$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/oRKg_OduHw2_Jxkr767JYYGJJPE.roa File: oRKg_OduHw2_Jxkr767JYYGJJPE.roa (raw, json) Hash identifier: 4OIxDrcxPcBvCB2kJgZZNz+RPGHHpAjaZdKo/tpAisc= Subject key identifier: A1:12:A0:FC:E7:6E:1F:0D:BF:27:19:2B:EF:AE:C9:61:81:89:24:F1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 184A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oRKg_OduHw2_Jxkr767JYYGJJPE.roa Signing time: Fri 17 Jan 2025 01:24:51 +0000 ROA not before: Fri 17 Jan 2025 01:24:51 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6218 (0x184a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:51 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A112A0FCE76E1F0DBF27192BEFAEC961818924F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:a8:72:00:5a:07:46:d2:f0:b8:09:46:6a: 68:13:90:18:fc:f8:13:a9:c6:4a:1d:25:de:30:53: a6:fc:37:bd:2a:b6:af:b6:87:82:bd:c9:8b:57:87: c0:cc:31:73:93:7e:76:0c:7f:c8:6b:44:08:8f:af: e7:5d:2c:4a:f6:21:0f:77:bb:d1:8b:a5:75:6c:95: f7:13:fe:c6:e3:e0:58:c5:b5:5b:83:92:1e:b6:f7: d1:00:3d:43:f1:31:6b:31:97:99:1f:01:05:1f:c5: 27:90:5c:cd:f9:e1:a3:12:ef:a4:a3:ce:ab:3c:9c: a2:ed:ad:ef:8a:76:0f:a5:43:6e:c4:7d:e4:16:91: d8:52:23:58:18:d8:f7:f9:d2:5e:9b:94:4e:31:03: 3e:cc:e4:ad:dc:44:ba:87:81:82:d5:fc:bc:5d:d9: 84:3e:e3:56:89:4f:e1:cb:5b:19:c4:51:fa:ec:d8: c2:f7:a3:54:a7:08:6f:e2:16:7b:e1:92:ce:de:aa: 6c:a4:1f:5f:57:ee:3d:a2:95:81:2b:3d:df:43:a7: 40:fb:51:4c:bd:52:ea:7f:7d:d7:ae:81:68:99:95: 7e:1a:6f:36:60:05:8c:d8:23:1c:c7:74:08:72:c2: e4:71:0c:c3:5c:77:b0:91:1f:8f:fc:31:e4:58:4b: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:A0:FC:E7:6E:1F:0D:BF:27:19:2B:EF:AE:C9:61:81:89:24:F1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oRKg_OduHw2_Jxkr767JYYGJJPE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.16.0/24 Signature Algorithm: sha256WithRSAEncryption af:2e:59:97:fa:cf:61:a1:6a:39:13:2c:c1:0c:82:92:b3:0f: 22:35:1e:bb:39:dd:41:d8:02:04:5c:2d:e5:38:7f:18:97:f3: 97:8f:70:9a:08:a2:d2:7c:b6:a1:80:db:5f:51:0d:36:1a:bf: 55:45:18:3c:a6:c2:11:fe:04:86:bd:14:1c:14:de:c5:2e:7c: c2:7d:8e:ee:43:64:a0:66:45:f9:e5:c5:67:a2:cf:0e:55:f4: 61:e3:03:fc:cd:16:81:ca:74:ce:0a:8f:9e:dd:33:61:36:3f: 2b:e6:b9:da:44:71:cf:9f:98:2e:ed:c5:bb:8a:1d:1e:a7:9a: d9:7a:2d:df:ea:45:f2:3c:94:63:62:60:a1:f6:8f:67:a3:81: 4c:da:4a:98:8e:87:8b:f7:b1:ad:68:99:19:33:1a:92:6a:50: 4a:51:2f:bb:ea:09:22:d7:66:30:c0:53:9d:15:52:2e:ad:f8: 80:4a:c1:cd:e9:e1:6a:f0:f6:ea:67:0c:9d:17:49:53:ea:4a: b0:5f:9b:57:09:c4:4f:52:0e:76:3f:b0:15:b0:4d:da:5a:07: 92:c2:16:70:c2:66:bb:22:4c:cd:06:91:8a:94:7b:93:0b:b5: 10:70:51:50:c6:ca:4c:72:94:80:96:62:43:15:17:75:84:c8: 42:cf:36:0d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEExMTJBMEZDRTc2RTFG MERCRjI3MTkyQkVGQUVDOTYxODE4OTI0RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxWqhyAFoHRtLwuAlGamgTkBj8+BOpxkodJd4wU6b8N70qtq+2 h4K9yYtXh8DMMXOTfnYMf8hrRAiPr+ddLEr2IQ93u9GLpXVslfcT/sbj4FjFtVuD kh6299EAPUPxMWsxl5kfAQUfxSeQXM354aMS76Sjzqs8nKLtre+Kdg+lQ27EfeQW kdhSI1gY2Pf50l6blE4xAz7M5K3cRLqHgYLV/Lxd2YQ+41aJT+HLWxnEUfrs2ML3 o1SnCG/iFnvhks7eqmykH19X7j2ilYErPd9Dp0D7UUy9Uup/fdeugWiZlX4abzZg BYzYIxzHdAhywuRxDMNcd7CRH4/8MeRYS5FfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUoRKg/OduHw2/Jxkr767JYYGJJPEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L29SS2dfT2R1SHcyX0p4 a3I3NjdKWVlHSkpQRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RAwDQYJKoZIhvcNAQELBQADggEBAK8uWZf6z2GhajkTLMEMgpKzDyI1Hrs5 3UHYAgRcLeU4fxiX85ePcJoIotJ8tqGA219RDTYav1VFGDymwhH+BIa9FBwU3sUu fMJ9ju5DZKBmRfnlxWeizw5V9GHjA/zNFoHKdM4Kj57dM2E2PyvmudpEcc+fmC7t xbuKHR6nmtl6Ld/qRfI8lGNiYKH2j2ejgUzaSpiOh4v3sa1omRkzGpJqUEpRL7vq CSLXZjDAU50VUi6t+IBKwc3p4Wrw9upnDJ0XSVPqSrBfm1cJxE9SDnY/sBWwTdpa B5LCFnDCZrsiTM0GkYqUe5MLtRBwUVDGykxylICWYkMVF3WEyELPNg0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:57 2025 by rpki-client