$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/lL2_JlGGHP8mykrPp-4SOEOh8Ao.roa File: lL2_JlGGHP8mykrPp-4SOEOh8Ao.roa (raw, json) Hash identifier: RnyXtSj1vCGpe16tNcj85rS2jdK0T7jlPFkeCkcAPSA= Subject key identifier: 94:BD:BF:26:51:86:1C:FF:26:CA:4A:CF:A7:EE:12:38:43:A1:F0:0A Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CBB Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/lL2_JlGGHP8mykrPp-4SOEOh8Ao.roa Signing time: Thu 02 Jan 2025 13:58:23 +0000 ROA not before: Thu 02 Jan 2025 13:58:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 14.103.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 07:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7355 (0x1cbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=94BDBF2651861CFF26CA4ACFA7EE123843A1F00A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:f6:12:c7:12:04:15:27:83:a6:ea:b2:57: b2:a0:72:12:21:17:5f:c9:84:49:6b:2d:2f:3b:71: 36:56:d1:b5:1a:ae:b0:71:3b:22:0a:bb:12:6c:5b: 4b:72:3c:2d:d4:53:76:7e:ca:37:06:ec:b4:40:23: a9:53:ee:4e:ae:be:f1:ad:06:34:d1:fb:aa:a4:cb: 87:d8:85:04:dc:82:d1:20:6b:1b:e7:af:d3:4c:ff: 53:b5:43:ee:f8:65:b5:3d:5b:c3:ee:f7:e7:fb:6b: b5:db:f3:a8:a7:cd:ad:ee:c3:0a:35:e3:84:76:c1: 39:b7:28:99:ee:5b:18:6c:ca:cf:97:6b:2e:d0:3b: 3d:f7:3f:df:fc:40:8b:b7:c6:b4:77:d6:d1:50:08: 73:ec:c1:1e:41:55:2f:f0:57:4e:79:57:61:21:a3: ec:e9:ed:40:0b:b9:a8:bd:6e:11:55:27:d4:45:2e: dc:2a:40:a2:be:36:26:bd:52:7d:97:8c:6f:c5:4c: 59:97:83:00:ef:0f:ab:44:f4:71:bc:1c:d3:18:5d: f5:92:8c:c1:ae:57:b6:f6:cc:a1:ff:c9:dd:b3:b9: bb:e1:4a:1a:aa:41:10:25:d8:01:af:5e:ac:45:57: 25:86:1d:14:d1:99:48:6c:07:ce:70:d8:24:91:6f: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:BF:26:51:86:1C:FF:26:CA:4A:CF:A7:EE:12:38:43:A1:F0:0A X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/lL2_JlGGHP8mykrPp-4SOEOh8Ao.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.0.0/21 Signature Algorithm: sha256WithRSAEncryption 11:9a:e2:5e:7e:dd:fc:b0:57:b9:3c:08:36:d5:17:6f:77:bc: 57:2a:fd:1a:fa:96:c2:60:d6:4f:f1:cb:32:64:22:24:c7:08: 5b:e3:0b:aa:06:b1:92:ae:8a:86:6b:94:92:1f:90:4e:82:0d: 70:be:39:67:f2:2a:d2:95:11:de:e4:63:55:fa:fe:94:e5:f2: da:67:8e:38:a1:d5:eb:d5:05:ae:11:a6:8d:8c:c6:e4:f9:08: 34:0c:c3:af:40:d5:b1:6e:28:61:8d:bb:66:b8:54:b5:dd:54: 06:fa:81:fc:52:9f:96:98:ad:17:f4:31:81:ad:00:6e:bf:e4: 5e:67:f3:29:04:58:6e:66:5d:0b:cf:e8:28:b6:ed:b6:c4:16: 6f:e0:3e:5e:e4:74:4d:bc:90:5b:d9:f9:20:4c:92:61:86:8c: 21:3a:5d:53:90:f0:13:ee:c7:26:85:93:21:fa:24:e8:05:4a: 9d:82:86:1c:45:6b:bc:80:91:7e:1c:be:1e:bf:be:4c:15:bf: 6f:06:fb:3a:19:b4:b0:9a:4c:7c:07:d5:9b:fc:49:f9:9f:89: 61:a4:ee:83:58:1a:45:b1:60:f0:42:2a:28:9f:64:dc:9a:82: 9b:f9:50:38:3d:a5:af:7c:02:3d:e0:2e:6d:61:71:4e:6d:b0: b4:2d:8c:91 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk0QkRCRjI2NTE4NjFD RkYyNkNBNEFDRkE3RUUxMjM4NDNBMUYwMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsSfYSxxIEFSeDpuqyV7KgchIhF1/JhElrLS87cTZW0bUarrBx OyIKuxJsW0tyPC3UU3Z+yjcG7LRAI6lT7k6uvvGtBjTR+6qky4fYhQTcgtEgaxvn r9NM/1O1Q+74ZbU9W8Pu9+f7a7Xb86inza3uwwo144R2wTm3KJnuWxhsys+Xay7Q Oz33P9/8QIu3xrR31tFQCHPswR5BVS/wV055V2Eho+zp7UALuai9bhFVJ9RFLtwq QKK+Nia9Un2XjG/FTFmXgwDvD6tE9HG8HNMYXfWSjMGuV7b2zKH/yd2zubvhShqq QRAl2AGvXqxFVyWGHRTRmUhsB85w2CSRb9f1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUlL2/JlGGHP8mykrPp+4SOEOh8AowHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvbEwyX0psR0dIUDht eWtyUHAtNFNPRU9oOEFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nADANBgkqhkiG9w0BAQsFAAOCAQEAEZriXn7d/LBXuTwINtUXb3e8Vyr9 GvqWwmDWT/HLMmQiJMcIW+MLqgaxkq6KhmuUkh+QToINcL45Z/Iq0pUR3uRjVfr+ lOXy2meOOKHV69UFrhGmjYzG5PkINAzDr0DVsW4oYY27ZrhUtd1UBvqB/FKflpit F/Qxga0Abr/kXmfzKQRYbmZdC8/oKLbttsQWb+A+XuR0TbyQW9n5IEySYYaMITpd U5DwE+7HJoWTIfok6AVKnYKGHEVrvICRfhy+Hr++TBW/bwb7Ohm0sJpMfAfVm/xJ +Z+JYaTug1gaRbFg8EIqKJ9k3JqCm/lQOD2lr3wCPeAubWFxTm2wtC2MkQ== -----END CERTIFICATE-----Generated at Sat Apr 5 07:11:55 2025 by rpki-client