$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ZeM700FQQa0RWyEAlgr45HbbCGE.roa File: ZeM700FQQa0RWyEAlgr45HbbCGE.roa (raw, json) Hash identifier: IGoX45tp0mK384qIZ0ALQ+WGybCGVuMmFQSJshCwLBc= Subject key identifier: 65:E3:3B:D3:41:50:41:AD:11:5B:21:00:96:0A:F8:E4:76:DB:08:61 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZeM700FQQa0RWyEAlgr45HbbCGE.roa Signing time: Fri 17 Jan 2025 01:25:23 +0000 ROA not before: Fri 17 Jan 2025 01:25:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6313 (0x18a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=65E33BD3415041AD115B2100960AF8E476DB0861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:1f:4d:26:04:0c:5e:d6:4c:d8:f7:98:e6: ac:ac:9b:41:76:65:e2:50:f3:c7:ef:02:64:30:8d: 3a:7b:27:54:46:c7:f2:44:d8:f6:c4:19:6c:04:6d: e6:83:77:ad:fb:cc:8b:2f:d9:d4:f8:4f:61:db:eb: 11:5c:49:c6:00:c1:a1:1b:62:e2:70:76:82:8d:3f: 1a:5b:24:35:47:0b:c7:9c:c9:fa:80:0c:f9:61:a5: ce:e2:77:93:92:6d:b4:8e:de:7e:5e:76:57:2f:7e: 31:94:40:e1:11:36:93:5f:5e:d5:46:40:db:b1:6a: 59:47:97:e8:0d:1b:21:c7:de:d8:36:a3:8e:9f:68: 89:fb:30:3f:32:b0:62:e0:7c:d8:16:a5:f6:28:59: 21:a5:81:7c:d5:d9:ef:37:07:17:65:b8:32:32:5b: c5:54:26:2f:3d:23:e5:16:b9:75:f1:07:03:d2:1e: 3b:10:d2:39:2a:5c:0c:41:a7:c4:f4:c7:33:54:ad: b2:84:0c:7b:b3:8c:8f:81:a2:c6:51:5f:4f:ba:40: 5c:27:78:35:32:fc:1c:9f:40:f4:c9:d8:82:3a:45: 69:c3:af:4d:ca:bb:f8:56:27:fc:c6:5c:97:e2:9d: 24:c9:fa:1d:d1:3c:95:39:9c:cb:b0:26:cf:9b:9d: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E3:3B:D3:41:50:41:AD:11:5B:21:00:96:0A:F8:E4:76:DB:08:61 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZeM700FQQa0RWyEAlgr45HbbCGE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.47.0/24 Signature Algorithm: sha256WithRSAEncryption 60:b0:70:f8:61:b1:08:44:8a:b7:d0:f6:6b:56:3d:07:71:67: 25:27:84:db:fd:8d:41:17:9c:76:aa:97:26:53:00:22:ad:11: 44:a9:f8:78:4f:79:49:4b:a3:b5:37:ab:29:3b:ee:cb:ff:b9: ff:b9:8a:45:33:50:f1:64:46:88:0a:c5:85:22:9f:4d:89:f2: 3a:e6:db:8a:15:16:27:9a:a1:e8:7f:b1:0e:23:86:2b:4e:b6: 78:20:e7:7b:90:3e:58:81:dd:2e:be:a7:78:8b:7f:63:d6:a4: 31:54:36:cf:d3:a3:16:d2:55:b6:08:01:77:3f:b6:35:2a:9d: f9:b8:c7:a0:08:ba:2a:27:8d:de:58:5e:d2:5c:01:bc:b1:49: 89:d3:ea:b1:fd:a2:9a:ec:39:22:0d:8b:fd:c5:95:45:bd:2c: e0:7b:19:6c:df:89:aa:74:e4:cf:f4:99:8d:1c:4f:dc:5f:20: 02:8c:5f:00:53:bf:d8:cc:aa:f8:52:db:c4:2a:99:47:49:7e: b2:5d:6e:b9:52:96:b6:c2:e7:65:da:df:b8:89:b6:b5:08:2e: 3b:dd:37:c3:4e:74:d0:1f:7e:b6:5b:e8:e3:8b:c4:1c:15:64: 8b:22:25:4a:4f:f0:89:26:56:9d:43:41:6c:32:7c:2c:58:c2: e3:c9:35:9c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY1RTMzQkQzNDE1MDQx QUQxMTVCMjEwMDk2MEFGOEU0NzZEQjA4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmlx9NJgQMXtZM2PeY5qysm0F2ZeJQ88fvAmQwjTp7J1RGx/JE 2PbEGWwEbeaDd637zIsv2dT4T2Hb6xFcScYAwaEbYuJwdoKNPxpbJDVHC8ecyfqA DPlhpc7id5OSbbSO3n5edlcvfjGUQOERNpNfXtVGQNuxallHl+gNGyHH3tg2o46f aIn7MD8ysGLgfNgWpfYoWSGlgXzV2e83BxdluDIyW8VUJi89I+UWuXXxBwPSHjsQ 0jkqXAxBp8T0xzNUrbKEDHuzjI+BosZRX0+6QFwneDUy/ByfQPTJ2II6RWnDr03K u/hWJ/zGXJfinSTJ+h3RPJU5nMuwJs+bnSYxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZeM700FQQa0RWyEAlgr45HbbCGEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1plTTcwMEZRUWEwUld5 RUFsZ3I0NUhiYkNHRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3S8wDQYJKoZIhvcNAQELBQADggEBAGCwcPhhsQhEirfQ9mtWPQdxZyUnhNv9 jUEXnHaqlyZTACKtEUSp+HhPeUlLo7U3qyk77sv/uf+5ikUzUPFkRogKxYUin02J 8jrm24oVFieaoeh/sQ4jhitOtngg53uQPliB3S6+p3iLf2PWpDFUNs/ToxbSVbYI AXc/tjUqnfm4x6AIuionjd5YXtJcAbyxSYnT6rH9oprsOSINi/3FlUW9LOB7GWzf iap05M/0mY0cT9xfIAKMXwBTv9jMqvhS28QqmUdJfrJdbrlSlrbC52Xa37iJtrUI LjvdN8NOdNAffrZb6OOLxBwVZIsiJUpP8IkmVp1DQWwyfCxYwuPJNZw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:48 2025 by rpki-client