$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/eP0e45Od95jnl8eIhw3YtEFcSUc.roa File: eP0e45Od95jnl8eIhw3YtEFcSUc.roa (raw, json) Hash identifier: JiGh7C+slQL8aE+f/fiVUKD/77RcRe3BoZ27+LeX/Pc= Subject key identifier: 78:FD:1E:E3:93:9D:F7:98:E7:97:C7:88:87:0D:D8:B4:41:5C:49:47 Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 08DC Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/eP0e45Od95jnl8eIhw3YtEFcSUc.roa Signing time: Fri 21 Mar 2025 03:31:07 +0000 ROA not before: Fri 21 Mar 2025 03:31:07 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137443 IP address blocks: 103.97.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2268 (0x8dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Mar 21 03:31:07 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=78FD1EE3939DF798E797C788870DD8B4415C4947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:dd:9d:2f:a8:e1:6d:73:c3:83:67:34:7d: c4:7a:8c:ae:8c:ad:27:9e:e5:74:88:c0:4a:46:f6: 3e:2b:4a:0f:fc:ca:a2:0c:0d:87:9a:6e:c4:cb:b0: 1e:fe:ec:52:41:e7:26:9e:57:aa:b7:52:b8:26:a1: 3b:d2:6e:f4:d5:f8:17:5f:c9:ba:17:41:2a:a4:59: 1b:18:83:dd:b0:ff:6f:db:61:fc:f1:62:5a:1b:d8: 85:ff:27:3b:9c:63:09:51:29:a8:a7:4f:7d:7b:32: 61:4f:c0:0e:8e:9c:c0:b8:3c:2f:b0:d4:59:16:25: 8c:cc:2e:b9:54:e6:c8:67:19:1e:a5:07:28:f6:0e: ed:1a:5e:6a:4f:69:f5:cf:91:52:f7:63:14:9a:4d: 7c:fc:8b:db:ff:48:69:1d:e7:00:08:0d:28:38:25: ba:12:8d:27:1d:43:f1:54:53:b3:2c:7b:c4:e4:64: 2f:55:52:70:6c:11:69:70:76:e3:4a:13:40:26:e0: c5:67:f3:21:aa:94:dc:23:e3:f3:aa:73:7a:da:0e: 42:62:7f:7b:61:2f:73:fa:a3:e1:20:a8:11:f3:3d: 79:58:75:50:c8:20:9a:c9:e8:32:1b:16:d5:f7:64: 57:b2:90:97:c5:f8:14:94:1b:ea:75:b2:42:5b:a2: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:1E:E3:93:9D:F7:98:E7:97:C7:88:87:0D:D8:B4:41:5C:49:47 X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/eP0e45Od95jnl8eIhw3YtEFcSUc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.56.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:be:25:9d:21:4f:9d:0d:98:48:31:24:4b:6f:2b:08:f5:61: 2a:94:8b:d2:34:91:b0:34:de:93:aa:9d:8d:66:c1:45:93:e3: 05:9b:3b:11:8e:04:66:3f:7b:50:4a:84:8a:00:87:4e:4d:89: d9:6d:96:d1:db:ae:5c:82:03:89:63:e6:2c:b9:3a:5e:2a:1d: 00:e1:42:93:5b:45:dd:db:76:28:bc:bc:1c:af:6b:04:f1:89: d8:76:e1:38:ea:ee:5e:e5:14:d9:e3:ff:bc:3a:ef:9c:84:76: 7a:ab:47:3e:78:2b:f4:c2:06:2b:5a:7c:56:e4:a2:86:50:b4: a2:38:20:ee:7f:8a:95:bb:5f:c8:7d:f5:77:22:fa:68:b0:76: f4:3c:c5:6d:04:a8:37:c8:9a:66:e8:b4:d2:62:a0:09:c8:91: a0:1d:13:ec:1b:56:03:f8:8c:56:b8:a3:74:dd:55:22:6e:bc: 92:bf:98:26:28:31:79:06:cb:91:2e:f0:1c:e6:70:21:b8:ba: 34:1c:84:e8:81:c7:e6:23:37:1b:ee:2c:89:65:78:ab:bd:0e: 33:4f:45:14:0c:04:0f:1e:08:b5:c9:b1:8f:2f:54:d2:64:b0: ea:6d:fe:f0:8b:9f:85:08:6e:a4:3e:c4:68:36:6e:22:55:b0: c5:fa:0b:a0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNTAzMjEw MzMxMDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc4RkQxRUUzOTM5REY3 OThFNzk3Qzc4ODg3MEREOEI0NDE1QzQ5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVId2dL6jhbXPDg2c0fcR6jK6MrSee5XSIwEpG9j4rSg/8yqIM DYeabsTLsB7+7FJB5yaeV6q3UrgmoTvSbvTV+BdfyboXQSqkWRsYg92w/2/bYfzx Ylob2IX/JzucYwlRKainT317MmFPwA6OnMC4PC+w1FkWJYzMLrlU5shnGR6lByj2 Du0aXmpPafXPkVL3YxSaTXz8i9v/SGkd5wAIDSg4JboSjScdQ/FUU7Mse8TkZC9V UnBsEWlwduNKE0Am4MVn8yGqlNwj4/Oqc3raDkJif3thL3P6o+EgqBHzPXlYdVDI IJrJ6DIbFtX3ZFeykJfF+BSUG+p1skJbog6rAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUeP0e45Od95jnl8eIhw3YtEFcSUcwHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvZVAwZTQ1T2Q5NWpu bDhlSWh3M1l0RUZjU1VjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdhODANBgkqhkiG9w0BAQsFAAOCAQEAjb4lnSFPnQ2YSDEkS28rCPVhKpSL 0jSRsDTek6qdjWbBRZPjBZs7EY4EZj97UEqEigCHTk2J2W2W0duuXIIDiWPmLLk6 XiodAOFCk1tF3dt2KLy8HK9rBPGJ2HbhOOruXuUU2eP/vDrvnIR2eqtHPngr9MIG K1p8VuSihlC0ojgg7n+KlbtfyH31dyL6aLB29DzFbQSoN8iaZui00mKgCciRoB0T 7BtWA/iMVrijdN1VIm68kr+YJigxeQbLkS7wHOZwIbi6NByE6IHH5iM3G+4siWV4 q70OM09FFAwEDx4Itcmxjy9U0mSw6m3+8IufhQhupD7EaDZuIlWwxfoLoA== -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:04 2025 by rpki-client