$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/z6CClVnpgzoEUqd6q1fF8m2o6iI.roa File: z6CClVnpgzoEUqd6q1fF8m2o6iI.roa (raw, json) Hash identifier: VKU4rAmSAaGFW/UY8T+0iyMmw3OJt+NWskDpvfQf9rQ= Subject key identifier: CF:A0:82:95:59:E9:83:3A:04:52:A7:7A:AB:57:C5:F2:6D:A8:EA:22 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1814 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z6CClVnpgzoEUqd6q1fF8m2o6iI.roa Signing time: Fri 17 Jan 2025 01:24:32 +0000 ROA not before: Fri 17 Jan 2025 01:24:32 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6164 (0x1814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:32 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=CFA0829559E9833A0452A77AAB57C5F26DA8EA22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:db:b7:0f:46:00:d2:cf:53:83:c6:f1:fd: 20:21:97:d6:0b:84:2a:c8:dc:33:56:64:57:9c:96: 2e:31:51:d1:ff:a6:12:d2:7a:c5:87:c8:d4:6c:27: fe:d5:a6:d3:2c:49:51:ff:39:68:fb:32:9c:16:63: 7b:12:be:a4:82:97:e3:76:59:e6:ed:82:a9:c8:30: 7f:f3:3b:bc:31:1b:82:0a:14:c6:b6:4b:89:d5:67: 58:07:52:b4:34:7f:83:81:bc:28:24:1b:f5:4a:8f: df:9d:36:4d:e7:4e:66:33:24:4e:8e:31:68:00:7a: 85:42:06:fc:d5:cc:8d:0b:4b:26:6a:7c:8b:25:20: 40:22:2f:bc:05:55:7e:e3:d6:1b:94:f9:84:a7:fb: 15:6c:53:e0:84:16:ef:40:7c:0d:f1:ed:f4:66:49: c4:80:77:b4:f0:61:5b:2a:c6:5b:4f:3d:85:6b:7b: a8:63:03:ae:93:5a:3c:b1:3b:66:54:58:fd:ff:89: d8:59:7f:c6:7d:a7:ff:f1:0b:48:fa:82:31:ae:f9: 55:f1:4b:39:d4:94:a5:7c:0d:27:5f:42:d6:23:18: 47:5f:db:29:b5:b1:6e:4b:f7:95:b1:fc:45:01:31: cb:67:db:24:d0:78:35:b7:1c:1f:0d:23:05:ea:f7: 46:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A0:82:95:59:E9:83:3A:04:52:A7:7A:AB:57:C5:F2:6D:A8:EA:22 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z6CClVnpgzoEUqd6q1fF8m2o6iI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.93.0/24 Signature Algorithm: sha256WithRSAEncryption 69:f1:ea:62:e6:24:1a:2a:b2:45:4d:b9:ad:aa:53:07:e4:3a: b9:14:18:f8:7a:46:3b:7a:fc:38:ee:86:80:29:31:62:d0:74: 50:10:e7:84:1f:3d:02:7e:70:ed:2d:94:46:5f:90:ca:c5:f0: 62:28:01:4a:f9:eb:3f:c1:27:ec:5e:71:fb:f5:01:80:4c:ea: df:5a:16:cc:d1:bd:9f:91:85:1d:4a:9d:df:b8:d4:93:90:f0: 1d:ea:68:d4:4e:10:bd:d0:23:a1:55:b7:28:fe:04:d6:86:8e: 3a:43:f8:0e:4f:f3:5f:1b:a2:a6:af:23:ab:da:52:1d:94:9f: 9d:c9:f9:80:76:6e:d5:37:7e:51:89:04:22:e4:cd:bc:ab:26: 9f:e1:fc:3a:5e:89:be:cf:4a:e9:9c:5c:68:6f:e3:7a:99:c0: 86:55:e9:89:fe:7d:43:b4:85:ff:78:23:15:19:1c:92:55:6e: 09:9c:fa:43:ce:2b:58:db:51:6f:fa:47:2f:ec:b8:df:06:e0: b3:3f:8c:1b:90:13:4b:7b:bc:dd:40:64:ea:1f:e2:da:93:b2: 3a:69:00:b2:8a:82:c9:60:d2:08:ea:e6:f5:a4:d2:38:21:39: 60:c9:a2:a1:21:f6:28:bb:ca:91:38:7d:d7:6c:1d:a0:8f:33: fc:7c:13:c0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENGQTA4Mjk1NTlFOTgz M0EwNDUyQTc3QUFCNTdDNUYyNkRBOEVBMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8v9u3D0YA0s9Tg8bx/SAhl9YLhCrI3DNWZFecli4xUdH/phLS esWHyNRsJ/7VptMsSVH/OWj7MpwWY3sSvqSCl+N2WebtgqnIMH/zO7wxG4IKFMa2 S4nVZ1gHUrQ0f4OBvCgkG/VKj9+dNk3nTmYzJE6OMWgAeoVCBvzVzI0LSyZqfIsl IEAiL7wFVX7j1huU+YSn+xVsU+CEFu9AfA3x7fRmScSAd7TwYVsqxltPPYVre6hj A66TWjyxO2ZUWP3/idhZf8Z9p//xC0j6gjGu+VXxSznUlKV8DSdfQtYjGEdf2ym1 sW5L95Wx/EUBMctn2yTQeDW3HB8NIwXq90YjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUz6CClVnpgzoEUqd6q1fF8m2o6iIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3o2Q0NsVm5wZ3pvRVVx ZDZxMWZGOG0ybzZpSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3V0wDQYJKoZIhvcNAQELBQADggEBAGnx6mLmJBoqskVNua2qUwfkOrkUGPh6 Rjt6/DjuhoApMWLQdFAQ54QfPQJ+cO0tlEZfkMrF8GIoAUr56z/BJ+xecfv1AYBM 6t9aFszRvZ+RhR1Knd+41JOQ8B3qaNROEL3QI6FVtyj+BNaGjjpD+A5P818boqav I6vaUh2Un53J+YB2btU3flGJBCLkzbyrJp/h/Dpeib7PSumcXGhv43qZwIZV6Yn+ fUO0hf94IxUZHJJVbgmc+kPOK1jbUW/6Ry/suN8G4LM/jBuQE0t7vN1AZOof4tqT sjppALKKgslg0gjq5vWk0jghOWDJoqEh9ii7ypE4fddsHaCPM/x8E8A= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:30 2025 by rpki-client