$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa File: bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa (raw, json) Hash identifier: RNoZz5ZbhwwXKrVtRy2IjcnWKsa4adec5z2pFz8Gdyg= Subject key identifier: 6C:F1:3E:88:7B:87:12:AF:31:DA:5A:A2:79:9C:EB:0C:E7:77:16:99 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 202D Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa Signing time: Fri 17 Jan 2025 01:24:12 +0000 ROA not before: Fri 17 Jan 2025 01:24:12 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 212237 IP address blocks: 103.31.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8237 (0x202d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Jan 17 01:24:12 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6CF13E887B8712AF31DA5AA2799CEB0CE7771699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:8a:91:85:a0:b1:73:4d:ed:23:c4:5f:23: ed:49:cc:07:89:37:d8:0f:d1:96:c9:5a:ce:e7:04: b0:df:f8:98:c2:e1:cd:e9:ee:43:10:fa:5a:51:09: 97:5a:45:92:5d:72:15:1a:c1:21:be:89:45:b5:3f: 81:77:d5:57:d6:0c:a6:73:fe:f7:21:13:11:38:78: 9d:52:71:e9:75:47:c2:15:c1:cf:4f:75:60:25:0f: 73:1d:dc:08:30:34:ec:a5:fb:85:54:05:2b:09:ea: 1d:ac:ff:72:98:69:63:ee:40:b9:53:fc:a8:77:18: f4:3e:2b:d3:43:7b:d5:ff:b7:f0:8a:76:f2:cd:27: 2a:e3:db:04:e6:0b:07:85:d8:2b:01:48:05:e4:91: fb:b6:05:47:a5:fd:84:ef:1a:eb:ac:e0:42:0d:bc: fd:c9:3e:45:3f:5c:e3:40:a8:21:ab:ed:5c:48:3f: 44:fb:fd:f4:6d:be:19:0b:5d:55:7d:9c:e7:d2:ef: cf:7c:20:cc:6e:be:31:6d:3f:38:df:19:55:b0:8a: 35:a2:63:5e:1b:09:80:66:a9:87:72:05:d0:32:a6: 5e:95:5b:d2:5c:67:14:88:0f:84:ee:21:67:9e:dc: 3d:b3:44:0e:10:a6:34:3a:14:dc:d5:a3:5a:39:a3: 70:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F1:3E:88:7B:87:12:AF:31:DA:5A:A2:79:9C:EB:0C:E7:77:16:99 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.31.237.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:01:fc:56:c4:3c:c4:72:98:ef:1a:c5:3c:16:96:ca:67:be: ef:a3:a9:cf:c9:6e:26:b7:d2:36:11:bc:73:9d:ff:da:d0:8c: 8d:5f:8c:7b:3d:84:8a:60:a0:11:28:63:ff:90:25:d1:2a:44: 45:06:ff:0d:ba:7a:b6:1f:6e:ca:e3:48:fa:3f:8e:c3:4f:31: df:6d:ef:f7:b2:74:02:e0:5f:c7:8e:ba:f5:00:a1:05:84:6e: c2:d1:08:8c:11:61:04:af:d6:11:4b:d8:37:6a:89:54:19:11: fb:83:56:5b:35:8e:b6:4b:d0:22:18:6e:84:6d:da:9b:3c:31: f7:ea:2b:d6:0a:42:15:e7:3b:8a:da:28:be:a4:a7:af:f3:26: e4:41:c5:52:bf:00:5d:35:b0:b7:55:96:31:c1:0e:48:e6:86: fb:a5:2a:2f:d3:97:7a:fb:0b:42:51:c7:0a:79:72:90:d5:09: 02:a3:75:f5:0e:f0:18:1f:5a:d6:43:de:bd:de:99:70:2e:a4: dc:a2:54:bb:39:53:a9:6b:de:16:27:7b:8d:ca:db:06:40:f1: fe:97:f6:1b:76:4c:5e:e4:39:93:01:c2:84:e2:8c:df:74:4d: 38:d6:db:e6:da:82:53:a3:03:7d:4c:ab:67:75:93:8a:c8:7b: ff:e3:c6:f0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw MTI0MTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZDRjEzRTg4N0I4NzEy QUYzMURBNUFBMjc5OUNFQjBDRTc3NzE2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCutoqRhaCxc03tI8RfI+1JzAeJN9gP0ZbJWs7nBLDf+JjC4c3p 7kMQ+lpRCZdaRZJdchUawSG+iUW1P4F31VfWDKZz/vchExE4eJ1Scel1R8IVwc9P dWAlD3Md3AgwNOyl+4VUBSsJ6h2s/3KYaWPuQLlT/Kh3GPQ+K9NDe9X/t/CKdvLN Jyrj2wTmCweF2CsBSAXkkfu2BUel/YTvGuus4EINvP3JPkU/XONAqCGr7VxIP0T7 /fRtvhkLXVV9nOfS7898IMxuvjFtPzjfGVWwijWiY14bCYBmqYdyBdAypl6VW9Jc ZxSID4TuIWee3D2zRA4QpjQ6FNzVo1o5o3AZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUbPE+iHuHEq8x2lqieZzrDOd3FpkwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvYlBFLWlIdUhFcTh4 MmxxaWVaenJET2QzRnBrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcf7TANBgkqhkiG9w0BAQsFAAOCAQEALgH8VsQ8xHKY7xrFPBaWyme+76Op z8luJrfSNhG8c53/2tCMjV+Mez2EimCgEShj/5Al0SpERQb/Dbp6th9uyuNI+j+O w08x323v97J0AuBfx4669QChBYRuwtEIjBFhBK/WEUvYN2qJVBkR+4NWWzWOtkvQ IhhuhG3amzwx9+or1gpCFec7itoovqSnr/Mm5EHFUr8AXTWwt1WWMcEOSOaG+6Uq L9OXevsLQlHHCnlykNUJAqN19Q7wGB9a1kPevd6ZcC6k3KJUuzlTqWveFid7jcrb BkDx/pf2G3ZMXuQ5kwHChOKM33RNONbb5tqCU6MDfUyrZ3WTish7/+PG8A== -----END CERTIFICATE-----Generated at Wed Jun 4 01:31:05 2025 by rpki-client