$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa File: a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa (raw, json) Hash identifier: O0NyOV0UC0NpDn6gKD43mD7tWOO7tpD0289aGPnpmeU= Subject key identifier: 6B:85:E7:DF:86:03:FD:26:3F:CF:87:7B:91:19:B5:68:B6:F9:C5:2A Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Certificate serial: 4D1D Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa Signing time: Fri 17 Jan 2025 01:26:30 +0000 ROA not before: Fri 17 Jan 2025 01:26:30 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 131482 IP address blocks: 103.72.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19741 (0x4d1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53 Validity Not Before: Jan 17 01:26:30 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6B85E7DF8603FD263FCF877B9119B568B6F9C52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:e3:02:9f:10:ba:42:6c:39:5d:2c:8a:b3: 85:10:85:d9:14:5b:da:a7:62:34:56:bc:36:02:70: f1:96:d6:e6:37:45:1a:80:14:ab:9e:8f:6e:b8:c7: 32:d0:24:8a:99:24:29:ce:89:43:10:eb:64:5a:ee: 0d:8a:89:64:cf:a4:5c:67:86:e8:53:2e:7e:6a:f0: b1:b1:eb:7a:46:51:6f:8f:af:a3:0a:c9:2f:f7:8d: 36:40:4c:a0:6a:71:de:e4:34:ed:04:48:06:ce:ef: a8:4c:0d:97:e8:a4:e5:a9:b3:1a:cc:6f:bb:58:1f: 4f:e5:47:a0:10:47:8b:10:ea:55:bf:94:55:89:ff: 2e:21:81:f1:86:c6:d6:41:3b:76:ca:e7:4f:bc:26: 4d:4f:bd:28:ec:15:7f:cf:e6:0f:a9:65:03:68:31: c3:83:85:4f:d5:0e:e4:77:f3:f2:a9:c5:3a:03:cb: a5:0c:b8:11:69:95:a6:f5:4a:59:38:ab:f9:d4:49: 95:f1:32:30:2d:b8:24:69:2a:d4:55:d4:17:03:72: 14:7c:fc:b4:33:f6:39:df:ec:3d:d0:0b:29:3d:c9: 30:d5:a1:8d:3b:c1:a3:60:c7:ba:33:fb:26:1c:f8: 84:f5:7f:f1:cb:41:1c:8e:d5:e8:e0:66:1d:53:c2: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:85:E7:DF:86:03:FD:26:3F:CF:87:7B:91:19:B5:68:B6:F9:C5:2A X509v3 Authority Key Identifier: keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/a4Xn34YD_SY_z4d7kRm1aLb5xSo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 Signature Algorithm: sha256WithRSAEncryption 22:d4:10:93:95:d5:f8:88:80:65:2b:ea:d3:51:f7:0e:fe:c6: d2:7b:25:e0:19:21:4b:57:36:ce:a0:24:6f:73:cb:6b:3d:1a: ff:66:fd:d2:77:b2:9f:23:ff:c4:04:4e:44:00:d2:69:aa:d0: 39:dc:d0:7c:db:20:8d:6a:16:23:10:e7:d9:53:64:b0:3f:9d: 69:9d:91:00:37:1e:6b:00:90:a5:4e:e0:d2:bf:8c:b4:4a:f6: c5:d8:b9:5c:a4:e9:91:5e:ce:30:45:b9:bc:db:6c:63:39:b3: 7b:00:f3:33:6d:bb:3f:c9:ac:27:a3:05:16:09:94:db:f6:aa: 5e:7d:dc:20:0e:9f:6b:63:b2:0f:ee:a8:ed:93:1f:37:76:17: b3:1c:e9:8e:c0:69:1d:60:51:db:b7:95:d5:0d:46:fc:d8:69: 84:ad:1e:3b:c8:23:ab:59:29:74:96:c7:0f:33:c0:f9:68:a5: c1:df:12:3e:8b:bd:43:87:ac:6e:02:94:f8:29:bd:76:91:a0: 82:81:22:d3:bc:13:b7:32:94:2b:77:0d:ad:8a:f7:61:60:b8: 0f:1f:d7:5b:88:69:b3:ae:8e:f7:30:61:71:b8:c0:9b:80:c3: c2:fe:d3:0f:3a:ba:fc:60:55:04:a0:1f:22:c6:41:5f:18:23: c4:c5:e6:d9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICTR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTk4 QTU5NTg2NjVGMzRBMjZBM0RDQUY5NEM2M0IzM0EwNzA1OUE1MzAeFw0yNTAxMTcw MTI2MzBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZCODVFN0RGODYwM0ZE MjYzRkNGODc3QjkxMTlCNTY4QjZGOUM1MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC26+MCnxC6Qmw5XSyKs4UQhdkUW9qnYjRWvDYCcPGW1uY3RRqA FKuej264xzLQJIqZJCnOiUMQ62Ra7g2KiWTPpFxnhuhTLn5q8LGx63pGUW+Pr6MK yS/3jTZATKBqcd7kNO0ESAbO76hMDZfopOWpsxrMb7tYH0/lR6AQR4sQ6lW/lFWJ /y4hgfGGxtZBO3bK50+8Jk1PvSjsFX/P5g+pZQNoMcODhU/VDuR38/KpxToDy6UM uBFplab1Slk4q/nUSZXxMjAtuCRpKtRV1BcDchR8/LQz9jnf7D3QCyk9yTDVoY07 waNgx7oz+yYc+IT1f/HLQRyO1ejgZh1TwifTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUa4Xn34YD/SY/z4d7kRm1aLb5xSowHwYDVR0jBBgwFoAU6YpZWGZfNKJqPcr5 TGOzOgcFmlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3 NS82WXBaV0daZk5LSnFQY3I1VEdPek9nY0ZtbE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZZcFpXR1pmTktKcVBjcjVUR096T2djRm1sTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNzUvYTRYbjM0WURfU1lf ejRkN2tSbTFhTGI1eFNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdIeDANBgkqhkiG9w0BAQsFAAOCAQEAItQQk5XV+IiAZSvq01H3Dv7G0nsl 4BkhS1c2zqAkb3PLaz0a/2b90neynyP/xARORADSaarQOdzQfNsgjWoWIxDn2VNk sD+daZ2RADceawCQpU7g0r+MtEr2xdi5XKTpkV7OMEW5vNtsYzmzewDzM227P8ms J6MFFgmU2/aqXn3cIA6fa2OyD+6o7ZMfN3YXsxzpjsBpHWBR27eV1Q1G/NhphK0e O8gjq1kpdJbHDzPA+Wilwd8SPou9Q4esbgKU+Cm9dpGggoEi07wTtzKUK3cNrYr3 YWC4Dx/XW4hps66O9zBhcbjAm4DDwv7TDzq6/GBVBKAfIsZBXxgjxMXm2Q== -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:25 2025 by rpki-client