$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa File: nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa (raw, json) Hash identifier: 97kqWpBrJlD5BmWYPgmtNOLTFKWTi5FLeadPJzvtCoU= Subject key identifier: 9D:54:B0:AF:40:98:C5:45:F2:61:EB:69:75:67:2F:BA:26:99:E7:39 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1876 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa Signing time: Fri 17 Jan 2025 01:25:05 +0000 ROA not before: Fri 17 Jan 2025 01:25:05 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6262 (0x1876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:05 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9D54B0AF4098C545F261EB6975672FBA2699E739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:08:5a:dc:ca:92:ac:ac:27:8f:1e:60:cf: 15:bf:5d:2c:2c:56:9e:ec:08:60:60:17:ae:6b:6b: 8d:53:f5:98:45:f0:d3:70:3f:37:d3:19:88:02:7a: 47:36:b0:de:76:1e:c6:11:c3:1c:59:95:56:4b:3a: a9:0f:d0:5a:bb:8f:8e:30:23:cc:39:fe:b3:c3:f0: 6f:f6:56:08:bf:39:2c:f0:78:30:e1:a4:28:ca:58: 76:0c:15:89:b4:b7:83:bf:7e:43:7a:fa:3f:fd:6a: 24:1f:45:af:2f:89:19:01:f2:45:a2:28:f0:af:39: c0:61:de:bd:52:d0:87:3c:7a:6b:40:11:63:98:5d: c4:78:dc:72:60:20:76:a8:e9:f4:ab:3b:f2:01:45: 30:23:1c:7a:fc:4e:fb:c4:a3:90:4a:5d:5e:b4:53: b0:c8:06:6b:a8:c3:93:8c:97:f1:97:f9:64:14:c3: 45:cb:dc:40:4c:08:17:b8:f4:19:f5:ca:70:20:5e: c5:4e:af:ee:2c:e0:96:ed:a0:cf:97:c5:38:ac:f0: f7:7b:8c:b0:1c:a5:32:0b:7e:db:6d:87:4f:2d:44: 55:25:b3:58:c1:f2:c4:05:80:89:93:5e:40:ee:c6: 8a:c9:18:a0:3e:75:d2:b7:04:60:37:c1:94:1e:7c: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:54:B0:AF:40:98:C5:45:F2:61:EB:69:75:67:2F:BA:26:99:E7:39 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.25.0/24 Signature Algorithm: sha256WithRSAEncryption 21:36:7b:eb:40:90:27:e0:1d:40:57:0f:79:f2:46:26:fa:d8: fe:42:53:07:89:f4:72:15:1e:91:7f:b4:46:6f:9c:29:7e:11: 0f:8d:aa:fa:6b:a9:45:33:de:4b:df:cf:d5:3f:6c:98:8b:1a: 31:89:ca:c2:86:90:5d:5b:09:96:b6:75:d9:c3:02:be:84:ed: fc:1c:b3:36:a4:f0:24:c0:1a:e6:8f:7b:e2:fe:1c:03:e5:0c: 39:54:c5:ac:66:0e:fe:3a:df:10:9d:25:a7:eb:09:9b:27:25: 73:0f:f2:e4:b6:66:f3:cc:27:f9:07:f2:64:ad:fd:44:82:d7: b1:c7:3d:9a:eb:68:ea:d4:8d:65:ac:ff:7c:38:7b:76:d4:f2: 6f:5a:48:34:b4:43:f8:bb:54:c8:38:33:97:d7:4f:f3:c4:2b: 34:6f:32:df:e2:5b:89:ab:98:20:6c:8c:f4:c7:9b:a0:a9:0a: 90:e6:e9:1a:fe:be:43:9c:a3:43:04:01:04:98:96:1e:ca:0f: b1:4c:fa:c3:d7:77:5d:7e:64:cf:4e:a7:9d:23:e4:4a:12:c2: f1:8b:c1:62:cd:08:b1:29:40:b8:07:6c:95:e7:8f:77:5d:ec: ad:52:93:25:39:9f:62:14:98:87:c4:05:88:b5:f6:88:ac:3d: 97:08:9c:bc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlENTRCMEFGNDA5OEM1 NDVGMjYxRUI2OTc1NjcyRkJBMjY5OUU3MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoKgha3MqSrKwnjx5gzxW/XSwsVp7sCGBgF65ra41T9ZhF8NNw PzfTGYgCekc2sN52HsYRwxxZlVZLOqkP0Fq7j44wI8w5/rPD8G/2Vgi/OSzweDDh pCjKWHYMFYm0t4O/fkN6+j/9aiQfRa8viRkB8kWiKPCvOcBh3r1S0Ic8emtAEWOY XcR43HJgIHao6fSrO/IBRTAjHHr8TvvEo5BKXV60U7DIBmuow5OMl/GX+WQUw0XL 3EBMCBe49Bn1ynAgXsVOr+4s4JbtoM+XxTis8Pd7jLAcpTILfttth08tRFUls1jB 8sQFgImTXkDuxorJGKA+ddK3BGA3wZQefIOjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnVSwr0CYxUXyYetpdWcvuiaZ5zkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L25WU3dyMENZeFVYeVll dHBkV2N2dWlhWjV6ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RkwDQYJKoZIhvcNAQELBQADggEBACE2e+tAkCfgHUBXD3nyRib62P5CUweJ 9HIVHpF/tEZvnCl+EQ+NqvprqUUz3kvfz9U/bJiLGjGJysKGkF1bCZa2ddnDAr6E 7fwcszak8CTAGuaPe+L+HAPlDDlUxaxmDv463xCdJafrCZsnJXMP8uS2ZvPMJ/kH 8mSt/USC17HHPZrraOrUjWWs/3w4e3bU8m9aSDS0Q/i7VMg4M5fXT/PEKzRvMt/i W4mrmCBsjPTHm6CpCpDm6Rr+vkOco0MEAQSYlh7KD7FM+sPXd11+ZM9Op50j5EoS wvGLwWLNCLEpQLgHbJXnj3dd7K1SkyU5n2IUmIfEBYi19oisPZcInLw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:49 2025 by rpki-client