$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vZ7K8_e3IvzIcrzXAR8cumXAlKc.roa File: vZ7K8_e3IvzIcrzXAR8cumXAlKc.roa (raw, json) Hash identifier: YjBOJJZ3qVGVMUTToGxTXRlPTb6whI/k9cwGXJIBxIk= Subject key identifier: BD:9E:CA:F3:F7:B7:22:FC:C8:72:BC:D7:01:1F:1C:BA:65:C0:94:A7 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A3 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vZ7K8_e3IvzIcrzXAR8cumXAlKc.roa Signing time: Fri 17 Jan 2025 01:25:20 +0000 ROA not before: Fri 17 Jan 2025 01:25:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 103.221.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6307 (0x18a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BD9ECAF3F7B722FCC872BCD7011F1CBA65C094A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:27:b7:ca:a7:b9:b9:7c:34:e6:aa:49:21: 38:67:38:da:12:84:2e:da:64:3a:a1:7d:66:92:de: 1f:07:2e:bb:75:bb:31:76:15:ef:7a:56:a8:0b:bc: fa:37:fd:f3:d8:e0:1b:8d:16:2e:80:95:04:79:c0: 0c:b7:67:aa:52:ae:aa:d2:de:1a:36:e4:86:d3:b6: 2c:be:f9:40:60:ae:7c:87:a6:4b:af:b1:0e:b9:7e: 35:74:01:81:d1:5b:8d:39:03:ce:de:a1:b6:37:af: 95:7f:e6:11:95:53:48:32:8d:66:1b:59:0c:e1:cf: 90:87:07:4d:f1:aa:d3:0c:82:49:4f:59:a1:57:cc: 10:65:8a:66:4f:7c:46:7f:c0:42:27:e5:f6:7d:c5: 1c:b6:c9:ac:b7:47:62:9c:2d:25:cb:2f:52:5c:e4: 66:c5:a0:34:61:38:6a:9f:b1:f3:a1:57:f6:c5:87: 3b:a1:36:b8:02:25:c5:0a:52:f5:5d:a1:40:2c:b5: 38:32:50:66:cd:4d:b7:a1:63:e0:00:42:45:35:40: 4a:89:43:7a:26:44:29:cf:a3:22:4a:15:b1:93:4b: 7e:b5:24:46:c6:55:8d:05:0a:32:95:ad:55:77:1f: 0c:f0:f7:2f:7c:f7:16:51:77:73:be:e9:b8:36:b3: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:CA:F3:F7:B7:22:FC:C8:72:BC:D7:01:1F:1C:BA:65:C0:94:A7 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vZ7K8_e3IvzIcrzXAR8cumXAlKc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.16.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:76:6e:18:18:b1:32:d2:7a:6d:fd:fa:c0:aa:3e:2b:f1:bf: c5:31:38:cd:6a:7b:01:fd:ab:7d:3a:61:e5:d1:37:f5:3a:98: 7c:f7:46:ad:e4:a4:70:e6:65:4d:ed:e5:20:6a:38:84:34:58: 60:78:fa:4b:b0:53:ae:7b:8d:04:f9:d8:21:19:28:d6:b4:a3: 39:bf:f2:38:72:9d:2a:7e:82:37:ed:65:80:8f:c0:cb:32:38: 50:18:13:d2:d4:3e:da:25:ba:4a:2e:58:c6:72:f4:0a:e1:25: 43:6b:ad:cf:0a:77:3c:0b:fc:10:9d:b1:df:bc:3f:4a:b6:fb: f8:23:55:15:93:78:ad:29:fe:fa:c0:29:f7:a2:c3:00:e8:a2: 91:7b:75:13:6c:55:91:22:6a:f1:eb:5f:54:c2:53:a6:12:c8: 91:1c:e0:66:9c:1e:19:21:ac:f6:78:01:94:d5:bf:bb:43:92: 1b:5b:76:b1:f1:8c:5e:32:a9:65:3f:ec:79:6e:2b:ae:f8:0d: 33:3e:a4:39:41:e7:68:d8:b9:cf:b0:1f:80:66:5d:32:4e:99: ff:af:fe:82:70:43:24:dc:7b:18:6d:c4:ff:cd:33:d0:fb:c3: 71:e0:41:0d:9e:36:1a:fd:bf:a5:a5:d1:35:ee:3d:78:c9:16: 73:ad:98:0b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJEOUVDQUYzRjdCNzIy RkNDODcyQkNENzAxMUYxQ0JBNjVDMDk0QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz4ye3yqe5uXw05qpJIThnONoShC7aZDqhfWaS3h8HLrt1uzF2 Fe96VqgLvPo3/fPY4BuNFi6AlQR5wAy3Z6pSrqrS3ho25IbTtiy++UBgrnyHpkuv sQ65fjV0AYHRW405A87eobY3r5V/5hGVU0gyjWYbWQzhz5CHB03xqtMMgklPWaFX zBBlimZPfEZ/wEIn5fZ9xRy2yay3R2KcLSXLL1Jc5GbFoDRhOGqfsfOhV/bFhzuh NrgCJcUKUvVdoUAstTgyUGbNTbehY+AAQkU1QEqJQ3omRCnPoyJKFbGTS361JEbG VY0FCjKVrVV3Hwzw9y989xZRd3O+6bg2s/b5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvZ7K8/e3IvzIcrzXAR8cumXAlKcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3ZaN0s4X2UzSXZ6SWNy elhBUjhjdW1YQWxLYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RAwDQYJKoZIhvcNAQELBQADggEBAAx2bhgYsTLSem39+sCqPivxv8UxOM1q ewH9q306YeXRN/U6mHz3Rq3kpHDmZU3t5SBqOIQ0WGB4+kuwU657jQT52CEZKNa0 ozm/8jhynSp+gjftZYCPwMsyOFAYE9LUPtolukouWMZy9ArhJUNrrc8KdzwL/BCd sd+8P0q2+/gjVRWTeK0p/vrAKfeiwwDoopF7dRNsVZEiavHrX1TCU6YSyJEc4Gac HhkhrPZ4AZTVv7tDkhtbdrHxjF4yqWU/7HluK674DTM+pDlB52jYuc+wH4BmXTJO mf+v/oJwQyTcexhtxP/NM9D7w3HgQQ2eNhr9v6Wl0TXuPXjJFnOtmAs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:16 2025 by rpki-client