$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/fvd69ZsPYeQZtzroqsavM-2UErE.roa File: fvd69ZsPYeQZtzroqsavM-2UErE.roa (raw, json) Hash identifier: qSesFb98caUbD4FGBELb4OZX9SygP4mja1bw9UcJR5w= Subject key identifier: 7E:F7:7A:F5:9B:0F:61:E4:19:B7:3A:E8:AA:C6:AF:33:ED:94:12:B1 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1184 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/fvd69ZsPYeQZtzroqsavM-2UErE.roa Signing time: Fri 17 Jan 2025 01:28:22 +0000 ROA not before: Fri 17 Jan 2025 01:28:22 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 209242 IP address blocks: 103.79.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4484 (0x1184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Jan 17 01:28:22 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7EF77AF59B0F61E419B73AE8AAC6AF33ED9412B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f1:b6:c5:3c:7d:e2:7f:b8:1c:b7:84:f7:3c: 64:65:d3:d5:86:25:bc:65:25:05:3c:53:10:56:fe: 0d:62:78:48:8b:c2:e1:7b:73:34:0e:8c:cd:87:e4: a3:3f:be:7d:83:13:dd:2b:c0:6f:e5:73:45:81:5c: 59:5f:24:4a:c8:cb:ce:6e:fe:fc:5a:8a:17:79:0c: 57:6a:48:9e:a2:e5:cf:f8:93:86:dc:d6:41:ae:99: 9d:50:94:36:8e:11:db:40:0f:0b:a3:a3:94:c6:d5: 87:5c:c0:68:b4:75:e9:70:78:17:05:1c:38:e6:11: 74:ac:23:1e:62:bc:18:e4:93:7b:a8:cc:35:72:81: 2a:a6:ba:24:0e:b7:cd:54:7d:51:8f:44:9d:2a:91: d1:ff:81:2a:a5:83:fc:2e:30:cc:73:6a:76:bd:69: 39:23:90:35:a9:06:f6:f5:21:26:01:76:50:39:a2: 66:1b:e1:54:bd:5f:f7:37:f2:84:cb:10:34:46:84: 88:d5:d6:c6:0e:27:91:ab:fb:3a:67:d9:31:55:ce: 1f:a0:24:92:0e:44:a8:2c:ba:4a:8d:ab:de:6b:2b: 7e:7b:f0:f6:6c:a3:c4:62:0c:24:ca:e7:12:7b:6f: 1e:24:16:5b:29:2a:8e:0e:15:88:a1:5d:cb:7c:84: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F7:7A:F5:9B:0F:61:E4:19:B7:3A:E8:AA:C6:AF:33:ED:94:12:B1 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/fvd69ZsPYeQZtzroqsavM-2UErE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:c4:c0:1f:59:70:3f:95:4b:18:6d:5e:9f:b9:b5:19:4e:8c: 7e:e8:22:24:40:61:36:33:d7:73:d7:82:5f:d0:a9:55:ea:44: 65:21:21:e5:77:3a:f4:5c:65:ef:f6:96:73:2a:f1:74:2e:0a: 76:3a:75:ec:d0:29:17:a2:ef:e9:cc:7b:48:25:d5:98:d4:04: f7:df:65:00:91:30:6f:14:dd:fb:f1:29:cd:c6:0f:f4:4b:51: 1c:8b:fd:b0:0a:3b:64:25:4c:87:44:ad:b3:57:96:19:d5:7d: d8:80:b6:21:19:84:9a:1b:67:ab:b5:64:28:b9:b6:d9:31:fb: 8b:91:ab:19:b2:c1:63:d2:f6:ec:7c:6f:43:78:72:5d:b0:bf: 12:5a:92:73:b6:43:ef:92:53:eb:6e:94:6e:49:3d:32:81:fc: 05:21:8a:57:78:61:a4:0b:a9:8e:d5:a4:d1:04:e0:00:5d:bf: 61:42:2c:c5:4b:52:b3:12:34:fc:ef:77:7a:1a:50:d0:fb:f8: 36:c4:91:9d:a3:37:fe:43:ee:6a:6c:87:36:3b:74:15:ff:0d: 39:d6:35:28:fb:fd:47:1a:8e:3c:fa:d6:76:58:39:17:79:44: 08:19:58:e9:c2:a1:8d:6f:29:e9:e0:b8:48:ae:17:04:3c:58: 7c:79:bc:17 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTAxMTcw MTI4MjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdFRjc3QUY1OUIwRjYx RTQxOUI3M0FFOEFBQzZBRjMzRUQ5NDEyQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn8bbFPH3if7gct4T3PGRl09WGJbxlJQU8UxBW/g1ieEiLwuF7 czQOjM2H5KM/vn2DE90rwG/lc0WBXFlfJErIy85u/vxaihd5DFdqSJ6i5c/4k4bc 1kGumZ1QlDaOEdtADwujo5TG1YdcwGi0delweBcFHDjmEXSsIx5ivBjkk3uozDVy gSqmuiQOt81UfVGPRJ0qkdH/gSqlg/wuMMxzana9aTkjkDWpBvb1ISYBdlA5omYb 4VS9X/c38oTLEDRGhIjV1sYOJ5Gr+zpn2TFVzh+gJJIORKgsukqNq95rK3578PZs o8RiDCTK5xJ7bx4kFlspKo4OFYihXct8hMu3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfvd69ZsPYeQZtzroqsavM+2UErEwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvZnZkNjlac1BZZVFa dHpyb3FzYXZNLTJVRXJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEAKsTAH1lwP5VLGG1en7m1GU6Mfugi JEBhNjPXc9eCX9CpVepEZSEh5Xc69Fxl7/aWcyrxdC4Kdjp17NApF6Lv6cx7SCXV mNQE999lAJEwbxTd+/EpzcYP9EtRHIv9sAo7ZCVMh0Sts1eWGdV92IC2IRmEmhtn q7VkKLm22TH7i5GrGbLBY9L27HxvQ3hyXbC/ElqSc7ZD75JT626Ubkk9MoH8BSGK V3hhpAupjtWk0QTgAF2/YUIsxUtSsxI0/O93ehpQ0Pv4NsSRnaM3/kPuamyHNjt0 Ff8NOdY1KPv9RxqOPPrWdlg5F3lECBlY6cKhjW8p6eC4SK4XBDxYfHm8Fw== -----END CERTIFICATE-----Generated at Fri Apr 4 18:47:00 2025 by rpki-client