$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/w1L72RBIIRZGuSFe6hR5M6X5QTA.roa File: w1L72RBIIRZGuSFe6hR5M6X5QTA.roa (raw, json) Hash identifier: lj5qNiyANym7apx/GDuYSzn7l8sVyttXORCKYLfugvY= Subject key identifier: C3:52:FB:D9:10:48:21:16:46:B9:21:5E:EA:14:79:33:A5:F9:41:30 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 182F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/w1L72RBIIRZGuSFe6hR5M6X5QTA.roa Signing time: Fri 17 Jan 2025 01:24:42 +0000 ROA not before: Fri 17 Jan 2025 01:24:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6191 (0x182f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:42 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C352FBD91048211646B9215EEA147933A5F94130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:43:29:43:22:ab:23:02:b6:95:87:41:f0: e9:63:af:be:15:6b:80:43:ad:cc:ef:85:64:13:d9: f8:cb:96:0b:ec:c9:2d:91:c0:e4:be:eb:12:44:67: 55:24:23:77:f7:35:f2:9a:d2:b8:be:da:5f:ba:24: 47:92:4e:fb:34:ca:96:89:d9:bb:13:3e:3f:2c:30: ee:5a:74:b1:6d:44:ab:c0:ac:b9:f5:30:27:18:fd: 83:cf:bf:40:ea:9e:d8:48:a0:69:a1:f6:af:5e:b5: e3:64:34:e6:35:8b:93:4c:53:17:df:c8:43:e0:28: 61:25:35:1d:1f:c7:50:bc:99:1b:4f:9e:1c:71:4d: 80:b4:40:a8:05:b6:a1:06:93:d5:c6:d2:0e:09:fb: 43:ea:fb:aa:48:18:59:b3:6c:e1:55:d4:62:92:9a: f1:d6:b6:74:76:68:5b:ab:97:2a:51:8e:99:24:13: df:5a:a2:9c:50:0d:ae:60:d1:e6:f8:6c:c4:d8:1b: e3:39:65:81:a8:ec:60:69:ec:52:62:ac:cf:c6:8d: e1:ea:94:3d:e1:4e:09:01:6e:3d:27:d4:6a:2b:5a: 87:22:d1:d1:33:31:7d:95:0d:cc:de:72:11:76:de: 74:c0:4a:27:e6:fe:f0:8a:77:d2:10:75:55:8e:c0: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:52:FB:D9:10:48:21:16:46:B9:21:5E:EA:14:79:33:A5:F9:41:30 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/w1L72RBIIRZGuSFe6hR5M6X5QTA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.8.0/22 Signature Algorithm: sha256WithRSAEncryption d4:6a:36:ae:e6:be:ea:46:1a:e8:91:4d:49:f4:aa:d2:f5:58: 19:6b:56:f6:7c:c4:cb:ed:56:8c:86:fc:7b:02:11:1c:2a:c0: 43:74:a1:49:58:43:9a:80:6e:cf:ef:b3:58:50:61:82:5d:05: ff:a6:6f:30:1b:33:82:cc:ce:1c:1c:61:eb:ff:3b:86:1d:ef: 16:65:14:33:16:ce:2d:2c:1d:29:23:30:d3:5e:94:8e:b6:c3: 88:18:5b:a7:2d:52:29:63:00:c9:f2:ee:58:3a:19:ee:11:f0: f8:7f:89:16:c0:11:25:10:df:59:3f:f8:ca:bb:37:28:e2:41: d6:c8:19:7a:62:1e:af:d5:f9:bd:3b:cf:fe:9e:34:97:75:35: c7:ab:9b:80:59:fe:ed:8e:40:8d:4d:14:c3:1c:ab:97:83:b0: 9c:c6:9b:51:43:70:08:0a:ea:48:c4:f2:99:ab:d2:d7:96:d0: cb:44:42:7f:a2:73:40:e9:a4:bd:4a:d7:3c:4a:fb:19:11:1f: 1a:61:78:85:eb:77:86:ec:f3:3e:4f:1b:67:c0:da:f7:2c:31: 41:f0:2d:0b:e0:43:35:a1:83:72:6b:77:b2:0c:bf:34:7e:83: dd:bb:56:a5:b0:05:92:aa:76:30:2e:cf:63:e5:aa:83:86:80: 07:3e:ea:5a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMzNTJGQkQ5MTA0ODIx MTY0NkI5MjE1RUVBMTQ3OTMzQTVGOTQxMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFRUMpQyKrIwK2lYdB8Oljr74Va4BDrczvhWQT2fjLlgvsyS2R wOS+6xJEZ1UkI3f3NfKa0ri+2l+6JEeSTvs0ypaJ2bsTPj8sMO5adLFtRKvArLn1 MCcY/YPPv0DqnthIoGmh9q9eteNkNOY1i5NMUxffyEPgKGElNR0fx1C8mRtPnhxx TYC0QKgFtqEGk9XG0g4J+0Pq+6pIGFmzbOFV1GKSmvHWtnR2aFurlypRjpkkE99a opxQDa5g0eb4bMTYG+M5ZYGo7GBp7FJirM/GjeHqlD3hTgkBbj0n1GorWoci0dEz MX2VDczechF23nTASifm/vCKd9IQdVWOwBMfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUw1L72RBIIRZGuSFe6hR5M6X5QTAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3cxTDcyUkJJSVJaR3VT RmU2aFI1TTZYNVFUQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QgwDQYJKoZIhvcNAQELBQADggEBANRqNq7mvupGGuiRTUn0qtL1WBlrVvZ8 xMvtVoyG/HsCERwqwEN0oUlYQ5qAbs/vs1hQYYJdBf+mbzAbM4LMzhwcYev/O4Yd 7xZlFDMWzi0sHSkjMNNelI62w4gYW6ctUiljAMny7lg6Ge4R8Ph/iRbAESUQ31k/ +Mq7NyjiQdbIGXpiHq/V+b07z/6eNJd1Ncerm4BZ/u2OQI1NFMMcq5eDsJzGm1FD cAgK6kjE8pmr0teW0MtEQn+ic0DppL1K1zxK+xkRHxpheIXrd4bs8z5PG2fA2vcs MUHwLQvgQzWhg3Jrd7IMvzR+g927VqWwBZKqdjAuz2PlqoOGgAc+6lo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:29 2025 by rpki-client