$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/MOpfOKLakKUbD4Yvc6IMEETsYXU.roa File: MOpfOKLakKUbD4Yvc6IMEETsYXU.roa (raw, json) Hash identifier: zY3Mu8k0ptEbOfDum8sFDQMosox9jQVr7fMV8zYO27o= Subject key identifier: 30:EA:5F:38:A2:DA:90:A5:1B:0F:86:2F:73:A2:0C:10:44:EC:61:75 Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Certificate serial: 1D89 Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/MOpfOKLakKUbD4Yvc6IMEETsYXU.roa Signing time: Thu 03 Apr 2025 08:53:56 +0000 ROA not before: Thu 03 Apr 2025 08:53:56 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 132168 IP address blocks: 103.204.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7561 (0x1d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022 Validity Not Before: Apr 3 08:53:56 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=30EA5F38A2DA90A51B0F862F73A20C1044EC6175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:dc:64:0a:91:31:85:2b:de:f6:28:a7:ee: 6e:51:ad:ba:93:87:c7:ff:8c:b8:41:5e:f2:16:0c: c1:ba:fe:e2:76:5e:65:dc:7c:9f:2e:d2:b8:c8:eb: a2:25:46:74:3c:80:40:fe:5c:68:69:b9:46:0c:dc: 0c:d9:dc:1f:b2:d9:e6:6c:5d:62:54:0e:c3:3f:0f: 0d:0d:2b:14:b0:95:17:51:09:48:e5:8b:fb:9e:0c: 65:55:2a:59:5b:53:17:37:4d:bd:8f:7f:6c:36:cb: 12:d9:b9:28:20:c9:0b:31:a9:cf:cc:91:ff:6e:74: 6e:73:89:55:b5:ec:ad:e3:b1:f8:9f:6b:c6:81:40: 88:ae:8c:95:34:01:d8:a4:77:15:89:70:43:92:a5: 65:9c:7c:8e:4a:37:21:e1:9a:65:55:fd:77:e0:36: 11:33:96:95:26:97:b7:f7:be:3e:9b:a6:11:d1:e6: 12:99:a6:4a:e7:c5:65:f9:96:b4:e8:d6:95:06:11: 95:7b:d0:c0:c8:94:e4:b4:c5:5f:c8:0e:0b:6c:47: 55:1e:28:cb:74:f3:38:36:9f:51:94:43:ea:d3:bf: 69:bc:b1:16:bc:fe:dc:4d:2d:17:48:85:a9:ff:27: 7f:ab:7f:72:0b:d6:b6:4c:19:ac:9e:a9:55:18:91: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EA:5F:38:A2:DA:90:A5:1B:0F:86:2F:73:A2:0C:10:44:EC:61:75 X509v3 Authority Key Identifier: keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/MOpfOKLakKUbD4Yvc6IMEETsYXU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.204.72.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:c5:8c:38:f1:b9:71:b9:4d:62:1d:87:8b:b5:67:2b:54:21: 07:91:a4:05:2c:2a:32:34:be:fa:64:ac:fc:31:83:37:9d:e4: 4b:77:6b:d6:a0:02:03:6a:3c:aa:a0:b2:eb:ef:a2:9e:32:b5: 10:06:64:f3:f9:fc:32:e4:8b:8c:b7:a2:d2:15:e5:cc:e7:c8: f1:0c:17:f1:e6:40:02:85:cb:d4:ed:13:57:41:7a:3e:35:be: 3b:01:4f:8a:be:5d:a2:78:ec:2c:84:bb:3f:ad:a1:61:f9:40: d9:7a:93:40:be:db:1e:4f:eb:2c:a4:59:8e:b1:01:c9:7a:4f: 72:4e:b0:fe:ad:a0:11:0b:3b:01:0c:4c:e9:c0:fd:e2:35:4e: 2b:44:6d:92:42:5d:59:6a:4c:df:c4:94:8d:62:0f:ca:ce:0a: 88:f6:9f:a7:0c:33:34:a0:f2:83:31:41:d6:1f:61:8d:0a:3a: 30:4d:4e:86:12:31:e2:ff:f5:9e:64:24:dd:47:ea:81:43:81: 52:12:37:1b:3c:5a:be:99:f9:d1:27:a3:11:c5:c1:69:38:5d: 61:ec:e7:0a:36:e1:c9:a7:23:06:9a:da:56:08:8d:ca:27:e0: 0e:a4:38:f5:a9:3f:c7:c7:f2:2a:85:3f:85:86:2d:2c:6b:06: a0:bb:e8:ae -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yNTA0MDMw ODUzNTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMwRUE1RjM4QTJEQTkw QTUxQjBGODYyRjczQTIwQzEwNDRFQzYxNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAwNxkCpExhSve9iin7m5RrbqTh8f/jLhBXvIWDMG6/uJ2XmXc fJ8u0rjI66IlRnQ8gED+XGhpuUYM3AzZ3B+y2eZsXWJUDsM/Dw0NKxSwlRdRCUjl i/ueDGVVKllbUxc3Tb2Pf2w2yxLZuSggyQsxqc/Mkf9udG5ziVW17K3jsfifa8aB QIiujJU0AdikdxWJcEOSpWWcfI5KNyHhmmVV/XfgNhEzlpUml7f3vj6bphHR5hKZ pkrnxWX5lrTo1pUGEZV70MDIlOS0xV/IDgtsR1UeKMt08zg2n1GUQ+rTv2m8sRa8 /txNLRdIhan/J3+rf3IL1rZMGayeqVUYkdcZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUMOpfOKLakKUbD4Yvc6IMEETsYXUwHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvTU9wZk9LTGFrS1Vi RDRZdmM2SU1FRVRzWVhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfMSDANBgkqhkiG9w0BAQsFAAOCAQEAXcWMOPG5cblNYh2Hi7VnK1QhB5Gk BSwqMjS++mSs/DGDN53kS3dr1qACA2o8qqCy6++injK1EAZk8/n8MuSLjLei0hXl zOfI8QwX8eZAAoXL1O0TV0F6PjW+OwFPir5donjsLIS7P62hYflA2XqTQL7bHk/r LKRZjrEByXpPck6w/q2gEQs7AQxM6cD94jVOK0RtkkJdWWpM38SUjWIPys4KiPaf pwwzNKDygzFB1h9hjQo6ME1OhhIx4v/1nmQk3UfqgUOBUhI3Gzxavpn50SejEcXB aThdYeznCjbhyacjBpraVgiNyifgDqQ49ak/x8fyKoU/hYYtLGsGoLvorg== -----END CERTIFICATE-----Generated at Fri Apr 4 18:39:22 2025 by rpki-client