$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa File: ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa (raw, json) Hash identifier: mtF01OQZB4FrXLC5rgApOcnJP5/2xm8KbS60Erj6vHw= Subject key identifier: A1:F5:83:4E:E6:5D:06:CA:04:1D:DA:5D:0F:E8:4C:B9:E2:67:EE:54 Certificate issuer: /CN=193519DD773C40D04F641CC44558D3461297B003 Certificate serial: 1B9E Authority key identifier: 19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa Signing time: Fri 17 Jan 2025 01:27:26 +0000 ROA not before: Fri 17 Jan 2025 01:27:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 131482 IP address blocks: 103.108.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7070 (0x1b9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193519DD773C40D04F641CC44558D3461297B003 Validity Not Before: Jan 17 01:27:26 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A1F5834EE65D06CA041DDA5D0FE84CB9E267EE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f1:bc:ba:c2:84:45:17:18:19:45:85:73:d6: ea:96:47:ea:da:05:42:b6:b6:90:dc:94:3f:0a:26: 4f:25:dc:ba:98:7f:ce:11:4b:fc:26:8c:cc:42:2e: 56:7e:28:f6:a9:5d:a3:be:13:56:c6:2a:ca:47:c1: aa:f7:31:cc:3c:2c:47:53:2e:09:81:d0:87:ba:83: db:2d:8e:0c:18:dc:5b:14:3c:9e:bb:7a:20:d0:f2: e4:66:05:37:95:06:bc:41:5a:28:af:92:ba:78:0e: 88:9f:7a:1b:2e:7b:0d:da:7b:c9:91:11:53:ff:be: 77:fe:cf:85:04:4d:28:e4:78:49:96:ec:cd:7c:61: a0:dd:44:95:51:d5:d2:52:4c:d5:cc:fc:70:86:47: 6d:56:11:05:4a:5b:76:cf:8d:99:eb:56:e1:b1:67: 26:2c:68:15:aa:01:04:93:64:84:34:31:6f:5b:40: a6:d2:58:3d:35:92:2b:9c:1c:28:28:56:4b:09:b8: ce:e5:09:da:5e:a8:53:9c:fd:19:8a:b8:b4:4c:6b: 6f:fd:56:70:bd:51:35:b3:f2:d0:24:fd:44:22:f9: 3e:39:f0:d0:89:45:f8:18:43:25:28:bc:c8:e3:c6: c1:83:70:bb:ab:b9:da:20:57:43:70:11:65:cf:61: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F5:83:4E:E6:5D:06:CA:04:1D:DA:5D:0F:E8:4C:B9:E2:67:EE:54 X509v3 Authority Key Identifier: keyid:19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.108.160.0/22 Signature Algorithm: sha256WithRSAEncryption 02:a3:5f:06:bc:1f:50:d7:24:7c:d3:18:95:c8:20:b7:56:d6: 75:3c:09:ab:ee:c5:1a:e0:08:6d:1d:ec:45:ed:bb:5f:b8:54: 1f:31:69:b7:fc:25:4b:bd:fb:dd:0e:ab:e4:7c:38:84:22:4e: cb:07:6e:6b:1b:ac:6e:a9:d2:69:39:61:2b:60:3d:c6:31:59: 0d:76:34:cc:96:68:63:0e:04:12:fb:31:1c:8b:b2:55:6a:10: 19:7f:30:14:43:2b:43:57:9d:30:73:5a:da:12:c0:d5:25:d9: 73:ea:32:fe:45:e4:c0:fd:09:8c:e5:08:49:6e:4e:61:48:a0: 3c:8d:65:dd:ff:bb:ce:84:17:cc:93:cf:fd:5f:75:2c:b2:0c: b9:83:07:37:df:e7:4f:ef:93:54:15:ee:da:e3:bc:10:f8:a5: ac:fa:7f:32:7d:ca:f6:3a:88:46:3d:8d:f0:69:40:ae:e4:be: b1:33:23:06:6c:50:69:d1:cf:72:68:d4:2f:75:b9:a7:30:2d: 1a:cd:71:cc:99:ce:8d:71:6e:79:f8:5a:c6:c7:07:a4:65:7b: 4f:1f:c7:06:97:bc:f1:72:7b:8a:d6:3d:ad:b4:44:27:34:b4: d1:1b:e6:33:52:e7:94:a2:4d:3c:64:8f:18:e6:06:5e:ec:cb: 60:5d:e7:6e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTkz NTE5REQ3NzNDNDBEMDRGNjQxQ0M0NDU1OEQzNDYxMjk3QjAwMzAeFw0yNTAxMTcw MTI3MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEExRjU4MzRFRTY1RDA2 Q0EwNDFEREE1RDBGRTg0Q0I5RTI2N0VFNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh8by6woRFFxgZRYVz1uqWR+raBUK2tpDclD8KJk8l3LqYf84R S/wmjMxCLlZ+KPapXaO+E1bGKspHwar3Mcw8LEdTLgmB0Ie6g9stjgwY3FsUPJ67 eiDQ8uRmBTeVBrxBWiivkrp4Doifehsuew3ae8mREVP/vnf+z4UETSjkeEmW7M18 YaDdRJVR1dJSTNXM/HCGR21WEQVKW3bPjZnrVuGxZyYsaBWqAQSTZIQ0MW9bQKbS WD01kiucHCgoVksJuM7lCdpeqFOc/RmKuLRMa2/9VnC9UTWz8tAk/UQi+T458NCJ RfgYQyUovMjjxsGDcLurudogV0NwEWXPYUwFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUofWDTuZdBsoEHdpdD+hMueJn7lQwHwYDVR0jBBgwFoAUGTUZ3Xc8QNBPZBzE RVjTRhKXsAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjkw My9HVFVaM1hjOFFOQlBaQnpFUlZqVFJoS1hzQU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dUVVozWGM4UU5CUFpCekVSVmpUUmhLWHNBTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MDMvb2ZXRFR1WmRCc29F SGRwZEQtaE11ZUpuN2xRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdsoDANBgkqhkiG9w0BAQsFAAOCAQEAAqNfBrwfUNckfNMYlcggt1bWdTwJ q+7FGuAIbR3sRe27X7hUHzFpt/wlS7373Q6r5Hw4hCJOywduaxusbqnSaTlhK2A9 xjFZDXY0zJZoYw4EEvsxHIuyVWoQGX8wFEMrQ1edMHNa2hLA1SXZc+oy/kXkwP0J jOUISW5OYUigPI1l3f+7zoQXzJPP/V91LLIMuYMHN9/nT++TVBXu2uO8EPilrPp/ Mn3K9jqIRj2N8GlAruS+sTMjBmxQadHPcmjUL3W5pzAtGs1xzJnOjXFuefhaxscH pGV7Tx/HBpe88XJ7itY9rbREJzS00RvmM1LnlKJNPGSPGOYGXuzLYF3nbg== -----END CERTIFICATE-----Generated at Fri Apr 4 18:39:56 2025 by rpki-client