$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/rRQXCP0P4d2cjhc40R6tNgIjXqg.roa File: rRQXCP0P4d2cjhc40R6tNgIjXqg.roa (raw, json) Hash identifier: NE8BtWsJvsG3Ozfwsno+574AuBnJXZIPrGqan/yWLqs= Subject key identifier: AD:14:17:08:FD:0F:E1:DD:9C:8E:17:38:D1:1E:AD:36:02:23:5E:A8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1906 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rRQXCP0P4d2cjhc40R6tNgIjXqg.roa Signing time: Fri 17 Jan 2025 01:25:57 +0000 ROA not before: Fri 17 Jan 2025 01:25:57 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6406 (0x1906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:57 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AD141708FD0FE1DD9C8E1738D11EAD3602235EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:8c:e9:bc:5f:50:21:2a:13:fe:75:f8:55: f6:0a:5e:d7:30:fb:27:ee:dc:32:ed:8b:d5:78:f0: 34:ad:6a:bf:3c:14:a6:1d:a3:29:94:d5:f9:16:39: 71:20:f6:6f:fb:55:30:6a:82:fd:b0:fc:03:53:d2: c7:b3:cf:92:24:3a:6d:de:68:bd:38:2d:a8:68:36: 1b:77:50:2b:d9:27:7e:1f:9e:b3:1e:dd:05:71:8d: 73:a9:a3:5a:62:81:94:69:f1:ef:df:ae:b2:95:e0: 66:0b:51:f2:bb:a3:fa:f1:e6:48:c5:0b:8c:03:56: ec:9d:c0:c3:4e:17:44:69:73:b9:ed:21:7a:fb:a0: 81:00:9e:f2:17:59:ef:73:b2:ea:2c:68:02:7e:fd: b9:c5:e2:52:cb:fb:bc:69:86:1d:37:06:5a:46:2e: f3:a7:a0:c9:a3:49:51:ee:04:3a:56:c8:a3:de:5f: d1:7e:1e:ce:c9:5d:cc:ae:ff:d7:ea:78:70:e5:88: 46:af:e1:46:8f:53:fc:49:7d:34:da:15:cf:c7:7a: 85:1f:1f:c2:95:38:1f:26:81:90:6e:65:42:e5:1f: f5:54:b0:1d:e0:94:dd:f9:b2:42:d0:47:fc:b8:65: 72:df:ba:0a:56:34:80:ac:c7:cd:6f:9f:f9:90:eb: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:14:17:08:FD:0F:E1:DD:9C:8E:17:38:D1:1E:AD:36:02:23:5E:A8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rRQXCP0P4d2cjhc40R6tNgIjXqg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.7.0/24 Signature Algorithm: sha256WithRSAEncryption ab:a2:92:d9:90:26:99:54:e3:9b:7f:92:16:cf:07:6e:b1:8e: 42:6b:89:45:bc:9d:dc:d9:5f:82:45:87:a5:5b:d5:d2:dc:cd: d0:ea:63:00:49:67:d2:56:2a:0e:79:2a:2c:57:d4:60:08:f9: bc:e1:3c:b4:96:d4:88:84:b9:6e:2d:0e:82:ed:27:18:1d:77: 2b:e8:b2:93:b5:96:cc:25:d2:94:e3:99:04:0c:1c:48:95:f5: ba:77:3a:6d:e6:22:e8:cb:d4:71:4b:b2:3e:3e:c9:de:14:31: d0:90:a0:02:c1:38:4c:ab:41:a3:c6:88:d3:da:a5:52:a9:00: 0e:c5:b5:a2:4e:24:9a:6a:d4:70:ad:89:6b:00:4e:0f:75:3b: 78:77:5b:f5:fe:d8:2a:df:75:bf:17:6a:67:35:bf:0e:f6:b5: a8:3d:8e:1c:5a:a5:9e:33:51:08:ae:34:70:6e:d3:07:2b:62: f6:3a:f1:25:19:9d:70:3b:6e:d6:40:e4:1b:95:92:f5:1e:ff: 93:a9:13:c4:7d:2a:3a:b2:c8:32:7c:d9:9d:20:e9:cf:37:ac: 0e:fc:1d:5e:16:00:77:87:b1:f9:f0:be:f4:c5:df:1e:4c:14: ac:39:88:e7:7b:25:d6:47:3d:fc:8d:f2:a2:ca:b8:94:fb:9d: be:00:94:a6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFEMTQxNzA4RkQwRkUx REQ5QzhFMTczOEQxMUVBRDM2MDIyMzVFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFgIzpvF9QISoT/nX4VfYKXtcw+yfu3DLti9V48DStar88FKYd oymU1fkWOXEg9m/7VTBqgv2w/ANT0sezz5IkOm3eaL04LahoNht3UCvZJ34fnrMe 3QVxjXOpo1pigZRp8e/frrKV4GYLUfK7o/rx5kjFC4wDVuydwMNOF0Rpc7ntIXr7 oIEAnvIXWe9zsuosaAJ+/bnF4lLL+7xphh03BlpGLvOnoMmjSVHuBDpWyKPeX9F+ Hs7JXcyu/9fqeHDliEav4UaPU/xJfTTaFc/HeoUfH8KVOB8mgZBuZULlH/VUsB3g lN35skLQR/y4ZXLfugpWNICsx81vn/mQ60A/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUrRQXCP0P4d2cjhc40R6tNgIjXqgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3JSUVhDUDBQNGQyY2po YzQwUjZ0TmdJalhxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QcwDQYJKoZIhvcNAQELBQADggEBAKuiktmQJplU45t/khbPB26xjkJriUW8 ndzZX4JFh6Vb1dLczdDqYwBJZ9JWKg55KixX1GAI+bzhPLSW1IiEuW4tDoLtJxgd dyvospO1lswl0pTjmQQMHEiV9bp3Om3mIujL1HFLsj4+yd4UMdCQoALBOEyrQaPG iNPapVKpAA7FtaJOJJpq1HCtiWsATg91O3h3W/X+2Crfdb8Xamc1vw72tag9jhxa pZ4zUQiuNHBu0wcrYvY68SUZnXA7btZA5BuVkvUe/5OpE8R9KjqyyDJ82Z0g6c83 rA78HV4WAHeHsfnwvvTF3x5MFKw5iOd7JdZHPfyN8qLKuJT7nb4AlKY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:58 2025 by rpki-client