$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/kpr8N22lFBXQx4xmoPUdJeValKw.roa File: kpr8N22lFBXQx4xmoPUdJeValKw.roa (raw, json) Hash identifier: /GYPVj31gOc9aq6C3mRrAk9GWyhvMG5Er50AiD6VIrU= Subject key identifier: 92:9A:FC:37:6D:A5:14:15:D0:C7:8C:66:A0:F5:1D:25:E5:5A:94:AC Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Certificate serial: 1F76 Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/kpr8N22lFBXQx4xmoPUdJeValKw.roa Signing time: Fri 17 Jan 2025 01:29:11 +0000 ROA not before: Fri 17 Jan 2025 01:29:11 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 131484 IP address blocks: 103.159.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 08:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8054 (0x1f76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5 Validity Not Before: Jan 17 01:29:11 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=929AFC376DA51415D0C78C66A0F51D25E55A94AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:98:e8:98:a2:3e:11:81:b8:54:70:7b:cc: 6e:37:1f:13:98:e9:9d:7b:c9:72:fb:b9:13:c3:2d: 0f:4a:1e:64:3c:8d:6d:e3:1a:9a:6f:43:e5:6a:7d: 98:54:91:b8:69:83:33:e0:ee:c8:7f:cb:35:17:5c: 0f:60:e2:31:9b:b8:7e:7f:30:a8:46:fe:95:1a:ba: 56:46:60:b7:8a:47:f2:20:2c:02:78:ee:e2:32:dc: 27:4f:b6:04:1d:36:61:3e:5b:73:95:06:a3:b0:66: d7:8b:3c:9d:8e:c4:dc:dc:77:14:47:81:19:3b:a5: bc:9c:71:28:81:45:fd:2e:67:50:54:16:70:bc:de: 48:30:5b:3f:62:7f:68:3e:11:92:86:6d:8e:b1:7c: a2:0c:85:2a:9d:89:77:22:d1:4a:65:77:e8:f8:87: 19:08:09:91:0b:a2:bd:6d:8b:22:d6:09:0f:72:50: 54:67:ea:b3:5d:48:e5:e2:e5:bc:99:01:5f:45:e3: d9:7d:fd:02:55:ee:22:70:70:35:9f:81:76:56:e4: d4:fb:4f:74:da:f1:29:f4:a9:a6:f9:92:34:28:63: 56:ca:7b:e8:ae:9a:ce:19:8e:9d:0a:04:56:1a:82: b2:bd:76:83:e6:f2:b3:74:16:17:8f:fd:d6:63:5c: ff:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:FC:37:6D:A5:14:15:D0:C7:8C:66:A0:F5:1D:25:E5:5A:94:AC X509v3 Authority Key Identifier: keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/kpr8N22lFBXQx4xmoPUdJeValKw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.122.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:cb:e3:aa:72:6f:22:46:04:2b:b3:c2:dc:0f:df:32:87:a8: 14:99:9d:b8:16:5a:37:29:d9:b4:a7:2d:e5:d1:1a:75:b6:22: 9d:fa:c6:f5:67:3f:0e:b0:10:8b:1c:7e:a0:e7:3c:7c:39:4d: bf:bd:38:81:5f:50:b8:ee:78:f7:04:59:79:b6:64:c5:5a:4a: 4b:de:36:29:d7:a6:ec:26:01:02:73:65:3a:c4:23:a9:05:71: 71:a0:49:e9:95:1a:1d:69:12:5e:61:cf:96:cf:15:c5:8b:f3: 75:e8:fd:77:e9:0b:77:d7:06:88:47:b9:5d:8f:23:e2:62:d9: 8a:81:21:55:2a:bb:f6:bd:69:98:fa:b8:77:90:4e:f1:7f:5c: 6f:db:c5:cd:3e:7c:bd:04:7a:53:e5:25:de:9b:86:5e:d0:46: 57:38:b7:f8:a7:9e:95:b8:14:d9:4f:4f:be:27:11:85:fd:8e: 98:6d:ce:1d:37:c2:39:85:8d:d1:fa:4a:56:7a:cb:fa:ce:41: 4d:36:2a:14:7d:b9:fd:3f:77:90:54:5a:01:6c:bc:bb:af:1e: 40:b5:46:78:e1:30:60:86:0f:3e:77:4d:ae:19:d3:aa:15:bc: 74:27:30:5a:14:4e:ec:cd:d2:4f:85:ec:fc:e6:c2:2c:e2:ca: d2:08:db:11 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICH3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDNG MDc1RDlDNkYxOERDMDlCREE2MkI3MDg3RUE4MERDNUI3MTFDNTAeFw0yNTAxMTcw MTI5MTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkyOUFGQzM3NkRBNTE0 MTVEMEM3OEM2NkEwRjUxRDI1RTU1QTk0QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYGpjomKI+EYG4VHB7zG43HxOY6Z17yXL7uRPDLQ9KHmQ8jW3j GppvQ+VqfZhUkbhpgzPg7sh/yzUXXA9g4jGbuH5/MKhG/pUaulZGYLeKR/IgLAJ4 7uIy3CdPtgQdNmE+W3OVBqOwZteLPJ2OxNzcdxRHgRk7pbyccSiBRf0uZ1BUFnC8 3kgwWz9if2g+EZKGbY6xfKIMhSqdiXci0Upld+j4hxkICZELor1tiyLWCQ9yUFRn 6rNdSOXi5byZAV9F49l9/QJV7iJwcDWfgXZW5NT7T3Ta8Sn0qab5kjQoY1bKe+iu ms4Zjp0KBFYagrK9doPm8rN0FheP/dZjXP89AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUkpr8N22lFBXQx4xmoPUdJeValKwwHwYDVR0jBBgwFoAUA/B12cbxjcCb2mK3 CH6oDcW3EcUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 MC9BX0IxMmNieGpjQ2IybUszQ0g2b0RjVzNFY1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FfQjEyY2J4amNDYjJtSzNDSDZvRGNXM0VjVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDAva3ByOE4yMmxGQlhR eDR4bW9QVWRKZVZhbEt3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWefejANBgkqhkiG9w0BAQsFAAOCAQEAL8vjqnJvIkYEK7PC3A/fMoeoFJmd uBZaNynZtKct5dEadbYinfrG9Wc/DrAQixx+oOc8fDlNv704gV9QuO549wRZebZk xVpKS942Kdem7CYBAnNlOsQjqQVxcaBJ6ZUaHWkSXmHPls8VxYvzdej9d+kLd9cG iEe5XY8j4mLZioEhVSq79r1pmPq4d5BO8X9cb9vFzT58vQR6U+Ul3puGXtBGVzi3 +KeelbgU2U9PvicRhf2OmG3OHTfCOYWN0fpKVnrL+s5BTTYqFH25/T93kFRaAWy8 u68eQLVGeOEwYIYPPndNrhnTqhW8dCcwWhRO7M3ST4Xs/ObCLOLK0gjbEQ== -----END CERTIFICATE-----Generated at Wed Jun 11 08:01:48 2025 by rpki-client