$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa File: cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa (raw, json) Hash identifier: sqH9MHgHEhqVSN3Y2NQqp38+TzC+QdJWs67uPkTYaRk= Subject key identifier: 70:DF:50:79:77:8E:B9:D6:87:06:90:01:D2:01:93:5D:E2:7F:5F:AB Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18B2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa Signing time: Fri 17 Jan 2025 01:25:26 +0000 ROA not before: Fri 17 Jan 2025 01:25:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.6.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6322 (0x18b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:26 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=70DF5079778EB9D687069001D201935DE27F5FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:68:fe:2f:7e:f1:b9:e4:6c:57:fb:d0:17: 7a:c1:34:ac:22:cf:18:10:02:9c:9c:ad:29:1a:30: 3c:ed:ee:84:25:62:16:e2:13:4b:da:af:dd:eb:46: 47:97:a7:65:85:76:86:02:b0:bb:4b:c4:78:7b:83: d0:de:97:cc:e0:ff:30:6d:72:06:2f:f6:88:70:39: 9d:5f:d5:9d:19:0d:77:ed:75:b6:b6:5f:68:4c:eb: 8e:a2:32:a0:bf:b2:d2:32:a2:29:ea:19:8e:af:ef: 67:90:a7:57:68:9b:b3:f6:d9:ef:9f:9f:09:92:61: 96:43:74:2f:b3:b9:90:69:76:dc:d6:2c:95:27:aa: a4:7b:7a:2e:5d:78:4e:62:af:19:16:94:dd:be:fd: 0e:bc:0c:3b:94:f3:12:a1:11:09:06:58:3f:a2:52: 39:b2:24:bb:77:30:c9:a3:38:cf:87:89:88:4d:ea: 1d:f4:46:03:b5:7c:da:92:e1:b6:a3:75:40:04:d3: fe:f3:c1:f1:bd:2e:93:c2:94:75:f1:82:d8:5f:2d: 01:a2:ca:1e:e9:42:1c:29:c0:62:15:e4:19:60:2c: 21:fd:94:d0:cd:6a:cd:b7:f3:24:14:45:89:2b:28: 4c:4b:f4:8d:c7:ed:f5:f8:a2:d7:01:b2:05:21:e2: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DF:50:79:77:8E:B9:D6:87:06:90:01:D2:01:93:5D:E2:7F:5F:AB X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.110.0/24 Signature Algorithm: sha256WithRSAEncryption 51:db:e8:07:30:7b:e7:fe:5a:af:8d:92:10:43:02:ca:49:a3: 9d:88:f7:84:87:3a:0a:06:b4:d3:56:8e:87:e0:db:79:4e:dc: 32:7e:65:4d:e8:1d:4e:92:d4:88:70:66:ad:0a:5c:ce:eb:7f: 8f:e2:a9:60:ea:09:4d:11:9b:a3:4d:49:c3:08:19:d4:86:37: fe:3e:f6:73:50:e2:1f:85:dd:c5:79:0a:06:c3:b3:e1:d5:a4: 63:7d:2b:4f:92:a3:53:6e:4a:9f:7e:21:65:59:d7:9d:59:06: 5b:9d:06:1d:8f:06:cb:da:a3:7a:45:ce:d7:b1:dd:39:3f:b1: 9d:34:72:00:21:c6:26:e5:65:19:33:de:35:21:79:c5:35:90: c2:e5:19:a2:43:a7:bf:17:da:8c:cc:c4:40:f6:58:98:d8:22: d8:53:04:10:35:8e:2b:04:be:65:79:e3:73:13:08:b1:29:c1: 01:d5:b8:6f:89:99:74:62:68:3e:5d:c9:9d:04:3a:aa:77:5a: af:2f:e1:e9:7a:2e:91:fa:8e:be:f5:d4:91:de:45:28:5f:94: 18:cb:b1:51:4b:4f:4a:b2:b0:4b:81:f0:16:54:9d:51:51:f3: cb:25:90:61:ea:1a:0d:68:d8:0c:f9:9d:c1:bc:d2:6d:f6:2e: 99:bb:a5:b7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcwREY1MDc5Nzc4RUI5 RDY4NzA2OTAwMUQyMDE5MzVERTI3RjVGQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPuWj+L37xueRsV/vQF3rBNKwizxgQApycrSkaMDzt7oQlYhbi E0var93rRkeXp2WFdoYCsLtLxHh7g9Del8zg/zBtcgYv9ohwOZ1f1Z0ZDXftdba2 X2hM646iMqC/stIyoinqGY6v72eQp1dom7P22e+fnwmSYZZDdC+zuZBpdtzWLJUn qqR7ei5deE5irxkWlN2+/Q68DDuU8xKhEQkGWD+iUjmyJLt3MMmjOM+HiYhN6h30 RgO1fNqS4bajdUAE0/7zwfG9LpPClHXxgthfLQGiyh7pQhwpwGIV5BlgLCH9lNDN as238yQURYkrKExL9I3H7fX4otcBsgUh4uv5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUcN9QeXeOudaHBpAB0gGTXeJ/X6swHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2NOOVFlWGVPdWRhSEJw QUIwZ0dUWGVKX1g2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBm4wDQYJKoZIhvcNAQELBQADggEBAFHb6Acwe+f+Wq+NkhBDAspJo52I94SH OgoGtNNWjofg23lO3DJ+ZU3oHU6S1IhwZq0KXM7rf4/iqWDqCU0Rm6NNScMIGdSG N/4+9nNQ4h+F3cV5CgbDs+HVpGN9K0+So1NuSp9+IWVZ151ZBludBh2PBsvao3pF ztex3Tk/sZ00cgAhxiblZRkz3jUhecU1kMLlGaJDp78X2ozMxED2WJjYIthTBBA1 jisEvmV543MTCLEpwQHVuG+JmXRiaD5dyZ0EOqp3Wq8v4el6LpH6jr711JHeRShf lBjLsVFLT0qysEuB8BZUnVFR88slkGHqGg1o2Az5ncG80m32Lpm7pbc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:17 2025 by rpki-client