$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/mlMCvl3JtLRELSM0dAmYY_QyXYA.roa File: mlMCvl3JtLRELSM0dAmYY_QyXYA.roa (raw, json) Hash identifier: ycbIxVFuxzhTUCuY+uVju6/YdBab59Sazv1Ubu9YxeE= Subject key identifier: 9A:53:02:BE:5D:C9:B4:B4:44:2D:23:34:74:09:98:63:F4:32:5D:80 Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Certificate serial: 1BCD Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/mlMCvl3JtLRELSM0dAmYY_QyXYA.roa Signing time: Fri 17 Jan 2025 01:27:04 +0000 ROA not before: Fri 17 Jan 2025 01:27:04 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63677 IP address blocks: 27.0.204.0/22 maxlen: 24 27.0.208.0/22 maxlen: 24 27.0.212.0/22 maxlen: 24 103.208.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7117 (0x1bcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A Validity Not Before: Jan 17 01:27:04 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9A5302BE5DC9B4B4442D233474099863F4325D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:78:94:f0:4d:0c:7f:8e:5a:1a:f9:d6:9c: d4:b7:77:b0:ba:29:1b:5d:eb:fa:c8:bf:40:05:e3: bd:f0:21:72:4a:f5:2f:38:25:55:d9:5c:da:bf:af: bf:70:e7:ff:c7:35:f8:de:49:e2:2f:f8:d3:38:d3: 18:ae:42:eb:83:59:31:fb:ea:d9:bd:f2:a6:57:72: f1:e2:8e:43:25:1c:0a:d9:ea:a2:14:06:f3:14:e9: 30:46:22:dc:d0:5d:9c:44:b7:df:d6:48:ae:3f:fc: 95:ea:fa:a0:79:71:2a:e2:65:fa:90:b9:d1:19:e4: 4a:b3:b1:48:a5:22:96:f1:af:ab:98:06:ae:63:5c: 55:e6:ea:bd:24:4b:fa:5f:6e:2e:bf:f3:f8:44:b3: 74:8f:a0:4b:08:c4:b7:66:6c:0d:4d:a2:6a:72:92: 8b:d6:09:89:7e:a4:bd:82:ff:db:de:01:8f:54:7b: b9:a7:59:1c:08:b0:f8:74:a8:cc:e2:3e:f6:f6:01: da:8d:2a:4b:e8:70:95:ce:f4:38:91:5e:f2:ac:df: 1e:c9:3c:3c:02:7d:2b:28:36:8e:50:0b:b7:c1:98: f5:e9:08:a2:f0:0d:bb:f6:86:ff:39:fb:3a:e0:03: 22:1b:9e:6c:b2:a9:2f:a8:04:26:65:d5:da:5d:2d: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:53:02:BE:5D:C9:B4:B4:44:2D:23:34:74:09:98:63:F4:32:5D:80 X509v3 Authority Key Identifier: keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/mlMCvl3JtLRELSM0dAmYY_QyXYA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.204.0-27.0.215.255 103.208.48.0/22 Signature Algorithm: sha256WithRSAEncryption af:ac:33:61:94:ec:4b:24:6b:ea:72:32:df:cb:07:16:6d:24: ab:ee:b6:c5:1b:eb:66:cd:0a:0e:bf:46:e8:8c:98:24:10:c5: eb:e3:c9:ab:db:58:30:01:da:5f:e2:cb:cc:e2:36:e6:10:5b: dc:86:49:84:1b:5a:39:bf:e4:6b:76:62:41:88:d5:8f:31:f2: f5:01:2b:44:0a:18:06:08:eb:f1:e6:22:64:b1:77:a8:59:06: 2d:9c:9c:04:8f:de:e3:51:2b:c3:bd:61:6e:c8:df:b2:63:88: d5:eb:ce:2a:83:96:23:ba:1c:d3:f3:df:ec:0d:c8:3d:a6:22: 88:8b:8d:4d:26:42:83:8f:28:61:a8:7d:ef:e6:ef:2d:c5:77: dc:c8:20:a3:d3:fa:19:a3:35:77:c7:20:37:d1:f2:5a:48:2f: 08:df:80:96:b6:a5:c8:cb:22:88:48:1e:ec:09:bd:08:2a:26: 46:84:45:e6:d1:fd:ae:5e:0f:bb:91:e7:80:c5:1d:78:22:10: cb:32:b0:77:59:da:68:66:8f:a0:39:fb:ef:f8:cd:a8:79:0f: c2:83:86:ec:7b:34:ab:46:b1:ff:c4:fe:53:84:51:38:9b:00: 70:1b:94:c5:62:61:13:df:f2:bb:42:a5:12:03:83:ce:9e:02: 6e:c3:c6:dc -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICG80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMx RkI1NTNGRjIzMzEyQ0Q5QzI1REUxREE3MjA0OEYwNjQ4M0M1QTAeFw0yNTAxMTcw MTI3MDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlBNTMwMkJFNURDOUI0 QjQ0NDJEMjMzNDc0MDk5ODYzRjQzMjVEODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHQXiU8E0Mf45aGvnWnNS3d7C6KRtd6/rIv0AF473wIXJK9S84 JVXZXNq/r79w5//HNfjeSeIv+NM40xiuQuuDWTH76tm98qZXcvHijkMlHArZ6qIU BvMU6TBGItzQXZxEt9/WSK4//JXq+qB5cSriZfqQudEZ5EqzsUilIpbxr6uYBq5j XFXm6r0kS/pfbi6/8/hEs3SPoEsIxLdmbA1NompykovWCYl+pL2C/9veAY9Ue7mn WRwIsPh0qMziPvb2AdqNKkvocJXO9DiRXvKs3x7JPDwCfSsoNo5QC7fBmPXpCKLw Dbv2hv85+zrgAyIbnmyyqS+oBCZl1dpdLdvDAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQUmlMCvl3JtLRELSM0dAmYY/QyXYAwHwYDVR0jBBgwFoAUTB+1U/8jMSzZwl3h 2nIEjwZIPFowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYz MC9UQi0xVV84ak1Telp3bDNoMm5JRWp3WklQRm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RCLTFVXzhqTVN6WndsM2gybklFandaSVBGby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MzAvbWxNQ3ZsM0p0TFJF TFNNMGRBbVlZX1F5WFlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEw FDAMAwQCGwDMAwQDGwDQAwQCZ9AwMA0GCSqGSIb3DQEBCwUAA4IBAQCvrDNhlOxL JGvqcjLfywcWbSSr7rbFG+tmzQoOv0bojJgkEMXr48mr21gwAdpf4svM4jbmEFvc hkmEG1o5v+RrdmJBiNWPMfL1AStEChgGCOvx5iJksXeoWQYtnJwEj97jUSvDvWFu yN+yY4jV684qg5YjuhzT89/sDcg9piKIi41NJkKDjyhhqH3v5u8txXfcyCCj0/oZ ozV3xyA30fJaSC8I34CWtqXIyyKISB7sCb0IKiZGhEXm0f2uXg+7keeAxR14IhDL MrB3WdpoZo+gOfvv+M2oeQ/Cg4bsezSrRrH/xP5ThFE4mwBwG5TFYmET3/K7QqUS A4POngJuw8bc -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:53 2025 by rpki-client