$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ijywlSeI3H-uLkWSHi4Iu6srNYY.roa File: ijywlSeI3H-uLkWSHi4Iu6srNYY.roa (raw, json) Hash identifier: PE97OsHE9PjFKFdQavyJfZ2i9GG20d7CJzRkxU9sEzY= Subject key identifier: 8A:3C:B0:95:27:88:DC:7F:AE:2E:45:92:1E:2E:08:BB:AB:2B:35:86 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18BC Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ijywlSeI3H-uLkWSHi4Iu6srNYY.roa Signing time: Fri 17 Jan 2025 01:25:30 +0000 ROA not before: Fri 17 Jan 2025 01:25:30 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6332 (0x18bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:30 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8A3CB0952788DC7FAE2E45921E2E08BBAB2B3586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:7f:c2:19:f6:d1:70:a9:8a:3e:a0:70:0d: 25:44:da:41:39:b9:33:61:e2:ce:d2:12:93:2b:ff: 3c:4a:06:18:9e:7e:d9:a2:af:d5:1f:e1:9a:29:b3: ff:56:72:55:04:09:7e:b2:b1:10:fd:8c:f2:54:84: d1:9c:1c:06:30:04:d0:8f:a0:2e:47:69:ec:cc:05: 02:c3:1a:e9:ac:af:51:44:ed:27:39:2d:9b:05:27: 80:d6:69:e3:f0:7a:1f:e9:9b:41:45:31:9f:e8:85: 8d:bc:d7:05:33:ea:43:d2:62:4c:99:a7:85:a6:ff: 53:86:60:c1:d8:e6:d9:90:b7:e9:9b:e8:93:17:71: 84:e6:d7:04:ee:49:ca:8a:9b:d0:ce:99:93:d4:05: 2d:7f:00:44:ac:4f:ab:7e:46:6e:0d:9a:fd:5e:20: c6:1f:0c:c8:48:f0:8b:f3:fe:28:12:46:d4:9f:88: 23:b1:74:d6:7d:a0:63:9f:b7:03:f3:e9:de:f2:10: e0:26:d5:31:5f:52:53:86:13:70:3c:5a:09:5d:84: 9a:0f:e8:f1:b1:1a:6f:42:80:e7:0e:0d:31:52:15: 1b:18:20:ef:69:a3:d7:cb:fd:4b:8f:8b:5e:fa:80: 2e:93:88:95:b7:31:9c:20:74:4b:8f:37:64:9f:ec: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3C:B0:95:27:88:DC:7F:AE:2E:45:92:1E:2E:08:BB:AB:2B:35:86 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ijywlSeI3H-uLkWSHi4Iu6srNYY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.35.0/24 Signature Algorithm: sha256WithRSAEncryption 95:49:4c:20:e6:84:8f:73:f2:6a:4b:00:b3:5f:bc:11:00:bd: 15:04:00:a4:65:a0:b5:7e:4a:ec:db:b8:93:c3:cc:49:cc:bf: 8e:7a:8d:aa:71:14:a3:6b:c0:f0:7e:e5:4d:c9:79:56:1d:b5: 2e:1e:eb:39:9f:68:22:4c:eb:43:65:69:ec:45:d6:ba:7b:94: 79:f5:88:ea:e3:a7:51:20:2a:3c:48:53:ea:80:45:db:fb:61: 5b:54:4a:b2:40:66:73:a4:70:9c:36:37:ae:c0:2d:79:c9:a0: b4:04:f9:d3:12:32:6d:ac:b6:0c:0e:69:8f:fa:ba:d6:76:a9: a5:56:34:ae:c3:4f:e3:85:0d:6b:b7:dc:cb:c8:57:1f:cc:84: 39:22:05:a3:38:a8:21:0a:d4:aa:8a:c7:1e:27:9c:dd:37:96: e5:ad:6b:bc:3e:9c:4e:7c:3b:b9:82:36:4b:6a:93:b5:55:46: ee:cf:32:95:c2:9b:e6:93:e1:cb:a3:21:0d:a2:b1:a7:8f:74: db:29:f0:75:33:69:c6:ee:e8:85:a9:ec:50:52:29:a6:18:d2: a0:16:c5:f8:49:4b:de:dc:3e:b2:63:c3:7c:90:56:6a:5d:0d: c8:68:b9:4f:de:a6:9c:05:83:67:76:28:75:80:1c:99:d8:27: 40:76:ce:68 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhBM0NCMDk1Mjc4OERD N0ZBRTJFNDU5MjFFMkUwOEJCQUIyQjM1ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrRX/CGfbRcKmKPqBwDSVE2kE5uTNh4s7SEpMr/zxKBhieftmi r9Uf4Zops/9WclUECX6ysRD9jPJUhNGcHAYwBNCPoC5HaezMBQLDGumsr1FE7Sc5 LZsFJ4DWaePweh/pm0FFMZ/ohY281wUz6kPSYkyZp4Wm/1OGYMHY5tmQt+mb6JMX cYTm1wTuScqKm9DOmZPUBS1/AESsT6t+Rm4Nmv1eIMYfDMhI8Ivz/igSRtSfiCOx dNZ9oGOftwPz6d7yEOAm1TFfUlOGE3A8WgldhJoP6PGxGm9CgOcODTFSFRsYIO9p o9fL/UuPi176gC6TiJW3MZwgdEuPN2Sf7OVXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUijywlSeI3H+uLkWSHi4Iu6srNYYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2lqeXdsU2VJM0gtdUxr V1NIaTRJdTZzck5ZWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SMwDQYJKoZIhvcNAQELBQADggEBAJVJTCDmhI9z8mpLALNfvBEAvRUEAKRl oLV+SuzbuJPDzEnMv456japxFKNrwPB+5U3JeVYdtS4e6zmfaCJM60NlaexF1rp7 lHn1iOrjp1EgKjxIU+qARdv7YVtUSrJAZnOkcJw2N67ALXnJoLQE+dMSMm2stgwO aY/6utZ2qaVWNK7DT+OFDWu33MvIVx/MhDkiBaM4qCEK1KqKxx4nnN03luWta7w+ nE58O7mCNktqk7VVRu7PMpXCm+aT4cujIQ2isaePdNsp8HUzacbu6IWp7FBSKaYY 0qAWxfhJS97cPrJjw3yQVmpdDchouU/eppwFg2d2KHWAHJnYJ0B2zmg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:29 2025 by rpki-client