$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2815/a-C0ZcbMEIueflbcZASicAD8he0.roa File: a-C0ZcbMEIueflbcZASicAD8he0.roa (raw, json) Hash identifier: j0QlysAnrzL+WWQvVGQm8SUA6f3yOOh++yMn2DzuE1Q= Subject key identifier: 6B:E0:B4:65:C6:CC:10:8B:9E:7E:56:DC:64:04:A2:70:00:FC:85:ED Certificate issuer: /CN=1FCAD722567791FD73A091FE891C948F1914D672 Certificate serial: 05A6 Authority key identifier: 1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/a-C0ZcbMEIueflbcZASicAD8he0.roa Signing time: Wed 09 Apr 2025 06:48:45 +0000 ROA not before: Wed 09 Apr 2025 06:48:45 +0000 ROA not after: Thu 09 Apr 2026 06:41:32 +0000 asID: 132019 IP address blocks: 103.69.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCAD722567791FD73A091FE891C948F1914D672 Validity Not Before: Apr 9 06:48:45 2025 GMT Not After : Apr 9 06:41:32 2026 GMT Subject: CN=6BE0B465C6CC108B9E7E56DC6404A27000FC85ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:5c:c8:28:29:e3:ca:37:18:cc:e3:a0:1b: 06:43:93:9a:7e:75:a9:b4:b5:60:e7:27:aa:a8:b7: e7:e6:bc:56:1d:38:62:21:58:7b:8b:2f:ab:19:07: a0:f1:27:b3:fb:7b:0a:81:df:8a:53:c5:36:09:35: ca:e7:e8:ab:ed:c3:32:4c:41:af:56:b9:3a:b0:4d: d2:e4:d1:85:e0:3c:e2:9f:88:ea:e0:0c:51:dc:42: e0:1a:e9:80:0d:30:88:24:6d:e7:27:92:69:c3:5b: 6c:34:31:3f:66:07:40:ce:aa:f1:fe:d8:31:7a:ba: 12:d7:ee:14:22:63:f3:f9:c4:80:41:e4:92:50:24: dd:bb:18:40:4a:c0:d4:34:87:8d:0c:c3:76:48:1b: fd:44:ba:ec:17:1f:6a:7d:d7:93:29:a1:c8:ca:d7: 47:4c:16:1a:6b:86:a9:58:6c:e2:55:f2:d7:4f:37: 0a:e0:17:0d:95:8e:08:31:b7:c3:01:e5:59:fa:c1: bd:3b:a9:67:6e:8a:eb:a3:00:43:3e:42:64:57:cb: 7a:9f:e1:b3:c5:ac:0f:de:13:d2:43:e0:df:20:3a: ce:d2:08:32:10:f6:2a:fe:1a:e9:8b:8f:10:63:95: df:2a:33:fe:77:07:46:ee:b9:fd:b3:16:fe:af:1f: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E0:B4:65:C6:CC:10:8B:9E:7E:56:DC:64:04:A2:70:00:FC:85:ED X509v3 Authority Key Identifier: keyid:1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/a-C0ZcbMEIueflbcZASicAD8he0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.69.116.0/22 Signature Algorithm: sha256WithRSAEncryption 09:7b:76:8c:24:38:e8:8d:b5:1c:79:d0:8d:1f:bc:a5:76:fa: ea:56:8a:72:ed:c2:b1:19:cd:68:bf:d1:72:89:c6:d5:a3:51: d8:06:1a:12:fd:bc:b4:15:1c:b7:bd:2f:41:17:e1:12:84:67: c0:8c:96:2e:bd:cc:35:bd:f6:f6:05:a4:a6:9d:5a:a4:7e:39: 5c:d2:60:70:e9:57:95:c4:aa:ca:cd:f0:a9:dd:34:23:4c:54: 40:cb:67:83:3a:41:80:da:b6:58:a6:b5:6d:00:1d:83:e8:e7: 28:9c:55:67:50:81:26:41:a1:91:e2:26:ed:44:c0:d2:97:87: 2e:67:38:78:99:da:21:e4:50:0d:ef:66:67:ef:bd:0f:7c:84: 9e:02:d8:16:45:5f:4e:9c:4b:4f:53:11:01:d0:cc:a2:5b:cc: 4c:49:8f:17:a6:04:a0:54:99:35:50:b3:39:19:c4:66:17:3d: 6c:72:c2:5f:2b:f8:2e:99:2c:bc:ce:bb:50:30:7e:bd:7c:8b: ab:98:78:5c:93:2c:ad:ba:14:de:e4:00:c1:c6:58:c2:69:f5: 36:77:ab:2c:20:6b:99:d2:a5:05:07:9c:62:af:bc:a4:d5:aa: 7a:2f:e4:30:c5:3e:19:83:67:1d:5f:2c:80:00:bd:dc:3b:64: a6:54:7d:8a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUZD QUQ3MjI1Njc3OTFGRDczQTA5MUZFODkxQzk0OEYxOTE0RDY3MjAeFw0yNTA0MDkw NjQ4NDVaFw0yNjA0MDkwNjQxMzJaMDMxMTAvBgNVBAMTKDZCRTBCNDY1QzZDQzEw OEI5RTdFNTZEQzY0MDRBMjcwMDBGQzg1RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn91zIKCnjyjcYzOOgGwZDk5p+dam0tWDnJ6qot+fmvFYdOGIh WHuLL6sZB6DxJ7P7ewqB34pTxTYJNcrn6KvtwzJMQa9WuTqwTdLk0YXgPOKfiOrg DFHcQuAa6YANMIgkbecnkmnDW2w0MT9mB0DOqvH+2DF6uhLX7hQiY/P5xIBB5JJQ JN27GEBKwNQ0h40Mw3ZIG/1EuuwXH2p915MpocjK10dMFhprhqlYbOJV8tdPNwrg Fw2Vjggxt8MB5Vn6wb07qWduiuujAEM+QmRXy3qf4bPFrA/eE9JD4N8gOs7SCDIQ 9ir+GumLjxBjld8qM/53B0buuf2zFv6vH/oXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUa+C0ZcbMEIueflbcZASicAD8he0wHwYDVR0jBBgwFoAUH8rXIlZ3kf1zoJH+ iRyUjxkU1nIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx NS9IOHJYSWxaM2tmMXpvSkgtaVJ5VWp4a1UxbkkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0g4clhJbFoza2Yxem9KSC1pUnlVanhrVTFuSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTUvYS1DMFpjYk1FSXVl ZmxiY1pBU2ljQUQ4aGUwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdFdDANBgkqhkiG9w0BAQsFAAOCAQEACXt2jCQ46I21HHnQjR+8pXb66laK cu3CsRnNaL/RconG1aNR2AYaEv28tBUct70vQRfhEoRnwIyWLr3MNb329gWkpp1a pH45XNJgcOlXlcSqys3wqd00I0xUQMtngzpBgNq2WKa1bQAdg+jnKJxVZ1CBJkGh keIm7UTA0peHLmc4eJnaIeRQDe9mZ++9D3yEngLYFkVfTpxLT1MRAdDMolvMTEmP F6YEoFSZNVCzORnEZhc9bHLCXyv4LpksvM67UDB+vXyLq5h4XJMsrboU3uQAwcZY wmn1NnerLCBrmdKlBQecYq+8pNWqei/kMMU+GYNnHV8sgAC93DtkplR9ig== -----END CERTIFICATE-----Generated at Tue Apr 22 00:19:19 2025 by rpki-client