$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa File: vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa (raw, json) Hash identifier: gUl/BfZNO/IOIm/uzakyDY6TMIhkZF8kZ8+Emzgycrs= Subject key identifier: BE:9C:7D:3D:B2:9A:F0:E3:3D:54:10:69:46:1C:19:13:02:8D:28:6F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 17FF Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa Signing time: Fri 17 Jan 2025 01:24:25 +0000 ROA not before: Fri 17 Jan 2025 01:24:25 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 103.221.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6143 (0x17ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:25 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BE9C7D3DB29AF0E33D541069461C1913028D286F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:d8:bc:74:4c:df:30:2f:52:fe:c0:d7:36: 88:d4:95:91:c6:27:30:95:85:f4:e4:c4:9b:53:62: b8:73:0c:ef:7c:5e:86:f0:21:27:c5:13:c7:db:4b: d6:30:ee:c4:28:0a:e4:1a:ff:5b:17:13:fd:2f:93: 3e:39:4f:11:48:11:58:e8:14:d8:bb:a1:ad:3a:bf: dc:6c:ff:12:7a:28:12:28:85:c5:a1:cd:78:ff:a1: ec:9c:58:56:af:43:36:2b:4c:0a:ca:54:58:fb:0c: 5b:9f:a4:65:9f:0a:49:00:1a:c8:dd:4e:07:80:44: 2f:d2:e1:c8:32:f6:1f:9b:6b:c2:0a:99:fd:30:c9: 1d:ba:55:8b:4d:bd:d5:00:24:d9:22:fb:34:57:e1: 62:c1:5b:e6:90:09:2f:7d:ee:44:cb:da:a7:5b:0f: e5:95:9c:b0:68:37:76:9c:f5:7a:74:67:49:47:a6: 6e:8b:7b:60:af:eb:00:56:61:b4:f4:0d:dd:f7:9e: b4:e1:fd:ed:09:8f:b3:a4:1f:71:7e:f4:c7:4d:fb: c9:b7:7d:9e:2a:c0:f5:0e:15:ec:10:fc:81:7a:bb: 8f:a7:1b:e0:3e:16:57:ac:82:9a:11:53:d5:b5:e7: 4e:43:30:34:7c:9c:d8:50:e6:ec:ee:bc:70:e7:be: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9C:7D:3D:B2:9A:F0:E3:3D:54:10:69:46:1C:19:13:02:8D:28:6F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vpx9PbKa8OM9VBBpRhwZEwKNKG8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.24.0/22 Signature Algorithm: sha256WithRSAEncryption 63:1b:95:57:66:ac:21:7e:e4:22:28:e3:65:5b:8c:86:91:41: 2a:87:e8:dd:0e:c2:c6:77:51:09:57:4e:bf:59:4f:06:91:fb: 47:46:f0:af:95:0b:30:a9:d4:da:86:0d:a4:11:90:98:59:34: 17:56:1e:87:d7:4e:b2:78:8f:a7:d3:cd:6b:81:94:d3:0b:9e: 63:25:fe:a9:c3:44:b9:c6:a6:6a:0f:90:50:f9:ca:bd:5d:d1: fe:6b:15:1c:24:4e:5e:83:a5:d3:74:96:17:8d:67:4f:6f:59: 98:79:eb:ea:63:e9:6c:49:32:4a:cf:b7:1d:3b:28:9c:78:f3: 3a:41:0f:5d:17:92:32:df:fc:01:c6:30:2f:f1:11:b5:98:15: 98:1f:fd:f8:d9:91:99:ff:c0:c7:c5:c2:43:05:60:ed:bf:fd: 8d:01:12:8e:4c:a0:93:6e:3c:99:05:6b:85:02:b7:6a:4f:60: 57:9d:bb:c3:72:28:c9:3e:5a:c3:44:80:81:98:20:dc:8b:fe: 9b:f4:23:a0:37:ff:30:b1:65:7d:9e:e0:7f:88:30:f7:1b:27: f3:8a:fe:35:02:90:4e:91:c3:70:72:a0:18:bb:f4:c1:41:a5: b9:e0:36:c4:7b:07:c1:30:02:e3:a9:1b:c2:a8:eb:a6:f7:0b: a1:03:2e:e0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJFOUM3RDNEQjI5QUYw RTMzRDU0MTA2OTQ2MUMxOTEzMDI4RDI4NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnE9i8dEzfMC9S/sDXNojUlZHGJzCVhfTkxJtTYrhzDO98Xobw ISfFE8fbS9Yw7sQoCuQa/1sXE/0vkz45TxFIEVjoFNi7oa06v9xs/xJ6KBIohcWh zXj/oeycWFavQzYrTArKVFj7DFufpGWfCkkAGsjdTgeARC/S4cgy9h+ba8IKmf0w yR26VYtNvdUAJNki+zRX4WLBW+aQCS997kTL2qdbD+WVnLBoN3ac9Xp0Z0lHpm6L e2Cv6wBWYbT0Dd33nrTh/e0Jj7OkH3F+9MdN+8m3fZ4qwPUOFewQ/IF6u4+nG+A+ FlesgpoRU9W1505DMDR8nNhQ5uzuvHDnvgITAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvpx9PbKa8OM9VBBpRhwZEwKNKG8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3ZweDlQYkthOE9NOVZC QnBSaHdaRXdLTktHOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RgwDQYJKoZIhvcNAQELBQADggEBAGMblVdmrCF+5CIo42VbjIaRQSqH6N0O wsZ3UQlXTr9ZTwaR+0dG8K+VCzCp1NqGDaQRkJhZNBdWHofXTrJ4j6fTzWuBlNML nmMl/qnDRLnGpmoPkFD5yr1d0f5rFRwkTl6DpdN0lheNZ09vWZh56+pj6WxJMkrP tx07KJx48zpBD10XkjLf/AHGMC/xEbWYFZgf/fjZkZn/wMfFwkMFYO2//Y0BEo5M oJNuPJkFa4UCt2pPYFedu8NyKMk+WsNEgIGYINyL/pv0I6A3/zCxZX2e4H+IMPcb J/OK/jUCkE6Rw3ByoBi79MFBpbngNsR7B8EwAuOpG8Ko66b3C6EDLuA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:35 2025 by rpki-client