$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa File: ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa (raw, json) Hash identifier: GcwT+hZSarbhRdiY1h8Jkwre/Kdlz10lVaxkFCeWxG8= Subject key identifier: A6:D4:A5:64:D3:47:00:66:39:2D:CB:3B:18:EA:8B:62:09:FD:EE:4D Certificate issuer: /CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA Certificate serial: 129B Authority key identifier: 85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa Signing time: Fri 17 Jan 2025 01:27:13 +0000 ROA not before: Fri 17 Jan 2025 01:27:13 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137768 IP address blocks: 103.131.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4763 (0x129b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA Validity Not Before: Jan 17 01:27:13 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A6D4A564D3470066392DCB3B18EA8B6209FDEE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:7f:f3:0f:43:b5:19:7d:83:a7:58:64:aa: 5a:68:83:00:01:bb:3b:c7:97:81:1c:47:e5:77:b9: 7c:db:58:f2:fa:15:8d:80:72:63:b0:ef:aa:3e:98: 1b:9b:81:ce:33:2e:d8:db:25:97:f4:cc:94:53:93: 93:d7:3b:fa:dd:c9:5b:85:9a:66:fc:ca:81:43:21: 01:d3:9e:48:4e:3b:2d:03:8e:64:bd:2f:d0:ef:7f: de:c2:7c:fd:7a:7f:a6:e8:e2:71:a2:ff:b7:11:69: a2:6f:a9:a2:fc:d4:1c:61:db:36:a9:e6:06:81:e8: 2c:be:bb:c0:29:80:6d:23:44:66:d6:b1:32:ce:b9: 4c:a0:ad:c3:9a:f3:ab:73:22:28:8c:8f:51:92:e9: 92:4e:b3:14:40:22:c2:f7:cb:37:cd:c2:6e:b4:8a: 3c:14:bd:9d:4e:a7:f6:b2:e5:ef:42:a0:e0:54:f9: c8:a3:f9:1d:e2:e1:2d:40:b6:94:d7:47:5d:2f:55: 7d:96:b7:f7:23:3b:17:ac:94:73:cc:a9:77:a6:29: 3f:c1:7c:66:bf:3a:8e:00:5f:e3:73:af:4d:1a:6b: 51:b5:d1:6e:1b:0c:ba:10:21:31:6d:96:38:21:f3: 4a:0f:28:8b:3d:32:5d:94:d3:03:72:e8:a2:e3:c8: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D4:A5:64:D3:47:00:66:39:2D:CB:3B:18:EA:8B:62:09:FD:EE:4D X509v3 Authority Key Identifier: keyid:85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.131.36.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:af:94:4b:ee:47:13:3a:66:53:57:c8:72:b9:ba:ed:15:b5: dd:48:09:55:f8:b5:55:62:b4:8a:99:aa:c7:c8:05:87:45:fb: 4e:2c:50:7e:e4:ce:ba:93:6e:6d:91:52:58:40:d1:85:74:c0: 5e:55:fa:2a:dc:e6:49:82:07:3d:57:10:37:2e:26:21:f5:7f: b7:ac:60:d6:26:f9:25:73:78:4e:eb:fd:8e:b1:66:09:bc:d5: 9e:ab:ca:d7:6d:23:c8:c1:2b:5a:d0:2c:64:7e:2b:be:5d:39: 88:30:92:53:2a:da:16:9f:6e:7c:bf:95:f6:cc:67:8d:97:0b: aa:f4:b1:eb:3b:de:4f:83:ed:a2:bd:2a:66:ac:cc:49:d1:d5: 5b:9b:9f:f4:5f:ae:e8:97:c3:d2:6e:86:9d:57:29:8c:94:0e: 94:7d:ca:9c:43:a9:59:68:00:c0:59:78:d8:5a:d7:c9:3b:1f: 54:ca:32:b2:3f:52:00:09:e5:58:3b:25:cb:e8:48:9c:1d:f0: 00:06:b9:ea:29:eb:ea:f5:66:1d:36:a5:10:19:60:57:5d:77: fb:61:93:f0:25:44:a9:82:c2:e0:d5:36:fe:a1:00:6c:7b:2a: 03:1c:87:fb:a9:73:02:e8:28:2e:39:0b:3e:fb:35:10:f9:b4: 91:17:9b:42 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODU3 QkU5RjkwQTVCNzM3Q0EwMEU4RTA0QjYyQzI2RTE0MkQ0QTNCQTAeFw0yNTAxMTcw MTI3MTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEE2RDRBNTY0RDM0NzAw NjYzOTJEQ0IzQjE4RUE4QjYyMDlGREVFNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSN3/zD0O1GX2Dp1hkqlpogwABuzvHl4EcR+V3uXzbWPL6FY2A cmOw76o+mBubgc4zLtjbJZf0zJRTk5PXO/rdyVuFmmb8yoFDIQHTnkhOOy0DjmS9 L9Dvf97CfP16f6bo4nGi/7cRaaJvqaL81Bxh2zap5gaB6Cy+u8ApgG0jRGbWsTLO uUygrcOa86tzIiiMj1GS6ZJOsxRAIsL3yzfNwm60ijwUvZ1Op/ay5e9CoOBU+cij +R3i4S1AtpTXR10vVX2Wt/cjOxeslHPMqXemKT/BfGa/Oo4AX+Nzr00aa1G10W4b DLoQITFtljgh80oPKIs9Ml2U0wNy6KLjyGtLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUptSlZNNHAGY5Lcs7GOqLYgn97k0wHwYDVR0jBBgwFoAUhXvp+Qpbc3ygDo4E tiwm4ULUo7owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx Ni9oWHZwLVFwYmMzeWdEbzRFdGl3bTRVTFVvN28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2hYdnAtUXBiYzN5Z0RvNEV0aXdtNFVMVW83by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTYvcHRTbFpOTkhBR1k1 TGNzN0dPcUxZZ245N2swLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeDJDANBgkqhkiG9w0BAQsFAAOCAQEAKq+US+5HEzpmU1fIcrm67RW13UgJ Vfi1VWK0ipmqx8gFh0X7TixQfuTOupNubZFSWEDRhXTAXlX6KtzmSYIHPVcQNy4m IfV/t6xg1ib5JXN4Tuv9jrFmCbzVnqvK120jyMErWtAsZH4rvl05iDCSUyraFp9u fL+V9sxnjZcLqvSx6zveT4Ptor0qZqzMSdHVW5uf9F+u6JfD0m6GnVcpjJQOlH3K nEOpWWgAwFl42FrXyTsfVMoysj9SAAnlWDsly+hInB3wAAa56inr6vVmHTalEBlg V113+2GT8CVEqYLC4NU2/qEAbHsqAxyH+6lzAugoLjkLPvs1EPm0kRebQg== -----END CERTIFICATE-----Generated at Wed Jun 4 01:06:16 2025 by rpki-client