$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/iuNLjW5aNVuPizS31DIcoCGoV2w.roa File: iuNLjW5aNVuPizS31DIcoCGoV2w.roa (raw, json) Hash identifier: nQzkZCMfDtMP9rCWIskW7i99TB9f3yRw/FKCNkfUaQU= Subject key identifier: 8A:E3:4B:8D:6E:5A:35:5B:8F:8B:34:B7:D4:32:1C:A0:21:A8:57:6C Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CBA Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/iuNLjW5aNVuPizS31DIcoCGoV2w.roa Signing time: Thu 02 Jan 2025 13:58:23 +0000 ROA not before: Thu 02 Jan 2025 13:58:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 14.103.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 07:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7354 (0x1cba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8AE34B8D6E5A355B8F8B34B7D4321CA021A8576C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b3:12:c6:ee:a0:d1:80:b8:f4:09:dd:e0:d7: 4e:36:ef:7b:57:1b:87:40:8b:d2:b3:e2:ce:88:5a: d5:15:e9:56:52:e5:ef:e7:6f:07:af:f6:5e:8f:3a: cd:ce:d2:8d:a7:4a:c5:0c:ea:2c:d6:b0:d2:80:32: 59:42:ba:2d:a9:7a:3a:a6:b5:35:b7:27:50:0d:80: df:05:40:f1:82:79:ff:e6:1a:09:22:50:ef:0f:49: 16:a0:3f:ad:44:dd:11:22:7d:bc:72:a6:d2:b3:8d: 5f:00:d9:a0:68:19:a5:14:51:a3:b0:72:8c:9d:9f: 78:7e:28:23:cb:00:5f:b1:b6:30:e6:7f:cb:90:1e: 9d:3c:9c:39:e1:d6:14:7b:fc:76:c6:67:a3:d6:e1: 02:1c:e7:dc:75:31:a0:41:18:b7:f6:f4:07:ee:b0: 07:ab:6f:14:95:06:a5:cf:de:ab:f4:26:2f:de:f6: 66:08:4d:c4:b4:f8:89:20:cc:de:f5:ec:27:42:3e: 9c:bc:cb:30:c0:de:9b:df:56:68:16:37:c9:63:78: d1:e7:ce:90:17:fc:da:74:f6:2f:fc:b9:a4:ff:ea: fb:cd:47:8c:cd:df:82:bd:1e:37:42:eb:44:17:c3: 56:ca:f4:0a:2b:db:42:52:32:f3:cd:31:06:c3:28: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E3:4B:8D:6E:5A:35:5B:8F:8B:34:B7:D4:32:1C:A0:21:A8:57:6C X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/iuNLjW5aNVuPizS31DIcoCGoV2w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.88.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:e3:04:95:73:9d:ba:c0:5a:3f:20:43:7b:d6:3c:52:52:b8: 7d:1d:ab:1e:32:cc:82:ec:8f:22:59:f4:a8:f6:87:49:5d:78: de:fd:e2:8c:3d:09:2e:6e:14:f0:d4:ff:e7:df:b0:18:e4:9f: 95:48:49:27:c3:0f:c9:c8:d5:0e:7a:df:21:06:a8:81:56:90: 20:d5:2e:74:4b:05:d5:f7:13:0a:4e:d8:59:c3:8d:a2:6b:aa: 59:ac:47:1d:be:c3:cf:4f:42:e6:a8:d4:72:64:d1:5c:e8:27: 3c:6d:bd:66:5f:6e:8e:d0:13:31:f0:29:2a:fd:08:f6:a7:bb: a3:1b:fa:7d:13:93:78:09:b1:24:ef:0c:01:5f:66:fe:0c:6a: 95:7e:68:73:69:f4:4d:e5:e5:37:d9:ed:bf:04:67:14:e8:43: ee:b3:5c:f5:28:91:87:b4:1a:db:1f:ed:39:78:c8:46:3c:aa: 43:33:fd:37:42:c9:57:3e:51:16:9f:0e:72:45:76:4d:20:51: fa:31:3e:6f:42:74:8f:49:2a:6d:d4:4d:d5:55:24:64:d8:06: d2:40:68:bc:98:e7:62:e9:7c:66:c8:db:3b:56:28:e9:ca:dd: aa:8b:07:0e:50:f7:7f:d0:4c:09:a6:7c:2a:fd:05:2b:fe:b0: 3e:6b:80:3f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhBRTM0QjhENkU1QTM1 NUI4RjhCMzRCN0Q0MzIxQ0EwMjFBODU3NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRsxLG7qDRgLj0Cd3g104273tXG4dAi9Kz4s6IWtUV6VZS5e/n bwev9l6POs3O0o2nSsUM6izWsNKAMllCui2pejqmtTW3J1ANgN8FQPGCef/mGgki UO8PSRagP61E3REifbxyptKzjV8A2aBoGaUUUaOwcoydn3h+KCPLAF+xtjDmf8uQ Hp08nDnh1hR7/HbGZ6PW4QIc59x1MaBBGLf29AfusAerbxSVBqXP3qv0Ji/e9mYI TcS0+IkgzN717CdCPpy8yzDA3pvfVmgWN8ljeNHnzpAX/Np09i/8uaT/6vvNR4zN 34K9HjdC60QXw1bK9Aor20JSMvPNMQbDKOPlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUiuNLjW5aNVuPizS31DIcoCGoV2wwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvaXVOTGpXNWFOVnVQ aXpTMzFESWNvQ0dvVjJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nWDANBgkqhkiG9w0BAQsFAAOCAQEAC+MElXOdusBaPyBDe9Y8UlK4fR2r HjLMguyPIln0qPaHSV143v3ijD0JLm4U8NT/59+wGOSflUhJJ8MPycjVDnrfIQao gVaQINUudEsF1fcTCk7YWcONomuqWaxHHb7Dz09C5qjUcmTRXOgnPG29Zl9ujtAT MfApKv0I9qe7oxv6fROTeAmxJO8MAV9m/gxqlX5oc2n0TeXlN9ntvwRnFOhD7rNc 9SiRh7Qa2x/tOXjIRjyqQzP9N0LJVz5RFp8OckV2TSBR+jE+b0J0j0kqbdRN1VUk ZNgG0kBovJjnYul8ZsjbO1Yo6crdqosHDlD3f9BMCaZ8Kv0FK/6wPmuAPw== -----END CERTIFICATE-----Generated at Sat Apr 5 07:21:30 2025 by rpki-client