$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/arhqpCDtrVr5onxpZZOX6bKS3FM.roa File: arhqpCDtrVr5onxpZZOX6bKS3FM.roa (raw, json) Hash identifier: o+qsdOLcNSkfAZnh/QY23FgI2ZTJ1zTrDC3jwFW43zc= Subject key identifier: 6A:B8:6A:A4:20:ED:AD:5A:F9:A2:7C:69:65:93:97:E9:B2:92:DC:53 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1874 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/arhqpCDtrVr5onxpZZOX6bKS3FM.roa Signing time: Fri 17 Jan 2025 01:25:05 +0000 ROA not before: Fri 17 Jan 2025 01:25:05 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6260 (0x1874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:05 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6AB86AA420EDAD5AF9A27C69659397E9B292DC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:22:a7:d0:85:73:c5:6b:58:3b:7e:6d:33: 19:5f:41:b3:89:2f:1c:f3:e7:6f:44:b8:6e:e6:98: 22:40:68:75:9c:4c:d4:b5:e0:ac:33:8f:41:2a:15: 01:f4:d0:ec:43:1a:e6:b4:66:b7:88:19:25:04:fd: d9:8c:40:95:6f:f2:83:e5:94:65:66:ad:0e:63:9a: 91:e9:ef:0e:d5:c3:cb:a3:af:3e:2e:f1:15:bb:1a: a8:86:ba:60:1b:b5:05:0a:33:48:66:76:b1:20:6c: 5d:7a:dc:30:54:96:fa:93:27:23:c0:ed:6d:23:b2: 3c:9c:d3:12:84:13:67:bb:76:d7:6b:33:a5:08:48: a8:80:61:23:1e:39:f4:8c:67:d0:31:f8:72:ed:f1: 5b:2d:8f:b8:1e:57:e0:8d:c1:be:11:ed:11:3e:f7: d0:9d:b8:84:94:1e:ae:a0:a5:44:c0:b4:87:40:5d: 3e:c4:c6:e3:d2:f6:58:e4:ab:c3:10:12:59:d7:24: 78:1c:b7:c9:95:fa:42:db:2f:d2:b3:53:67:7e:2b: 55:79:d1:e6:80:82:1b:63:6d:b8:aa:8f:6b:33:0e: 43:61:0d:05:75:7c:02:11:aa:b8:97:4d:81:ea:42: 6f:02:8a:2a:bb:02:c4:01:d8:a2:66:5e:01:04:44: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B8:6A:A4:20:ED:AD:5A:F9:A2:7C:69:65:93:97:E9:B2:92:DC:53 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/arhqpCDtrVr5onxpZZOX6bKS3FM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.34.0/24 Signature Algorithm: sha256WithRSAEncryption aa:64:47:04:7c:1e:0c:42:62:23:8b:0b:97:8f:7a:0c:55:c7: 83:34:e2:7d:96:18:90:aa:5e:06:e9:0e:e4:87:35:4b:26:16: 0e:e1:9e:97:7a:35:51:0d:5d:e2:da:ac:22:34:2a:98:ff:3e: c8:6b:b0:3c:e9:19:61:92:21:a1:cc:7f:c4:64:33:6d:15:96: 67:41:f9:ef:7d:26:a4:a6:c2:9e:fb:e9:d0:71:d6:2f:ca:de: 62:5d:27:73:f9:7c:69:81:69:38:30:ad:53:40:7c:7c:1e:b1: 6e:b3:1b:70:22:95:46:7c:24:34:f7:0d:ad:86:81:01:4e:50: aa:0c:79:45:b8:2e:42:d8:e1:5b:8c:b1:1d:c1:49:f1:56:ad: d9:67:11:54:f4:e7:8f:74:ce:da:aa:b4:4a:f5:80:8b:12:25: fb:16:73:2f:1c:d6:c7:fe:c3:4d:b1:95:b7:6d:c0:f3:7e:2b: 42:fb:20:71:22:97:ea:cf:98:0b:f3:2b:94:f5:7a:5d:e8:a4: 09:03:ee:e0:7b:75:96:ef:82:f0:6e:64:e1:2f:a4:73:19:c4: 38:1e:50:64:e4:36:ac:64:c4:49:75:ba:7f:c2:a8:7f:21:59: 0f:39:4d:08:b3:26:0e:3c:70:f9:7b:58:46:d1:12:1d:07:71: 52:75:d3:8f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZBQjg2QUE0MjBFREFE NUFGOUEyN0M2OTY1OTM5N0U5QjI5MkRDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnXyKn0IVzxWtYO35tMxlfQbOJLxzz529EuG7mmCJAaHWcTNS1 4Kwzj0EqFQH00OxDGua0ZreIGSUE/dmMQJVv8oPllGVmrQ5jmpHp7w7Vw8ujrz4u 8RW7GqiGumAbtQUKM0hmdrEgbF163DBUlvqTJyPA7W0jsjyc0xKEE2e7dtdrM6UI SKiAYSMeOfSMZ9Ax+HLt8Vstj7geV+CNwb4R7RE+99CduISUHq6gpUTAtIdAXT7E xuPS9ljkq8MQElnXJHgct8mV+kLbL9KzU2d+K1V50eaAghtjbbiqj2szDkNhDQV1 fAIRqriXTYHqQm8Ciiq7AsQB2KJmXgEEREdNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUarhqpCDtrVr5onxpZZOX6bKS3FMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FyaHFwQ0R0clZyNW9u eHBaWk9YNmJLUzNGTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SIwDQYJKoZIhvcNAQELBQADggEBAKpkRwR8HgxCYiOLC5ePegxVx4M04n2W GJCqXgbpDuSHNUsmFg7hnpd6NVENXeLarCI0Kpj/PshrsDzpGWGSIaHMf8RkM20V lmdB+e99JqSmwp776dBx1i/K3mJdJ3P5fGmBaTgwrVNAfHwesW6zG3AilUZ8JDT3 Da2GgQFOUKoMeUW4LkLY4VuMsR3BSfFWrdlnEVT05490ztqqtEr1gIsSJfsWcy8c 1sf+w02xlbdtwPN+K0L7IHEil+rPmAvzK5T1el3opAkD7uB7dZbvgvBuZOEvpHMZ xDgeUGTkNqxkxEl1un/CqH8hWQ85TQizJg48cPl7WEbREh0HcVJ1048= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:27 2025 by rpki-client