$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/0oKE0mhaNHTLfOPCJ38Z_ZOGoEc.roa File: 0oKE0mhaNHTLfOPCJ38Z_ZOGoEc.roa (raw, json) Hash identifier: 9D84D3eiGE7dH5bESxClugyf1eqPLPdaqY9NnUOt+bw= Subject key identifier: D2:82:84:D2:68:5A:34:74:CB:7C:E3:C2:27:7F:19:FD:93:86:A0:47 Certificate issuer: /CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Certificate serial: 179C Authority key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/0oKE0mhaNHTLfOPCJ38Z_ZOGoEc.roa Signing time: Wed 09 Apr 2025 07:08:38 +0000 ROA not before: Wed 09 Apr 2025 07:08:38 +0000 ROA not after: Thu 09 Apr 2026 06:40:47 +0000 asID: 59015 IP address blocks: 103.43.240.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6044 (0x179c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B Validity Not Before: Apr 9 07:08:38 2025 GMT Not After : Apr 9 06:40:47 2026 GMT Subject: CN=D28284D2685A3474CB7CE3C2277F19FD9386A047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:71:19:97:d9:79:5d:00:40:73:23:01:b5: 83:9c:d6:4d:31:d5:82:94:cd:5b:f1:4c:46:ef:a2: 67:4c:50:98:f2:d3:db:f1:72:04:d5:b6:55:d1:d9: e9:77:66:70:0f:f3:f1:f2:cc:d9:8a:18:56:fb:34: 44:4c:3a:77:a1:ec:56:72:30:c7:55:5c:91:ee:9b: 29:56:b0:45:f1:d2:0d:0e:80:a3:8e:c3:38:6b:7c: d3:c6:72:81:26:1b:ab:44:64:4e:4d:04:84:a7:34: 14:2b:79:97:30:76:16:31:9a:6d:b3:0f:5b:fe:06: ca:33:f2:c1:6d:60:af:d2:e1:19:fc:0e:79:d7:9c: 51:02:da:dc:3a:bf:01:5d:dc:d2:ed:75:d5:55:41: 61:bc:53:11:84:11:95:0d:93:1a:fd:af:2d:25:3a: 8d:26:eb:35:83:1c:f4:b7:98:53:2a:e0:9d:6b:52: 06:87:64:a7:84:4d:04:cb:cd:24:a9:44:43:6f:19: 52:15:78:d1:7a:ac:81:1a:ef:76:9c:3e:4d:3a:e0: 88:84:db:92:fb:59:ef:1e:4b:5c:1e:6e:6e:30:74: e0:7c:64:b6:6a:c6:98:35:86:95:d4:02:3c:86:eb: d2:7d:e0:dd:ab:d5:8f:00:0c:dc:ea:e7:68:c7:44: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:82:84:D2:68:5A:34:74:CB:7C:E3:C2:27:7F:19:FD:93:86:A0:47 X509v3 Authority Key Identifier: keyid:FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/0oKE0mhaNHTLfOPCJ38Z_ZOGoEc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.43.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:9c:31:b3:11:c1:40:3f:d6:e2:8f:2b:fb:5f:5a:09:82:e0: 9f:ee:d1:f5:23:ae:c3:8d:be:00:2d:ee:c0:a9:73:f8:57:31: ee:34:bf:4c:8c:75:e0:9c:14:a7:19:3d:81:b5:2a:67:c4:aa: 0e:8e:a8:69:48:dd:66:e8:47:dd:0b:cb:35:4e:98:09:bd:33: af:01:48:6a:80:a3:15:09:aa:75:25:ac:9a:a8:8b:2c:f1:5f: 9a:41:46:30:c0:ff:59:af:cb:74:49:0a:bd:77:83:f6:97:27: dc:9a:86:8d:a9:17:3f:19:52:a8:49:c0:2c:33:6b:2b:ed:c1: fd:23:ab:e9:fe:f7:de:85:6d:73:29:a9:b4:a5:53:cd:51:29: bc:21:25:be:90:f7:8a:54:85:77:3b:1e:32:51:39:f1:de:7f: ab:ec:a7:44:df:17:8d:ba:58:3d:84:99:91:04:e9:98:52:8e: 4f:a5:72:22:99:f4:05:56:67:68:59:a6:45:e6:7a:73:94:1d: ad:91:61:f6:98:43:85:d7:64:59:a9:bb:48:b2:2b:f0:8e:da: 0d:92:9c:34:dd:53:40:45:f2:43:97:13:b9:50:ef:a2:39:f8: 0b:7b:30:f3:a1:69:1d:80:b9:50:2b:34:ee:69:b3:e7:49:51: 44:35:ee:d8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF MEM4MjdDRTI5NjIwMjAwNkVCNEVEMkI2NTk1RENFMEU5N0M3QjAeFw0yNTA0MDkw NzA4MzhaFw0yNjA0MDkwNjQwNDdaMDMxMTAvBgNVBAMTKEQyODI4NEQyNjg1QTM0 NzRDQjdDRTNDMjI3N0YxOUZEOTM4NkEwNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUgXEZl9l5XQBAcyMBtYOc1k0x1YKUzVvxTEbvomdMUJjy09vx cgTVtlXR2el3ZnAP8/HyzNmKGFb7NERMOneh7FZyMMdVXJHumylWsEXx0g0OgKOO wzhrfNPGcoEmG6tEZE5NBISnNBQreZcwdhYxmm2zD1v+Bsoz8sFtYK/S4Rn8DnnX nFEC2tw6vwFd3NLtddVVQWG8UxGEEZUNkxr9ry0lOo0m6zWDHPS3mFMq4J1rUgaH ZKeETQTLzSSpRENvGVIVeNF6rIEa73acPk064IiE25L7We8eS1webm4wdOB8ZLZq xpg1hpXUAjyG69J94N2r1Y8ADNzq52jHRN7BAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0oKE0mhaNHTLfOPCJ38Z/ZOGoEcwHwYDVR0jBBgwFoAU/uDIJ84pYgIAbrTt K2WV3ODpfHswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3 L191RElKODRwWWdJQWJyVHRLMldWM09EcGZIcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvX3VESUo4NHBZZ0lBYnJUdEsyV1YzT0RwZkhzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzY3LzBvS0UwbWhhTkhUTGZP UENKMzhaX1pPR29FYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnK/AwDQYJKoZIhvcNAQELBQADggEBACucMbMRwUA/1uKPK/tfWgmC4J/u0fUj rsONvgAt7sCpc/hXMe40v0yMdeCcFKcZPYG1KmfEqg6OqGlI3WboR90LyzVOmAm9 M68BSGqAoxUJqnUlrJqoiyzxX5pBRjDA/1mvy3RJCr13g/aXJ9yaho2pFz8ZUqhJ wCwzayvtwf0jq+n+996FbXMpqbSlU81RKbwhJb6Q94pUhXc7HjJROfHef6vsp0Tf F426WD2EmZEE6ZhSjk+lciKZ9AVWZ2hZpkXmenOUHa2RYfaYQ4XXZFmpu0iyK/CO 2g2SnDTdU0BF8kOXE7lQ76I5+At7MPOhaR2AuVArNO5ps+dJUUQ17tg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:43 2025 by rpki-client