$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/yN4DvNXFlXUW83wyq2-0SDLJLGg.roa File: yN4DvNXFlXUW83wyq2-0SDLJLGg.roa (raw, json) Hash identifier: IXnRarYgIETuQL3VF0Svu8KbqA1NoxIjBkuzUUuArGk= Subject key identifier: C8:DE:03:BC:D5:C5:95:75:16:F3:7C:32:AB:6F:B4:48:32:C9:2C:68 Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 21B0 Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/yN4DvNXFlXUW83wyq2-0SDLJLGg.roa Signing time: Fri 17 Jan 2025 01:28:34 +0000 ROA not before: Fri 17 Jan 2025 01:28:34 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59067 IP address blocks: 103.36.96.0/22 maxlen: 22 103.202.116.0/22 maxlen: 22 103.255.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8624 (0x21b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Jan 17 01:28:34 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C8DE03BCD5C5957516F37C32AB6FB44832C92C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:67:2a:0b:be:d5:5d:f5:7d:f3:a8:6b:4f: ea:a4:27:a0:92:a2:8b:d6:8a:da:17:f0:72:98:ea: 5f:32:48:db:e7:27:19:54:ad:84:0d:28:a0:9d:ac: 48:8f:ed:44:a3:6e:17:ee:63:6e:55:6a:0c:1c:d6: 2d:42:ac:6e:51:4e:f9:2d:4d:5c:a7:50:c0:fd:df: ca:d9:89:2c:f8:b3:c7:7d:c7:be:b0:fe:2a:8b:86: 8f:26:79:56:a4:58:e5:6a:fe:3a:d2:62:62:49:5e: f9:69:2f:37:f0:50:05:5a:d6:49:40:36:05:a3:08: 28:5a:a7:a5:32:ad:e6:80:34:d2:73:a6:1d:44:fe: 64:80:89:25:d3:0b:98:65:c4:1e:d7:06:6e:f4:02: c5:2f:89:8b:6a:88:18:f1:51:d0:5f:de:7c:f5:69: bf:d8:bb:13:15:54:d2:ff:e6:37:f3:a0:e1:8f:43: e9:6c:e9:20:55:35:52:2f:41:c3:e2:8d:18:5c:d9: 40:13:b1:6a:50:0a:c1:40:f1:92:5d:74:7d:12:20: b7:f0:8a:27:8e:42:67:2f:f4:6a:b9:61:9a:ec:5b: c2:df:8f:e7:82:31:85:18:20:9f:b7:40:7d:25:70: 55:e8:6f:5f:61:e9:88:cc:4b:d5:1d:92:62:5a:08: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DE:03:BC:D5:C5:95:75:16:F3:7C:32:AB:6F:B4:48:32:C9:2C:68 X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/yN4DvNXFlXUW83wyq2-0SDLJLGg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.36.96.0/22 103.202.116.0/22 103.255.140.0/22 Signature Algorithm: sha256WithRSAEncryption bf:0d:4d:e7:ae:3e:c2:20:09:e2:03:41:7e:d8:68:1c:8f:7e: e9:a1:8d:36:d5:61:94:bf:02:a4:db:4c:da:5b:91:b1:07:53: 5e:2a:1a:5b:5d:9f:ef:c2:d9:3c:72:7e:b6:0a:3b:b4:67:7a: ae:bc:7e:91:b5:e0:eb:95:0e:c0:92:32:02:ba:e6:4f:46:67: b1:c5:68:c7:6a:ca:45:83:56:47:e2:84:62:cf:66:79:18:23: 3d:b1:ae:8a:2d:1e:1c:46:66:c1:76:1b:8b:77:55:f2:30:4d: cf:66:ce:e0:4d:3e:77:bd:10:69:aa:94:d2:89:31:69:2d:fc: 88:c8:8b:75:23:0f:79:37:76:e0:3c:17:e3:4a:ad:8a:d8:0a: 2b:42:a5:80:0d:0a:8a:c4:d9:9e:b8:99:00:70:df:3b:cc:80: c7:52:63:ba:39:23:55:69:68:f7:e7:99:5f:8d:45:8e:d8:71: c7:b7:4f:17:86:37:96:51:03:c0:33:7e:e2:27:e6:07:23:a4: 97:88:e2:39:59:2a:4a:a9:07:ac:57:0f:bd:80:bd:dc:29:56: a1:bb:1f:05:71:da:78:02:a0:14:4e:26:90:bf:10:15:6f:0b: e8:bf:1f:07:22:6a:d0:a4:8d:16:14:b2:4b:3f:04:7a:00:ae: 84:18:69:94 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgICIbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTAxMTcw MTI4MzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM4REUwM0JDRDVDNTk1 NzUxNkYzN0MzMkFCNkZCNDQ4MzJDOTJDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChEWcqC77VXfV986hrT+qkJ6CSoovWitoX8HKY6l8ySNvnJxlU rYQNKKCdrEiP7USjbhfuY25Vagwc1i1CrG5RTvktTVynUMD938rZiSz4s8d9x76w /iqLho8meVakWOVq/jrSYmJJXvlpLzfwUAVa1klANgWjCChap6UyreaANNJzph1E /mSAiSXTC5hlxB7XBm70AsUviYtqiBjxUdBf3nz1ab/YuxMVVNL/5jfzoOGPQ+ls 6SBVNVIvQcPijRhc2UATsWpQCsFA8ZJddH0SILfwiieOQmcv9Gq5YZrsW8Lfj+eC MYUYIJ+3QH0lcFXob19h6YjMS9UdkmJaCD6pAgMBAAGjggH/MIIB+zAdBgNVHQ4E FgQUyN4DvNXFlXUW83wyq2+0SDLJLGgwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQveU40RHZOWEZsWFVX ODN3eXEyLTBTRExKTEdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw EgMEAmckYAMEAmfKdAMEAmf/jDANBgkqhkiG9w0BAQsFAAOCAQEAvw1N564+wiAJ 4gNBfthoHI9+6aGNNtVhlL8CpNtM2luRsQdTXioaW12f78LZPHJ+tgo7tGd6rrx+ kbXg65UOwJIyArrmT0ZnscVox2rKRYNWR+KEYs9meRgjPbGuii0eHEZmwXYbi3dV 8jBNz2bO4E0+d70QaaqU0okxaS38iMiLdSMPeTd24DwX40qtitgKK0KlgA0KisTZ nriZAHDfO8yAx1JjujkjVWlo9+eZX41Fjthxx7dPF4Y3llEDwDN+4ifmByOkl4ji OVkqSqkHrFcPvYC93ClWobsfBXHaeAKgFE4mkL8QFW8L6L8fByJq0KSNFhSySz8E egCuhBhplA== -----END CERTIFICATE-----Generated at Fri Apr 4 22:02:07 2025 by rpki-client