xXjmiYGbUZnrNEENtTBHfFAcf/wWRiI89pz QZW2B64X42o8tpH9jCpcFjJbPzQSKKaurcvtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUXtrNbuaLu57HDt/1kYWbmxreOhIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1h0ck5idWFMdTU3SER0 XzFrWVdibXhyZU9oSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PowDQYJKoZIhvcNAQELBQADggEBAEctOu7SEAjl2bGS+yNqj8tldknm/HGG 12X0CYWN44RJP12TH4f4Oqt95YwclIUGcxm7EzHguxgLlc+GsI0HyRk9Tz4MN6Cz YSp1v+W7Gq2JOy5k82Q3xH62hFcybkGG6hGUeypQGesqPlf9Qh4IHKmQSRpaYqlH O9Va6ofyvsg+EkLYjLiITBUqGm1rN6q3GlLuK3L3CyCHW0E9kfjbXOMNy7DehOQp EwAYmM0TlPihTLR8GJr9zjzOxG9nRCLm8tiIOnrt86qv+hIVSveaugnndLcbbVkV JGgspWJGz+SewXsd1NYUP2s6pbPzI/N+nt8dBRndZETnBde5q3YZmjs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:25 2025 by rpki-client