$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ws4uHgGIt8Zx2f-XVt95BGxwwt8.roa File: ws4uHgGIt8Zx2f-XVt95BGxwwt8.roa (raw, json) Hash identifier: vgCxwxB2Z9Ad5mVpEeJ2tFALPqyX6C8N52ch7PSCSTM= Subject key identifier: C2:CE:2E:1E:01:88:B7:C6:71:D9:FF:97:56:DF:79:04:6C:70:C2:DF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18CD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ws4uHgGIt8Zx2f-XVt95BGxwwt8.roa Signing time: Fri 17 Jan 2025 01:25:36 +0000 ROA not before: Fri 17 Jan 2025 01:25:36 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6349 (0x18cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:36 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C2CE2E1E0188B7C671D9FF9756DF79046C70C2DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:fc:33:bf:a1:ac:67:7e:2a:a7:71:1b:3f: ae:f5:a9:85:33:1e:32:bd:bd:3e:e5:11:d8:e8:77: cd:7e:07:27:9d:f5:e9:77:ef:5d:26:e9:8a:35:ee: 6a:aa:b1:e6:a4:1c:b4:e3:a7:a7:01:d5:da:e3:e5: 7a:e1:00:77:ce:4c:ea:bd:05:17:bb:95:5c:ac:00: 67:f9:f9:3a:39:ad:0f:94:ea:b6:39:ff:26:41:2e: 91:19:29:18:c2:e0:65:3a:d3:2d:26:13:ce:0a:d1: 31:c3:10:1f:4e:48:6b:f2:88:da:62:13:ca:78:a4: 1e:e5:68:65:42:25:ce:ab:6d:bd:42:84:ec:8d:b8: 75:ef:9f:5f:38:48:94:b8:7a:73:b9:a6:27:73:32: 18:22:a5:3b:6b:19:6e:06:7a:bd:d8:af:0f:06:39: d5:71:34:70:78:5a:7e:c8:29:1e:0e:51:83:49:12: 6a:9c:41:be:47:26:fd:eb:0b:ac:7e:40:3f:ae:30: df:9c:54:79:ec:ea:f3:3c:ef:a7:74:79:99:9b:13: ba:b6:12:75:d1:18:b5:33:6c:a6:ce:76:e6:9d:32: 81:f0:dc:0d:19:5d:00:65:98:9b:89:7b:f4:fb:6d: b4:71:37:c9:aa:96:38:08:be:c7:08:bd:c0:9e:c3: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CE:2E:1E:01:88:B7:C6:71:D9:FF:97:56:DF:79:04:6C:70:C2:DF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ws4uHgGIt8Zx2f-XVt95BGxwwt8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.5.0/24 Signature Algorithm: sha256WithRSAEncryption c3:13:30:e1:75:fe:c6:5e:88:44:1f:04:3a:89:cf:1e:5d:5f: 0b:7a:b8:b4:51:9f:4f:e6:49:cf:d3:bb:84:96:a5:08:d2:d6: d3:e7:4e:f4:04:b5:77:2f:d9:1b:c6:27:39:31:17:30:0a:7b: 53:97:07:18:51:55:62:44:59:22:57:e2:e0:0e:32:10:84:f5: f6:78:4c:22:0d:b6:08:0d:18:bc:84:dc:f5:45:a9:5f:f3:b3: a7:23:78:07:62:11:5b:a3:7b:45:a9:ad:40:cc:85:c5:e1:eb: da:dc:e3:f8:5f:4a:d3:65:1f:6d:da:93:ab:9e:d6:65:ae:87: a5:4c:65:4c:b6:00:5d:6a:c0:f5:bf:bf:18:08:76:7c:7f:86: 54:b3:6e:5f:43:3b:2a:dc:b8:91:b6:3e:f4:b4:22:33:c0:67: 81:9c:fc:e4:92:fd:b2:b5:aa:a2:5a:3e:09:82:41:68:20:e1: 17:4a:e2:30:2d:9c:a4:b2:e5:28:bf:66:b6:87:58:b9:b9:d3: d2:a7:d5:69:49:03:e8:88:ee:ba:01:23:3a:6c:fe:0c:e9:8b: d7:0b:15:a0:5c:8f:db:42:72:2d:00:65:39:01:eb:0c:b9:20: 4d:e7:29:a4:08:71:a0:46:0d:21:de:d6:68:dd:e3:d0:ac:dc: c3:82:fe:cf -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMyQ0UyRTFFMDE4OEI3 QzY3MUQ5RkY5NzU2REY3OTA0NkM3MEMyREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Mfwzv6GsZ34qp3EbP671qYUzHjK9vT7lEdjod81+Byed9el3 710m6Yo17mqqseakHLTjp6cB1drj5XrhAHfOTOq9BRe7lVysAGf5+To5rQ+U6rY5 /yZBLpEZKRjC4GU60y0mE84K0THDEB9OSGvyiNpiE8p4pB7laGVCJc6rbb1ChOyN uHXvn184SJS4enO5pidzMhgipTtrGW4Ger3Yrw8GOdVxNHB4Wn7IKR4OUYNJEmqc Qb5HJv3rC6x+QD+uMN+cVHns6vM876d0eZmbE7q2EnXRGLUzbKbOduadMoHw3A0Z XQBlmJuJe/T7bbRxN8mqljgIvscIvcCewx9vAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUws4uHgGIt8Zx2f+XVt95BGxwwt8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3dzNHVIZ0dJdDhaeDJm LVhWdDk1Qkd4d3d0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QUwDQYJKoZIhvcNAQELBQADggEBAMMTMOF1/sZeiEQfBDqJzx5dXwt6uLRR n0/mSc/Tu4SWpQjS1tPnTvQEtXcv2RvGJzkxFzAKe1OXBxhRVWJEWSJX4uAOMhCE 9fZ4TCINtggNGLyE3PVFqV/zs6cjeAdiEVuje0WprUDMhcXh69rc4/hfStNlH23a k6ue1mWuh6VMZUy2AF1qwPW/vxgIdnx/hlSzbl9DOyrcuJG2PvS0IjPAZ4Gc/OSS /bK1qqJaPgmCQWgg4RdK4jAtnKSy5Si/ZraHWLm509Kn1WlJA+iI7roBIzps/gzp i9cLFaBcj9tCci0AZTkB6wy5IE3nKaQIcaBGDSHe1mjd49Cs3MOC/s8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:30 2025 by rpki-client