$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nS74Q4t7ed98ixg0zbLkGSkpnk8.roa File: nS74Q4t7ed98ixg0zbLkGSkpnk8.roa (raw, json) Hash identifier: BR9XMfrSaeE0W9pg88ojH93hr6+8vuzG8YZaOesIPwc= Subject key identifier: 9D:2E:F8:43:8B:7B:79:DF:7C:8B:18:34:CD:B2:E4:19:29:29:9E:4F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 183B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nS74Q4t7ed98ixg0zbLkGSkpnk8.roa Signing time: Fri 17 Jan 2025 01:24:46 +0000 ROA not before: Fri 17 Jan 2025 01:24:46 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139076 IP address blocks: 103.221.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6203 (0x183b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:46 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9D2EF8438B7B79DF7C8B1834CDB2E41929299E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9c:b4:93:90:00:90:55:1e:05:a3:02:49:ba: 25:fc:fc:18:6c:be:27:e2:7a:1b:7f:62:22:2f:3d: 75:ab:a0:cc:21:34:95:72:d1:db:8a:01:20:8c:a2: bd:05:91:72:e9:1f:75:35:e1:fa:f7:e0:f6:9d:4b: 14:af:89:42:07:ef:16:54:cb:43:64:af:83:62:7c: e9:ad:3b:83:76:f6:17:83:2b:d9:22:57:da:70:30: 5b:86:4c:b1:74:59:01:26:7c:fb:13:77:15:f8:87: 71:8f:f2:9e:fb:cf:11:7a:8b:f9:f7:6a:ec:e0:5b: 42:c2:1e:ad:ff:34:23:91:a7:ab:73:c0:6e:d9:33: bc:c6:64:f4:3e:62:87:7c:bd:9c:56:e7:e5:82:3c: d6:e4:ee:dd:e5:bb:8e:4c:18:3b:cf:d3:7e:4b:0d: a5:31:df:14:d1:90:16:ec:55:b8:45:a6:d2:21:32: ee:0a:36:fa:8f:eb:d6:1a:89:db:27:17:72:d2:f2: 70:77:7c:c8:85:21:7e:69:a1:7b:70:57:28:5e:17: bd:12:2e:86:34:47:a1:f1:fd:90:76:7c:88:ee:3b: 83:27:9f:68:3a:da:df:2c:09:13:92:11:2c:4d:b4: 7c:95:96:cc:00:51:e3:c9:cc:0c:68:e5:1a:42:7f: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2E:F8:43:8B:7B:79:DF:7C:8B:18:34:CD:B2:E4:19:29:29:9E:4F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nS74Q4t7ed98ixg0zbLkGSkpnk8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.48.0/24 Signature Algorithm: sha256WithRSAEncryption aa:e1:36:96:0d:84:cc:55:81:65:89:93:77:c3:f1:7e:15:de: 6d:df:b8:98:ec:af:59:c6:8d:1c:f5:35:7e:d8:8b:6d:dd:56: 4a:fa:c2:c2:89:78:56:d9:b2:12:2a:a6:1a:ac:bd:6a:ea:57: 23:e9:28:25:09:f6:63:9c:dc:a6:e4:94:7b:64:01:83:a1:a3: d8:a7:be:52:d4:9f:6e:09:6a:30:00:72:4e:51:78:43:cd:7b: 74:4c:8b:36:b7:40:f6:10:b9:19:38:1c:d2:49:00:09:31:69: be:22:d6:c0:bb:46:4a:67:fe:a4:92:0f:b5:5b:68:33:a2:b7: be:96:86:7f:7c:0c:b5:09:ab:60:42:23:a2:11:18:7c:ca:af: a6:54:82:77:ee:85:75:2d:df:2a:5b:59:71:a7:e6:c4:92:03: 2e:60:36:37:f1:ca:35:d8:5c:73:78:fc:cd:60:90:b4:3b:60: d1:88:a3:bc:64:b0:50:3c:f2:01:24:ac:ea:c4:ea:7c:8e:d5: 01:ca:33:c1:e7:4b:c3:7a:21:5f:17:fa:f8:ef:e3:bf:80:a5: 75:bb:55:8d:d9:d3:1b:e1:ea:8a:cd:43:25:06:5a:fa:2f:33: 87:95:fa:01:82:2a:01:20:d8:e8:bd:f4:d9:87:e4:4d:66:8d: 11:63:45:48 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlEMkVGODQzOEI3Qjc5 REY3QzhCMTgzNENEQjJFNDE5MjkyOTlFNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtnLSTkACQVR4FowJJuiX8/Bhsvifieht/YiIvPXWroMwhNJVy 0duKASCMor0FkXLpH3U14fr34PadSxSviUIH7xZUy0Nkr4NifOmtO4N29heDK9ki V9pwMFuGTLF0WQEmfPsTdxX4h3GP8p77zxF6i/n3auzgW0LCHq3/NCORp6tzwG7Z M7zGZPQ+Yod8vZxW5+WCPNbk7t3lu45MGDvP035LDaUx3xTRkBbsVbhFptIhMu4K NvqP69YaidsnF3LS8nB3fMiFIX5poXtwVyheF70SLoY0R6Hx/ZB2fIjuO4Mnn2g6 2t8sCROSESxNtHyVlswAUePJzAxo5RpCf2NjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnS74Q4t7ed98ixg0zbLkGSkpnk8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L25TNzRRNHQ3ZWQ5OGl4 ZzB6YkxrR1NrcG5rOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TAwDQYJKoZIhvcNAQELBQADggEBAKrhNpYNhMxVgWWJk3fD8X4V3m3fuJjs r1nGjRz1NX7Yi23dVkr6wsKJeFbZshIqphqsvWrqVyPpKCUJ9mOc3KbklHtkAYOh o9invlLUn24JajAAck5ReEPNe3RMiza3QPYQuRk4HNJJAAkxab4i1sC7Rkpn/qSS D7VbaDOit76Whn98DLUJq2BCI6IRGHzKr6ZUgnfuhXUt3ypbWXGn5sSSAy5gNjfx yjXYXHN4/M1gkLQ7YNGIo7xksFA88gEkrOrE6nyO1QHKM8HnS8N6IV8X+vjv47+A pXW7VY3Z0xvh6orNQyUGWvovM4eV+gGCKgEg2Oi99NmH5E1mjRFjRUg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:08 2025 by rpki-client