$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vsusmnFTq9WOEhuXv7kDNPTHGdk.roa File: vsusmnFTq9WOEhuXv7kDNPTHGdk.roa (raw, json) Hash identifier: wFXlhiAYxTf5tvD6Er6gkr1i/IB9MHYvhbAW/u2HJlI= Subject key identifier: BE:CB:AC:9A:71:53:AB:D5:8E:12:1B:97:BF:B9:03:34:F4:C7:19:D9 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 184B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vsusmnFTq9WOEhuXv7kDNPTHGdk.roa Signing time: Fri 17 Jan 2025 01:24:52 +0000 ROA not before: Fri 17 Jan 2025 01:24:52 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6219 (0x184b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:52 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BECBAC9A7153ABD58E121B97BFB90334F4C719D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:35:56:2f:34:a0:8d:fa:7f:88:ec:7d:ef: 3e:b3:fb:97:c4:8c:00:44:61:f5:79:e0:02:9e:53: 61:42:52:ed:c9:42:1b:90:df:ac:12:1e:50:40:de: 57:55:ca:bb:dc:e7:9d:73:9d:29:a3:7d:d0:c6:dc: de:55:a7:3a:4e:d7:0d:39:63:e8:a6:63:2b:d1:91: 86:95:e2:6f:ff:3c:f9:52:76:39:ca:83:26:b1:94: 5b:59:bb:64:23:be:33:83:ed:5d:f1:fe:43:a6:c0: 81:55:1a:6e:a1:f2:1c:78:4f:22:bf:66:7e:0e:02: 91:43:ff:3b:5f:3b:5e:f6:0d:1f:0a:df:c1:99:fe: 9b:5b:a6:8a:42:06:ae:27:c8:5c:22:0e:a7:8b:9d: 88:00:7a:40:3e:b2:dc:39:9e:78:06:68:d2:31:7c: b7:cb:56:18:24:7e:32:6f:c8:76:2c:cd:53:9a:dd: b1:05:96:cb:13:12:ad:17:e7:4b:2d:7a:f2:1d:5c: 0c:9d:00:f2:fd:db:de:a5:ee:f0:a2:0d:1b:90:26: 6f:16:f2:60:da:63:a8:1a:6c:59:3a:ca:54:2c:d0: ce:4f:9b:cc:39:72:d4:89:4e:18:df:21:c9:98:51: b8:03:d5:c0:ad:85:a6:bb:ba:31:a0:bd:62:b2:56: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:AC:9A:71:53:AB:D5:8E:12:1B:97:BF:B9:03:34:F4:C7:19:D9 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vsusmnFTq9WOEhuXv7kDNPTHGdk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.21.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:82:94:8c:cb:73:3c:c9:3d:46:c4:7f:89:d4:4d:b5:75:a9: 1d:88:72:61:1b:ef:38:17:3c:6f:45:76:81:70:a3:a4:89:68: 60:ae:75:b3:c2:6a:e6:bc:3c:91:25:de:54:a3:ea:24:a4:11: 85:c6:ce:cc:11:2c:a3:64:45:ad:67:ae:c6:ad:f6:ba:c9:08: 25:5a:98:5e:e4:c8:65:ad:e6:6e:f1:61:18:c2:f3:c4:f6:fe: fc:63:65:85:a9:43:cf:50:01:b1:ee:1c:36:38:ae:8e:86:3c: 38:c5:58:6e:cc:ea:d9:7b:ce:fb:95:33:bf:2f:ac:a8:bf:86: 8f:1f:1e:1f:0e:f0:12:12:6e:0c:08:c8:a0:ac:c4:f9:43:fe: 18:f8:2e:50:ff:fa:32:92:79:a6:5c:b7:f0:d6:fe:36:ae:08: ef:59:cc:63:46:60:c0:d8:ca:64:8e:1f:b1:fc:61:6f:0a:f0: 62:a7:74:5f:66:53:88:af:5e:94:b4:69:b4:59:74:0d:e3:eb: 15:5b:a0:b1:d8:f6:50:11:da:87:45:36:f8:22:06:8d:62:a4: 09:58:65:6f:d2:5b:5f:53:b4:1d:af:1c:cb:6d:93:7f:ec:5a: 16:d8:8a:2a:1a:6c:92:7a:4b:d0:41:7e:45:ff:00:a3:6a:c9: b5:b1:b9:fa -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJFQ0JBQzlBNzE1M0FC RDU4RTEyMUI5N0JGQjkwMzM0RjRDNzE5RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOYTVWLzSgjfp/iOx97z6z+5fEjABEYfV54AKeU2FCUu3JQhuQ 36wSHlBA3ldVyrvc551znSmjfdDG3N5VpzpO1w05Y+imYyvRkYaV4m//PPlSdjnK gyaxlFtZu2QjvjOD7V3x/kOmwIFVGm6h8hx4TyK/Zn4OApFD/ztfO172DR8K38GZ /ptbpopCBq4nyFwiDqeLnYgAekA+stw5nngGaNIxfLfLVhgkfjJvyHYszVOa3bEF lssTEq0X50stevIdXAydAPL9296l7vCiDRuQJm8W8mDaY6gabFk6ylQs0M5Pm8w5 ctSJThjfIcmYUbgD1cCthaa7ujGgvWKyVnO/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvsusmnFTq9WOEhuXv7kDNPTHGdkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3ZzdXNtbkZUcTlXT0Vo dVh2N2tETlBUSEdkay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RUwDQYJKoZIhvcNAQELBQADggEBAE+ClIzLczzJPUbEf4nUTbV1qR2IcmEb 7zgXPG9FdoFwo6SJaGCudbPCaua8PJEl3lSj6iSkEYXGzswRLKNkRa1nrsat9rrJ CCVamF7kyGWt5m7xYRjC88T2/vxjZYWpQ89QAbHuHDY4ro6GPDjFWG7M6tl7zvuV M78vrKi/ho8fHh8O8BISbgwIyKCsxPlD/hj4LlD/+jKSeaZct/DW/jauCO9ZzGNG YMDYymSOH7H8YW8K8GKndF9mU4ivXpS0abRZdA3j6xVboLHY9lAR2odFNvgiBo1i pAlYZW/SW19TtB2vHMttk3/sWhbYiioabJJ6S9BBfkX/AKNqybWxufo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:43 2025 by rpki-client