$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa File: xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa (raw, json) Hash identifier: qbs9IZGLpUInCG1th4daQtkO+ftdy3+Z2dg5p/iX36I= Subject key identifier: C5:9E:1A:F3:B9:72:E9:E3:30:B7:B9:EF:7C:90:BD:2C:C0:F5:66:D5 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 17FB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa Signing time: Fri 17 Jan 2025 01:24:23 +0000 ROA not before: Fri 17 Jan 2025 01:24:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6139 (0x17fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C59E1AF3B972E9E330B7B9EF7C90BD2CC0F566D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:23:f2:ea:2f:04:3c:e4:ed:ce:d6:1c:8f: f4:0f:b5:63:14:c7:85:f0:d7:88:44:c5:92:3a:3a: a5:89:2d:69:54:3f:20:83:f7:00:dc:f5:c6:dc:38: d1:0b:f3:df:09:f3:37:d9:5e:99:45:89:12:47:ca: 4d:3a:f5:61:b9:b7:8c:53:ad:49:9f:60:64:d4:01: 09:3a:56:13:58:df:f9:8f:79:b5:93:56:6f:2b:81: bc:1c:90:0d:61:ec:1a:9c:99:69:06:90:67:bc:db: 2b:88:bb:49:c6:81:23:f5:29:60:a8:e4:21:93:65: a2:9d:ec:c3:2c:4e:8e:ee:90:1f:a6:c0:e8:ca:46: ef:a2:8d:62:b8:cc:55:f9:0b:ef:b0:45:7b:22:45: 29:e8:fc:ef:86:85:42:e6:5a:84:1f:02:ec:95:5d: 06:6b:ca:06:0b:0e:67:bd:7b:f8:04:66:4a:47:09: 63:d3:fd:b3:47:24:c1:fb:e4:f8:d8:dd:94:40:2f: af:af:13:02:7d:35:49:32:f9:f0:b4:f6:56:0b:a5: 28:77:d9:b1:ad:e4:d7:e2:65:76:58:5a:7d:83:09: 6e:6c:3c:20:f2:97:8c:11:56:ff:ef:08:1a:a5:78: 41:30:56:ec:85:7e:69:a3:b1:f7:6a:78:5c:1a:d7: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9E:1A:F3:B9:72:E9:E3:30:B7:B9:EF:7C:90:BD:2C:C0:F5:66:D5 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.12.0/24 Signature Algorithm: sha256WithRSAEncryption 84:3a:57:80:7a:96:9d:36:54:fc:fd:71:be:91:44:14:cc:d9: d2:44:a9:56:5a:eb:f0:f8:6e:57:34:60:a0:ee:73:f9:91:35: 0a:f2:c5:ef:1e:c5:df:64:71:57:be:80:4c:65:d8:b4:54:03: 46:07:e9:29:fb:77:35:ee:5f:e8:4e:5f:7e:5e:0b:eb:2d:23: 7e:42:9a:be:82:da:50:d7:59:17:1b:fb:74:56:5c:5f:67:9c: 37:9c:44:e0:83:dc:83:7d:a7:a6:d7:9a:da:58:f6:70:f1:41: 68:a6:7b:5d:84:09:00:f8:8a:ae:79:19:c3:82:db:bd:15:c0: 7e:df:9b:d4:23:05:d9:8e:b3:7f:33:19:b4:bd:a2:10:e8:14: b2:e3:f3:fb:85:d9:c1:ba:ec:d8:90:58:03:56:35:10:9f:77: fe:ec:86:ff:a3:13:d8:77:d4:d2:e2:30:1b:8c:4c:59:e4:a8: 80:57:e1:a5:52:88:e7:15:0a:f6:a3:e0:e4:d1:0e:08:64:40: 42:4b:bb:d7:28:cf:5e:f5:6a:51:be:a4:1e:82:91:a8:1d:b6: 16:f7:c6:c1:dc:c6:fa:3e:1c:ea:d3:77:d3:0a:26:74:c2:bb: 69:7b:3d:95:7f:f8:2a:35:17:c1:2b:83:42:04:26:db:c1:6d: f5:e3:98:b9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM1OUUxQUYzQjk3MkU5 RTMzMEI3QjlFRjdDOTBCRDJDQzBGNTY2RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR2iPy6i8EPOTtztYcj/QPtWMUx4Xw14hExZI6OqWJLWlUPyCD 9wDc9cbcONEL898J8zfZXplFiRJHyk069WG5t4xTrUmfYGTUAQk6VhNY3/mPebWT Vm8rgbwckA1h7BqcmWkGkGe82yuIu0nGgSP1KWCo5CGTZaKd7MMsTo7ukB+mwOjK Ru+ijWK4zFX5C++wRXsiRSno/O+GhULmWoQfAuyVXQZrygYLDme9e/gEZkpHCWPT /bNHJMH75PjY3ZRAL6+vEwJ9NUky+fC09lYLpSh32bGt5NfiZXZYWn2DCW5sPCDy l4wRVv/vCBqleEEwVuyFfmmjsfdqeFwa12oJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxZ4a87ly6eMwt7nvfJC9LMD1ZtUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3haNGE4N2x5NmVNd3Q3 bnZmSkM5TE1EMVp0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QwwDQYJKoZIhvcNAQELBQADggEBAIQ6V4B6lp02VPz9cb6RRBTM2dJEqVZa 6/D4blc0YKDuc/mRNQryxe8exd9kcVe+gExl2LRUA0YH6Sn7dzXuX+hOX35eC+st I35Cmr6C2lDXWRcb+3RWXF9nnDecROCD3IN9p6bXmtpY9nDxQWime12ECQD4iq55 GcOC270VwH7fm9QjBdmOs38zGbS9ohDoFLLj8/uF2cG67NiQWANWNRCfd/7shv+j E9h31NLiMBuMTFnkqIBX4aVSiOcVCvaj4OTRDghkQEJLu9coz171alG+pB6Ckagd thb3xsHcxvo+HOrTd9MKJnTCu2l7PZV/+Co1F8Erg0IEJtvBbfXjmLk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:10 2025 by rpki-client