$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa File: t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa (raw, json) Hash identifier: liS/NDMrWlis5/LsO9ST1R2+GAgWOczM9yPzoVokzM4= Subject key identifier: B7:58:05:F9:F6:49:46:2D:00:20:DD:AF:42:10:5D:7F:78:D2:1E:A8 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18D4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa Signing time: Fri 17 Jan 2025 01:25:38 +0000 ROA not before: Fri 17 Jan 2025 01:25:38 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6356 (0x18d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:38 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B75805F9F649462D0020DDAF42105D7F78D21EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9f:04:3a:d2:aa:4f:8c:08:98:32:fa:a3:39: e7:d8:5f:28:c1:dd:95:47:34:c5:fc:f1:e8:d2:fa: b5:ae:bd:f2:06:97:ae:e9:66:35:19:26:77:24:cc: 99:2c:9f:9b:2a:27:ff:af:dc:5f:0f:a0:bb:60:25: 74:d5:83:3c:51:b9:42:74:68:0b:08:fc:42:9e:62: d6:e6:f2:14:15:0b:53:f5:a7:a2:9a:f0:5c:f6:da: 38:6c:90:d2:08:0e:79:aa:1a:29:e4:63:79:ca:69: 4e:3a:81:be:eb:cc:c7:5d:eb:9d:c3:bc:2f:5a:70: a5:95:55:1e:b0:36:c5:79:7d:b1:20:22:3a:14:00: 27:0a:9b:67:a8:35:12:da:8a:5b:6d:39:71:16:d1: 59:43:63:6a:22:ce:26:97:6e:82:85:75:75:9f:ce: 00:1c:f9:58:ba:f2:87:b0:90:21:3a:39:03:90:53: b4:70:59:53:d9:da:1c:8a:f8:a2:56:79:85:2a:d8: c1:9a:c3:51:fd:60:4c:df:68:79:26:7e:e5:47:f1: 36:0c:df:46:f7:66:4c:96:8d:22:3e:82:b8:63:99: bb:53:18:95:71:0b:47:00:cf:04:0d:cf:97:b7:49: 6f:5b:3a:c2:85:41:1f:d1:59:e9:58:c8:69:8a:d9: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:58:05:F9:F6:49:46:2D:00:20:DD:AF:42:10:5D:7F:78:D2:1E:A8 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/t1gF-fZJRi0AIN2vQhBdf3jSHqg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ff:20:12:01:b0:d8:8f:8f:98:4f:b1:da:7d:9a:43:3f:c8: fc:53:e3:04:ff:65:e2:c3:25:eb:fe:53:3e:dc:df:b5:5d:9c: 47:3b:22:8b:ea:cd:0c:01:91:d5:dc:b7:90:9e:0b:3d:d9:31: 93:38:7c:e8:23:1a:43:a9:8a:b8:96:a7:24:61:ef:f9:c1:3c: 91:8e:b1:ce:04:99:c4:00:f4:52:36:44:e6:59:2c:2f:61:3a: ae:1c:2a:a4:22:87:10:8f:c2:e9:b7:93:08:79:e7:e1:87:81: 7e:ae:34:15:da:c2:16:49:a3:7b:3c:92:7b:33:bc:7d:eb:7f: 61:b4:7b:b5:66:16:7e:46:58:0a:45:38:65:31:70:89:07:6d: 37:cb:fb:c0:88:35:e1:0d:60:4c:4c:59:f9:23:8d:a1:1e:f7: e9:38:56:c7:2a:39:e6:15:93:78:11:48:b2:3d:5e:ff:d3:c7: 0b:c5:2a:13:4f:1c:02:04:13:5c:62:7e:42:55:62:c0:75:89: 6f:9a:9d:3c:73:e5:3f:c5:ee:9d:76:f6:0b:50:8b:ec:dc:c8: 15:d3:11:77:ef:58:e7:f1:17:b0:3e:5e:ce:38:f2:95:50:6b: e8:ec:1a:55:21:51:ad:82:15:dd:7f:66:48:2f:ba:78:e3:3f: e6:4d:63:c4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI3NTgwNUY5RjY0OTQ2 MkQwMDIwRERBRjQyMTA1RDdGNzhEMjFFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjnwQ60qpPjAiYMvqjOefYXyjB3ZVHNMX88ejS+rWuvfIGl67p ZjUZJnckzJksn5sqJ/+v3F8PoLtgJXTVgzxRuUJ0aAsI/EKeYtbm8hQVC1P1p6Ka 8Fz22jhskNIIDnmqGinkY3nKaU46gb7rzMdd653DvC9acKWVVR6wNsV5fbEgIjoU ACcKm2eoNRLailttOXEW0VlDY2oiziaXboKFdXWfzgAc+Vi68oewkCE6OQOQU7Rw WVPZ2hyK+KJWeYUq2MGaw1H9YEzfaHkmfuVH8TYM30b3ZkyWjSI+grhjmbtTGJVx C0cAzwQNz5e3SW9bOsKFQR/RWelYyGmK2S55AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUt1gF+fZJRi0AIN2vQhBdf3jSHqgwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3QxZ0YtZlpKUmkwQUlO MnZRaEJkZjNqU0hxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RwwDQYJKoZIhvcNAQELBQADggEBAB//IBIBsNiPj5hPsdp9mkM/yPxT4wT/ ZeLDJev+Uz7c37VdnEc7IovqzQwBkdXct5CeCz3ZMZM4fOgjGkOpiriWpyRh7/nB PJGOsc4EmcQA9FI2ROZZLC9hOq4cKqQihxCPwum3kwh55+GHgX6uNBXawhZJo3s8 knszvH3rf2G0e7VmFn5GWApFOGUxcIkHbTfL+8CINeENYExMWfkjjaEe9+k4Vscq OeYVk3gRSLI9Xv/TxwvFKhNPHAIEE1xifkJVYsB1iW+anTxz5T/F7p129gtQi+zc yBXTEXfvWOfxF7A+Xs448pVQa+jsGlUhUa2CFd1/ZkgvunjjP+ZNY8Q= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:20 2025 by rpki-client