$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ZjlruEDhcg90J1ECbtAdywghg2w.roa File: ZjlruEDhcg90J1ECbtAdywghg2w.roa (raw, json) Hash identifier: EvnaJUQSCaw9R+229iqiVFTtpJbLVCS+v0H29mAudv4= Subject key identifier: 66:39:6B:B8:40:E1:72:0F:74:27:51:02:6E:D0:1D:CB:08:21:83:6C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1907 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZjlruEDhcg90J1ECbtAdywghg2w.roa Signing time: Fri 17 Jan 2025 01:25:58 +0000 ROA not before: Fri 17 Jan 2025 01:25:58 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6407 (0x1907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:58 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=66396BB840E1720F742751026ED01DCB0821836C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:12:88:b8:57:bf:0d:10:f1:57:fd:12:c6: 46:17:99:f3:85:66:bc:5a:67:1e:ec:e9:57:ad:c2: 36:c0:9d:a0:1d:ac:6b:bd:f9:10:77:27:94:bc:e0: 1f:98:4a:30:d0:5e:e5:88:53:e6:14:9c:02:71:30: c2:85:fa:40:24:e9:5c:ca:47:d1:11:2d:54:45:1e: ac:16:ae:30:f2:81:72:3b:5b:ee:e4:83:49:cb:e2: cc:55:b3:72:fb:bb:75:df:b9:ec:30:c0:94:9c:b3: ee:6e:f5:df:c6:ee:1a:7d:3e:f6:59:22:58:f9:45: c7:30:75:f2:b8:e8:b9:ed:70:e1:95:2c:dd:4a:6d: a4:99:5b:60:07:a6:24:e7:76:8e:e8:89:91:63:81: 4c:db:68:4f:6d:c4:37:d8:3f:0d:e8:62:45:01:1f: 6a:f3:f0:c1:6a:a7:ea:d1:25:ea:c2:39:67:f9:ca: 79:93:2c:df:61:55:86:46:5e:1e:f4:3d:75:e9:07: 8c:44:19:eb:b8:d4:b2:be:66:07:d0:42:3d:67:ba: f4:75:04:0a:4a:40:c2:7d:c4:b0:0a:51:38:e4:e0: 98:08:ab:eb:22:28:72:04:59:9a:d7:aa:22:1c:65: 54:8d:e3:54:97:bd:65:b8:b4:10:f8:e8:e0:35:46: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:39:6B:B8:40:E1:72:0F:74:27:51:02:6E:D0:1D:CB:08:21:83:6C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZjlruEDhcg90J1ECbtAdywghg2w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.29.0/24 Signature Algorithm: sha256WithRSAEncryption 17:d6:4c:2d:1b:2d:ea:23:db:fa:39:30:82:eb:a8:06:49:df: 49:b9:ea:47:27:ae:02:2e:e7:4a:a7:03:00:a9:46:b8:e5:c7: 4e:b2:78:1a:b5:96:88:b9:47:9f:7e:3f:03:5d:34:2e:72:33: 17:01:c2:e4:bf:b1:f1:73:3d:5e:6e:05:37:d2:89:0f:fa:7b: c0:80:11:47:fa:d2:54:77:a9:34:bb:df:18:05:80:6f:82:d5: e6:cc:05:65:4b:40:04:2c:71:cd:f9:3e:48:d6:0a:14:c1:33: 30:ba:3e:09:d7:c2:b9:53:79:24:f7:d0:3e:d7:37:ae:7d:c9: a7:c9:67:54:6b:d6:14:0a:f5:70:a6:a8:f1:61:65:e0:6c:0a: 14:01:d8:f0:97:85:78:6e:e7:d3:0d:c8:74:e9:5b:4f:b9:6d: 0b:03:39:fd:41:c5:6f:03:43:75:b2:be:fd:20:ce:74:3b:b3: a5:3b:85:51:23:5d:df:b7:e4:5f:54:57:24:4c:50:9a:ad:ec: 12:96:de:35:67:2a:89:0b:6b:ad:33:6f:d3:33:09:e2:67:16: fb:a2:ea:35:b0:12:8a:b7:fd:13:0e:a7:fe:ab:5e:b1:4d:fd: c7:83:47:ed:48:78:b6:a6:38:84:6b:13:2f:e3:09:49:73:a9: d4:08:df:92 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY2Mzk2QkI4NDBFMTcy MEY3NDI3NTEwMjZFRDAxRENCMDgyMTgzNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDeRKIuFe/DRDxV/0SxkYXmfOFZrxaZx7s6VetwjbAnaAdrGu9 +RB3J5S84B+YSjDQXuWIU+YUnAJxMMKF+kAk6VzKR9ERLVRFHqwWrjDygXI7W+7k g0nL4sxVs3L7u3XfuewwwJScs+5u9d/G7hp9PvZZIlj5RccwdfK46LntcOGVLN1K baSZW2AHpiTndo7oiZFjgUzbaE9txDfYPw3oYkUBH2rz8MFqp+rRJerCOWf5ynmT LN9hVYZGXh70PXXpB4xEGeu41LK+ZgfQQj1nuvR1BApKQMJ9xLAKUTjk4JgIq+si KHIEWZrXqiIcZVSN41SXvWW4tBD46OA1RiWdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZjlruEDhcg90J1ECbtAdywghg2wwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1pqbHJ1RURoY2c5MEox RUNidEFkeXdnaGcydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3R0wDQYJKoZIhvcNAQELBQADggEBABfWTC0bLeoj2/o5MILrqAZJ30m56kcn rgIu50qnAwCpRrjlx06yeBq1loi5R59+PwNdNC5yMxcBwuS/sfFzPV5uBTfSiQ/6 e8CAEUf60lR3qTS73xgFgG+C1ebMBWVLQAQscc35PkjWChTBMzC6PgnXwrlTeST3 0D7XN659yafJZ1Rr1hQK9XCmqPFhZeBsChQB2PCXhXhu59MNyHTpW0+5bQsDOf1B xW8DQ3Wyvv0gznQ7s6U7hVEjXd+35F9UVyRMUJqt7BKW3jVnKokLa60zb9MzCeJn Fvui6jWwEoq3/RMOp/6rXrFN/ceDR+1IeLamOIRrEy/jCUlzqdQI35I= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:26 2025 by rpki-client