$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/wBfzi9DVvJBqpWOdgn_Enb20PKE.roa File: wBfzi9DVvJBqpWOdgn_Enb20PKE.roa (raw, json) Hash identifier: vxQooelYK8GHAhBkJhdcEitFbO7l/Rpn4sTXfROBvj4= Subject key identifier: C0:17:F3:8B:D0:D5:BC:90:6A:A5:63:9D:82:7F:C4:9D:BD:B4:3C:A1 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 305B Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wBfzi9DVvJBqpWOdgn_Enb20PKE.roa Signing time: Sun 30 Mar 2025 19:58:18 +0000 ROA not before: Sun 30 Mar 2025 19:58:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 134762 IP address blocks: 103.45.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12379 (0x305b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C017F38BD0D5BC906AA5639D827FC49DBDB43CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1b:3a:84:53:ab:72:51:98:11:2e:6e:24:be: cc:af:35:c0:b7:f4:80:1b:45:3c:68:dd:dc:56:f0: d3:65:d1:ac:36:42:1b:d8:51:fb:3d:65:2a:69:42: 32:49:25:7e:a2:59:58:e0:aa:37:85:23:df:44:60: 90:e4:cb:3e:a3:a7:3c:b5:23:da:05:14:27:07:a3: 36:08:f2:c9:25:f5:04:cc:42:2c:56:34:10:35:af: 5c:ee:15:97:93:4f:79:01:98:ab:e6:19:e8:dd:1a: 3e:dd:dd:c4:21:d0:9b:d9:47:d0:05:c7:de:d9:33: b9:5b:da:1d:88:86:be:35:6f:c0:25:36:df:b7:68: 64:df:63:c6:00:89:7f:59:b9:1f:f8:de:d5:fb:97: de:ea:32:07:b3:bb:dc:de:cf:48:26:77:95:67:ca: dd:ca:6c:99:ef:4d:94:bc:57:80:f3:d1:8c:aa:77: 76:00:2b:75:94:5a:5c:78:e3:c6:4b:a0:63:bc:70: 87:05:56:34:da:6b:9c:58:65:10:de:54:da:80:cf: ca:be:3b:29:bf:16:1a:ac:4b:2d:ed:82:12:3d:b0: e8:6a:8d:dc:99:49:12:65:ba:47:07:e5:73:b5:ec: b9:84:d2:b0:d2:cb:64:0f:30:4b:35:6c:5a:b4:d5: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:17:F3:8B:D0:D5:BC:90:6A:A5:63:9D:82:7F:C4:9D:BD:B4:3C:A1 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wBfzi9DVvJBqpWOdgn_Enb20PKE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.248.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:89:93:4b:a9:7b:99:a6:7f:45:a5:48:59:d5:50:8c:b3:03: d1:6e:d6:45:85:a1:e8:64:76:08:cc:b7:ca:7c:79:14:26:71: 68:0f:16:f9:7b:f9:53:ae:b9:1d:5f:82:e8:95:ac:74:57:9b: 39:04:5f:9b:22:33:39:4a:c4:c2:11:be:88:05:c6:0e:17:fe: da:be:5a:6c:e4:fd:78:90:10:04:60:b9:1a:6b:94:66:58:55: d5:9b:a4:15:b9:6a:2e:8b:ec:34:5c:5a:55:a7:6e:b5:1c:1a: 36:92:42:1b:81:c2:06:de:b8:32:f1:55:91:a5:8a:7a:12:15: 14:61:af:2f:5f:cd:60:57:e6:ee:99:01:e2:68:f9:a9:77:78: 60:a2:21:ae:e7:e2:2a:b1:e3:16:38:3c:43:f8:a0:30:6a:7e: be:c9:2a:6a:6a:02:dc:16:35:fe:c2:e5:2a:8c:b1:78:20:e9: 8a:0b:e8:07:b5:08:c4:1c:a7:15:34:62:e3:27:d3:c0:d6:e1: 0b:84:0d:54:02:75:d3:19:44:04:f8:70:ff:77:bc:33:34:6e: 9f:0d:d6:ab:a4:5e:a5:62:d5:a0:f8:66:c3:b3:e0:d0:e6:b1: f8:11:11:45:5d:a7:c2:f5:b8:5c:d7:5a:39:00:0e:32:09:2e: fd:e7:9c:a9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMwMTdGMzhCRDBENUJD OTA2QUE1NjM5RDgyN0ZDNDlEQkRCNDNDQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpGzqEU6tyUZgRLm4kvsyvNcC39IAbRTxo3dxW8NNl0aw2QhvY Ufs9ZSppQjJJJX6iWVjgqjeFI99EYJDkyz6jpzy1I9oFFCcHozYI8skl9QTMQixW NBA1r1zuFZeTT3kBmKvmGejdGj7d3cQh0JvZR9AFx97ZM7lb2h2Ihr41b8AlNt+3 aGTfY8YAiX9ZuR/43tX7l97qMgezu9zez0gmd5Vnyt3KbJnvTZS8V4Dz0Yyqd3YA K3WUWlx448ZLoGO8cIcFVjTaa5xYZRDeVNqAz8q+Oym/FhqsSy3tghI9sOhqjdyZ SRJlukcH5XO17LmE0rDSy2QPMEs1bFq01TqPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUwBfzi9DVvJBqpWOdgn/Enb20PKEwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvd0Jmemk5RFZ2SkJx cFdPZGduX0VuYjIwUEtFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmct+DANBgkqhkiG9w0BAQsFAAOCAQEAbomTS6l7maZ/RaVIWdVQjLMD0W7W RYWh6GR2CMy3ynx5FCZxaA8W+Xv5U665HV+C6JWsdFebOQRfmyIzOUrEwhG+iAXG Dhf+2r5abOT9eJAQBGC5GmuUZlhV1ZukFblqLovsNFxaVadutRwaNpJCG4HCBt64 MvFVkaWKehIVFGGvL1/NYFfm7pkB4mj5qXd4YKIhrufiKrHjFjg8Q/igMGp+vskq amoC3BY1/sLlKoyxeCDpigvoB7UIxBynFTRi4yfTwNbhC4QNVAJ10xlEBPhw/3e8 MzRunw3Wq6RepWLVoPhmw7Pg0Oax+BERRV2nwvW4XNdaOQAOMgku/eecqQ== -----END CERTIFICATE-----Generated at Wed Jun 4 01:24:44 2025 by rpki-client