$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/GqcEl62XUFMD7_gtRMFMXgJUeEI.roa File: GqcEl62XUFMD7_gtRMFMXgJUeEI.roa (raw, json) Hash identifier: 4PkJ4JaQfzCykwCuQ5fXMiVkbF7VntTkAvzuLsuyvKU= Subject key identifier: 1A:A7:04:97:AD:97:50:53:03:EF:F8:2D:44:C1:4C:5E:02:54:78:42 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CC0 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GqcEl62XUFMD7_gtRMFMXgJUeEI.roa Signing time: Thu 02 Jan 2025 13:58:25 +0000 ROA not before: Thu 02 Jan 2025 13:58:25 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 14.103.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 07:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7360 (0x1cc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:25 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1AA70497AD97505303EFF82D44C14C5E02547842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:ed:01:ad:d9:b0:c9:b3:36:38:65:c6:1f: b3:2a:4c:b4:3f:18:cb:ec:49:86:ba:82:e4:70:d0: 6c:3c:79:30:fa:37:aa:7c:42:2a:11:50:38:50:85: aa:ad:69:22:2e:ff:cf:b0:e6:62:97:0d:23:2d:ad: fa:a1:41:b8:21:8d:8d:68:33:57:0c:4f:ab:4f:0b: de:25:b3:52:07:ec:9c:86:ad:92:2e:8a:01:1b:6d: a3:1f:1c:a5:3d:62:72:e7:19:4b:32:e9:76:2a:11: b5:a6:b1:3c:1d:e4:ae:9b:7b:9f:3a:e7:b1:4c:39: 48:7a:42:48:9c:bf:96:23:f5:9b:b5:e0:c4:44:16: 79:ea:16:c4:59:6a:32:87:48:4a:38:47:58:f6:e0: 89:72:97:eb:d0:94:df:02:8a:31:98:2f:fd:a8:7b: 7a:86:63:8c:a8:51:0e:c9:45:ba:04:53:97:96:a8: 31:af:da:a0:ba:ae:f0:4b:53:44:86:a5:df:f1:60: cb:19:62:a1:87:63:c4:09:ee:2d:5f:83:c5:ef:55: 04:ab:07:e2:53:de:c1:cc:71:d5:df:ca:66:e2:13: ca:2d:eb:a1:a5:68:03:a8:d3:e7:c6:29:5e:23:2e: 40:2e:0f:d9:a6:ac:e3:f0:12:cc:44:ee:d4:94:7d: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A7:04:97:AD:97:50:53:03:EF:F8:2D:44:C1:4C:5E:02:54:78:42 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GqcEl62XUFMD7_gtRMFMXgJUeEI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.56.0/21 Signature Algorithm: sha256WithRSAEncryption 62:dd:09:60:a4:e0:7e:14:94:97:d2:40:ad:fa:96:97:a2:76: 8d:39:67:61:16:d1:c7:8d:82:9f:06:0e:ef:1a:85:93:79:d5: 21:fa:0a:d7:92:18:05:92:7d:e3:b4:cd:48:da:70:6a:48:b4: 34:da:7e:ed:12:0d:67:35:6c:c6:b7:e4:ce:a3:26:8a:53:6a: ad:3e:ae:23:2f:ad:a6:b8:23:60:32:c6:cd:83:4d:e2:c4:7a: 76:78:6b:52:ac:b4:8f:4d:c1:60:b2:ae:00:dd:1f:8e:f6:dd: 59:7b:72:7a:d4:9e:6e:02:8d:95:09:10:56:ef:19:5c:2f:67: 0e:61:a3:84:6f:97:e4:a1:11:b6:43:30:02:ab:39:4e:03:ed: 14:a7:f6:2c:e2:ae:5d:b9:e7:d6:f3:12:25:7d:f0:63:3e:4a: 3d:62:9e:a0:9e:78:f4:dc:e3:36:80:86:b2:9f:bc:d9:0f:c4: f7:70:52:fd:49:ae:c9:b4:eb:e4:a1:47:47:59:77:99:ca:23: 78:f4:bf:cd:20:3e:35:4c:bc:24:57:9c:de:1f:15:d0:89:9b: 8f:02:31:70:74:3f:cb:14:d9:4f:43:88:2b:ee:fc:63:2b:88: 6d:89:53:d3:94:cc:95:d9:0c:29:13:75:49:17:88:c8:9b:89: 14:9f:cb:a4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFBQTcwNDk3QUQ5NzUw NTMwM0VGRjgyRDQ0QzE0QzVFMDI1NDc4NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCesO0BrdmwybM2OGXGH7MqTLQ/GMvsSYa6guRw0Gw8eTD6N6p8 QioRUDhQhaqtaSIu/8+w5mKXDSMtrfqhQbghjY1oM1cMT6tPC94ls1IH7JyGrZIu igEbbaMfHKU9YnLnGUsy6XYqEbWmsTwd5K6be58657FMOUh6Qkicv5Yj9Zu14MRE FnnqFsRZajKHSEo4R1j24Ilyl+vQlN8CijGYL/2oe3qGY4yoUQ7JRboEU5eWqDGv 2qC6rvBLU0SGpd/xYMsZYqGHY8QJ7i1fg8XvVQSrB+JT3sHMcdXfymbiE8ot66Gl aAOo0+fGKV4jLkAuD9mmrOPwEsxE7tSUfak3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUGqcEl62XUFMD7/gtRMFMXgJUeEIwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvR3FjRWw2MlhVRk1E N19ndFJNRk1YZ0pVZUVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nODANBgkqhkiG9w0BAQsFAAOCAQEAYt0JYKTgfhSUl9JArfqWl6J2jTln YRbRx42CnwYO7xqFk3nVIfoK15IYBZJ947TNSNpwaki0NNp+7RINZzVsxrfkzqMm ilNqrT6uIy+tprgjYDLGzYNN4sR6dnhrUqy0j03BYLKuAN0fjvbdWXtyetSebgKN lQkQVu8ZXC9nDmGjhG+X5KERtkMwAqs5TgPtFKf2LOKuXbnn1vMSJX3wYz5KPWKe oJ549NzjNoCGsp+82Q/E93BS/UmuybTr5KFHR1l3mcojePS/zSA+NUy8JFec3h8V 0ImbjwIxcHQ/yxTZT0OIK+78YyuIbYlT05TMldkMKRN1SReIyJuJFJ/LpA== -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:56 2025 by rpki-client