$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/5dOXEPArMIwz1R8c6IVW4FRS000.roa File: 5dOXEPArMIwz1R8c6IVW4FRS000.roa (raw, json) Hash identifier: V8OEePPh0EzbmmeRwGhFD4Ubnu8IpFSDrSbicBN0AWE= Subject key identifier: E5:D3:97:10:F0:2B:30:8C:33:D5:1F:1C:E8:85:56:E0:54:52:D3:4D Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Certificate serial: 12BA Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/5dOXEPArMIwz1R8c6IVW4FRS000.roa Signing time: Wed 22 Jan 2025 03:28:49 +0000 ROA not before: Wed 22 Jan 2025 03:28:49 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63566 IP address blocks: 103.252.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4794 (0x12ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Validity Not Before: Jan 22 03:28:49 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E5D39710F02B308C33D51F1CE88556E05452D34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:d2:49:bd:0f:fa:12:e0:e8:9e:b1:b2:fe: 4e:f8:ab:46:70:f0:a6:00:a8:86:ea:4c:a9:26:e8: 49:f4:ea:c9:13:ee:d5:45:5c:76:34:21:72:0b:b0: 04:47:5a:d4:33:4f:8b:91:1f:eb:e6:81:80:c8:80: 75:73:4b:ed:1c:5d:f7:e4:2a:4e:5e:7c:fe:1c:c8: 66:53:d0:cc:e4:9b:ac:f3:a3:f7:79:74:b3:29:ee: bf:e5:75:ad:c8:57:2a:b1:b8:43:ab:0b:d8:36:f4: 79:30:b3:d3:90:20:bd:e9:1e:2a:c9:c3:a3:14:c6: 18:cb:e6:c9:39:a7:cc:3e:63:98:36:76:78:a0:6c: db:9a:2d:67:b8:49:42:0d:93:69:e2:bc:ee:7f:e3: 0d:b7:6c:5c:71:ce:82:99:a9:ea:68:ee:56:76:79: 8d:e8:eb:f6:0b:15:8c:8e:5d:82:5d:b4:8f:30:5a: d3:ba:83:42:4b:69:06:49:4a:4d:00:cb:ac:33:b4: 60:7e:7a:5b:e1:fa:c0:12:a9:ee:83:8e:98:65:83: 93:2e:ad:74:55:1b:5f:15:8b:a2:83:ec:4e:7f:69: 7d:df:c3:ad:67:d1:51:b7:18:c6:7d:5b:5b:dc:f2: ec:7e:e7:2c:1f:87:cb:1a:d4:c2:b3:e7:5b:27:53: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D3:97:10:F0:2B:30:8C:33:D5:1F:1C:E8:85:56:E0:54:52:D3:4D X509v3 Authority Key Identifier: keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/5dOXEPArMIwz1R8c6IVW4FRS000.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.252.248.0/24 Signature Algorithm: sha256WithRSAEncryption aa:36:62:01:a9:2e:e5:32:ce:f1:dc:5c:92:e9:35:ee:4e:ab: a6:83:02:00:cc:a2:f9:97:2c:03:bb:73:13:24:b3:9b:7f:29: 74:70:0b:de:df:b6:65:b7:a0:1d:38:a6:ac:6b:ab:c3:49:4c: a8:bb:08:88:58:3f:05:19:c6:c3:7e:98:e8:21:c1:81:c6:56: 0b:47:78:e4:e7:38:d6:3f:11:35:aa:3e:dc:05:3b:59:2d:0d: 10:a6:77:ea:31:df:a4:ea:f5:d1:41:a3:58:ad:4d:57:aa:cf: 28:2c:06:f4:39:d5:0e:50:06:21:d2:cb:3b:1a:d6:31:c7:35: 1a:ab:94:f3:b7:dd:cf:88:27:c1:34:5e:7c:e5:cb:65:6c:aa: 1a:86:d8:07:39:8e:d3:d2:c4:ae:13:65:ef:73:f4:18:49:88: 1b:17:68:bd:d4:a3:f3:97:5f:2f:5a:fc:e4:27:fe:6e:52:93: 31:7d:4f:7e:c2:bd:ce:9b:11:9f:26:1c:59:32:91:a5:aa:60: 4d:e2:24:97:98:d9:23:82:51:b2:23:d2:ae:94:89:d9:fa:03: 95:50:b5:3f:be:1e:44:15:48:63:8b:1e:7e:30:d5:e8:03:86: d6:3e:47:f0:17:ed:50:f8:9b:60:f7:bd:47:57:9a:82:6a:11: 13:ac:74:e5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICErowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZE QjBEODg3NDZGRkMwODE0RTU4OUExMzkyNDBGMkY3NDJEMEM1NjAeFw0yNTAxMjIw MzI4NDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU1RDM5NzEwRjAyQjMw OEMzM0Q1MUYxQ0U4ODU1NkUwNTQ1MkQzNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCehtJJvQ/6EuDonrGy/k74q0Zw8KYAqIbqTKkm6En06skT7tVF XHY0IXILsARHWtQzT4uRH+vmgYDIgHVzS+0cXffkKk5efP4cyGZT0Mzkm6zzo/d5 dLMp7r/lda3IVyqxuEOrC9g29Hkws9OQIL3pHirJw6MUxhjL5sk5p8w+Y5g2dnig bNuaLWe4SUINk2nivO5/4w23bFxxzoKZqepo7lZ2eY3o6/YLFYyOXYJdtI8wWtO6 g0JLaQZJSk0Ay6wztGB+elvh+sASqe6Djphlg5MurXRVG18Vi6KD7E5/aX3fw61n 0VG3GMZ9W1vc8ux+5ywfh8sa1MKz51snU6kDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5dOXEPArMIwz1R8c6IVW4FRS000wHwYDVR0jBBgwFoAUhtsNiHRv/AgU5Ymh OSQPL3QtDFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc3 Ni9odHNOaUhSdl9BZ1U1WW1oT1NRUEwzUXRERlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2h0c05pSFJ2X0FnVTVZbWhPU1FQTDNRdERGWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NzYvNWRPWEVQQXJNSXd6 MVI4YzZJVlc0RlJTMDAwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGf8+DANBgkqhkiG9w0BAQsFAAOCAQEAqjZiAaku5TLO8dxckuk17k6rpoMC AMyi+ZcsA7tzEySzm38pdHAL3t+2ZbegHTimrGurw0lMqLsIiFg/BRnGw36Y6CHB gcZWC0d45Oc41j8RNao+3AU7WS0NEKZ36jHfpOr10UGjWK1NV6rPKCwG9DnVDlAG IdLLOxrWMcc1GquU87fdz4gnwTRefOXLZWyqGobYBzmO09LErhNl73P0GEmIGxdo vdSj85dfL1r85Cf+blKTMX1PfsK9zpsRnyYcWTKRpapgTeIkl5jZI4JRsiPSrpSJ 2foDlVC1P74eRBVIY4sefjDV6AOG1j5H8BftUPibYPe9R1eagmoRE6x05Q== -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:52 2025 by rpki-client