$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xwR-9qb23EmJv1jLfs_RNe0eSRY.roa File: xwR-9qb23EmJv1jLfs_RNe0eSRY.roa (raw, json) Hash identifier: 0W1a8UD7pTjSJqOCOWAiJbKcR42XxumWJGtwWnjrfOE= Subject key identifier: C7:04:7E:F6:A6:F6:DC:49:89:BF:58:CB:7E:CF:D1:35:ED:1E:49:16 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1894 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xwR-9qb23EmJv1jLfs_RNe0eSRY.roa Signing time: Fri 17 Jan 2025 01:25:16 +0000 ROA not before: Fri 17 Jan 2025 01:25:16 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 103.221.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6292 (0x1894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:16 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C7047EF6A6F6DC4989BF58CB7ECFD135ED1E4916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fb:6f:4e:14:a1:58:10:23:47:c1:cd:13:1d: ff:91:be:59:23:24:4f:c7:fa:5c:4a:b2:25:3b:5a: fa:80:78:5a:89:23:87:e8:d3:24:84:18:df:d8:ae: ea:80:0f:0e:8b:51:6d:6f:19:25:b0:79:16:01:58: 58:56:68:41:74:b8:6a:1f:e3:11:af:ff:84:16:76: 52:0b:a9:d3:40:b0:67:aa:28:00:72:17:aa:12:ca: 94:89:b2:21:1a:eb:db:50:bb:28:1e:7e:f7:3f:1a: 89:e2:37:47:4b:f4:15:92:db:8b:51:7d:15:ba:4b: 7e:50:9b:5d:e3:50:89:89:53:b8:20:12:5e:3a:3e: 91:18:f0:9c:14:e3:8c:03:68:c4:19:e4:60:72:12: 71:83:d3:46:a1:80:46:cf:34:94:4a:a9:22:be:30: ac:3c:ca:85:42:2c:69:97:66:51:d0:06:a9:16:12: 2b:23:6d:f4:43:56:39:e5:64:cc:63:29:41:dc:31: f4:e3:7a:fd:1f:82:f5:08:59:f3:08:17:a9:e9:02: 3e:54:c0:64:2a:57:08:6f:76:17:f0:b6:ef:2f:ba: 0c:6b:77:6f:8d:9a:79:d7:3d:fc:86:60:e4:82:9d: 59:1d:69:68:33:58:c0:04:58:16:b2:d9:93:10:1b: 27:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:04:7E:F6:A6:F6:DC:49:89:BF:58:CB:7E:CF:D1:35:ED:1E:49:16 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xwR-9qb23EmJv1jLfs_RNe0eSRY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.4.0/22 Signature Algorithm: sha256WithRSAEncryption 90:45:12:92:b1:35:8f:97:00:88:99:c0:43:af:71:d7:28:02: 90:42:04:7c:2e:af:34:80:29:1e:8e:f5:5a:b6:46:08:db:af: 42:4a:1f:bf:76:4f:51:a3:af:0d:2f:8f:8e:f6:4e:ea:11:f5: d1:01:4f:7f:24:5a:48:4a:ac:e5:f7:31:36:91:aa:0a:35:19: 23:44:2b:04:0c:fe:d7:13:93:ec:0f:0e:65:2d:9f:71:3d:37: 35:53:ff:61:f9:9b:f4:4c:5d:6d:04:43:3f:33:ea:42:8d:38: f5:e0:c0:a8:a1:4a:c0:6a:62:03:30:ee:1b:04:01:96:eb:a4: b4:67:66:82:9b:b1:fa:99:4d:5b:ad:e6:42:6a:22:0f:9b:40: 70:8b:17:a7:47:6a:e2:87:a2:2e:34:76:c4:69:9b:3a:90:46: c2:4f:80:cc:c7:a6:5b:a2:05:c8:f0:ae:3b:31:d7:85:01:fe: 70:90:24:38:4b:b8:ba:33:b0:04:a3:05:e7:9a:9a:71:e4:24: 05:2e:d0:9b:bc:03:da:64:00:08:43:3a:ec:21:9c:67:2e:e7: da:0a:06:ff:01:6f:08:99:67:b8:3b:8b:aa:b6:48:76:2e:87: 45:e2:63:0a:9d:2d:99:bb:e3:74:b8:17:e5:10:33:47:a0:8d: 7c:78:a6:19 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM3MDQ3RUY2QTZGNkRD NDk4OUJGNThDQjdFQ0ZEMTM1RUQxRTQ5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk+29OFKFYECNHwc0THf+RvlkjJE/H+lxKsiU7WvqAeFqJI4fo 0ySEGN/YruqADw6LUW1vGSWweRYBWFhWaEF0uGof4xGv/4QWdlILqdNAsGeqKABy F6oSypSJsiEa69tQuygefvc/GoniN0dL9BWS24tRfRW6S35Qm13jUImJU7ggEl46 PpEY8JwU44wDaMQZ5GByEnGD00ahgEbPNJRKqSK+MKw8yoVCLGmXZlHQBqkWEisj bfRDVjnlZMxjKUHcMfTjev0fgvUIWfMIF6npAj5UwGQqVwhvdhfwtu8vugxrd2+N mnnXPfyGYOSCnVkdaWgzWMAEWBay2ZMQGyf9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUxwR+9qb23EmJv1jLfs/RNe0eSRYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3h3Ui05cWIyM0VtSnYx akxmc19STmUwZVNSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QQwDQYJKoZIhvcNAQELBQADggEBAJBFEpKxNY+XAIiZwEOvcdcoApBCBHwu rzSAKR6O9Vq2Rgjbr0JKH792T1Gjrw0vj472TuoR9dEBT38kWkhKrOX3MTaRqgo1 GSNEKwQM/tcTk+wPDmUtn3E9NzVT/2H5m/RMXW0EQz8z6kKNOPXgwKihSsBqYgMw 7hsEAZbrpLRnZoKbsfqZTVut5kJqIg+bQHCLF6dHauKHoi40dsRpmzqQRsJPgMzH pluiBcjwrjsx14UB/nCQJDhLuLozsASjBeeamnHkJAUu0Ju8A9pkAAhDOuwhnGcu 59oKBv8BbwiZZ7g7i6q2SHYuh0XiYwqdLZm743S4F+UQM0egjXx4phk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:27 2025 by rpki-client