$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/bQ8jMYxVmRupb74KtjjYxUTawkA.roa File: bQ8jMYxVmRupb74KtjjYxUTawkA.roa (raw, json) Hash identifier: BSQxJ1A7+qVDoqBLE7XfrgpYsKhtjh3HQIcbXBA68Kc= Subject key identifier: 6D:0F:23:31:8C:55:99:1B:A9:6F:BE:0A:B6:38:D8:C5:44:DA:C2:40 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1818 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bQ8jMYxVmRupb74KtjjYxUTawkA.roa Signing time: Fri 17 Jan 2025 01:24:34 +0000 ROA not before: Fri 17 Jan 2025 01:24:34 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.220.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6168 (0x1818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:34 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6D0F23318C55991BA96FBE0AB638D8C544DAC240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:a5:02:c9:64:dc:49:11:1e:af:a0:53:af: d8:8d:d2:9b:5b:92:9d:e7:36:96:a8:c4:5e:1f:35: 0c:d6:82:ed:8e:84:40:55:2f:ad:12:9b:b2:47:3c: 7f:28:e5:2a:27:76:4e:cd:f3:5a:82:ca:3e:5e:38: 9a:de:66:f1:81:9b:3e:82:64:5b:d8:89:35:37:84: b8:4e:e0:97:69:1a:50:f1:d4:4e:ca:33:ae:1d:44: 2e:db:73:2b:64:4e:3a:52:71:3f:a7:d4:c3:9c:86: ac:7e:d1:e1:ca:d3:ef:48:28:f5:8a:ed:ee:44:42: 0c:70:9c:4b:7e:bf:19:df:3a:6f:c3:31:d7:31:a1: 78:6c:2e:11:94:07:7a:1c:16:73:1e:ff:23:e7:16: 76:7c:47:da:36:da:af:7c:01:70:63:2d:57:ec:06: 40:82:ad:4b:1d:4d:8d:f7:35:4d:a7:55:4a:13:75: a1:8e:1d:b3:d4:9c:44:64:c4:7e:a4:23:46:8a:c1: 9d:2b:4b:8e:bd:ca:0c:b0:ae:b1:2d:2b:22:f6:c9: b8:f2:f0:c2:92:b6:6c:8f:d8:5a:da:2c:05:ca:dd: 6f:65:b1:17:c0:cb:ae:f7:f9:aa:16:71:63:19:c1: 63:d5:5c:09:07:f8:30:5c:9c:0e:34:43:2a:1d:ed: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0F:23:31:8C:55:99:1B:A9:6F:BE:0A:B6:38:D8:C5:44:DA:C2:40 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bQ8jMYxVmRupb74KtjjYxUTawkA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.250.0/24 Signature Algorithm: sha256WithRSAEncryption a9:81:8f:be:7b:38:5a:11:15:14:71:86:1e:48:76:05:60:37: b4:14:2b:2f:72:b3:d0:3b:d9:45:72:5d:c0:7f:7f:b4:04:fd: 26:d2:c9:1a:0b:74:b5:0a:75:f3:68:b4:3d:dd:b5:2b:0c:0b: 9f:62:bd:7b:26:6c:53:99:44:d0:58:d7:c3:1e:78:11:2b:3c: 09:cc:d2:0b:0b:7d:a2:fa:1c:3e:61:24:53:c0:6e:6f:86:84: c1:b4:98:74:1b:4c:75:b2:01:99:02:6e:5c:68:12:dc:07:cd: b7:a9:a8:41:a7:1f:36:28:cb:70:70:9c:00:1b:cc:bf:42:10: 51:1c:c3:03:fd:38:82:7a:50:8f:63:45:11:0f:c2:a8:02:dd: b4:89:a2:f2:bf:15:e1:a5:cb:9c:2f:a5:38:5c:0c:a1:96:b6: 6c:9d:60:71:bc:74:81:3f:0f:19:9d:06:bf:3b:2b:fb:04:92: cb:79:c5:ba:73:f7:00:43:8d:69:48:e5:ad:f3:87:4a:81:6f: c8:62:4c:78:98:15:b2:42:20:bd:03:97:3a:67:14:cf:0d:c5: 46:ea:44:8a:4c:58:99:ff:e5:45:f8:fb:3f:b3:c5:16:df:34: e3:48:51:fa:4e:c0:ab:64:f9:09:cb:87:a7:83:13:92:75:ed: 43:2e:78:13 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZEMEYyMzMxOEM1NTk5 MUJBOTZGQkUwQUI2MzhEOEM1NDREQUMyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjnKUCyWTcSREer6BTr9iN0ptbkp3nNpaoxF4fNQzWgu2OhEBV L60Sm7JHPH8o5Sondk7N81qCyj5eOJreZvGBmz6CZFvYiTU3hLhO4JdpGlDx1E7K M64dRC7bcytkTjpScT+n1MOchqx+0eHK0+9IKPWK7e5EQgxwnEt+vxnfOm/DMdcx oXhsLhGUB3ocFnMe/yPnFnZ8R9o22q98AXBjLVfsBkCCrUsdTY33NU2nVUoTdaGO HbPUnERkxH6kI0aKwZ0rS469ygywrrEtKyL2ybjy8MKStmyP2FraLAXK3W9lsRfA y673+aoWcWMZwWPVXAkH+DBcnA40Qyod7fJlAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbQ8jMYxVmRupb74KtjjYxUTawkAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2JROGpNWXhWbVJ1cGI3 NEt0ampZeFVUYXdrQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PowDQYJKoZIhvcNAQELBQADggEBAKmBj757OFoRFRRxhh5IdgVgN7QUKy9y s9A72UVyXcB/f7QE/SbSyRoLdLUKdfNotD3dtSsMC59ivXsmbFOZRNBY18MeeBEr PAnM0gsLfaL6HD5hJFPAbm+GhMG0mHQbTHWyAZkCblxoEtwHzbepqEGnHzYoy3Bw nAAbzL9CEFEcwwP9OIJ6UI9jRREPwqgC3bSJovK/FeGly5wvpThcDKGWtmydYHG8 dIE/DxmdBr87K/sEkst5xbpz9wBDjWlI5a3zh0qBb8hiTHiYFbJCIL0DlzpnFM8N xUbqRIpMWJn/5UX4+z+zxRbfNONIUfpOwKtk+QnLh6eDE5J17UMueBM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:40:08 2025 by rpki-client