$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/508/GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa File: GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa (raw, json) Hash identifier: 3qXm3+lk5XLaY3V7FcSpIrb2+VzRfoseYvCbETIDo5E= Subject key identifier: 18:22:1D:C6:A9:BE:59:CB:07:3A:3E:BF:60:55:18:46:60:D1:6D:9B Certificate issuer: /CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76 Certificate serial: 1673 Authority key identifier: 9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa Signing time: Fri 17 Jan 2025 01:30:03 +0000 ROA not before: Fri 17 Jan 2025 01:30:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55996 IP address blocks: 103.40.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5747 (0x1673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76 Validity Not Before: Jan 17 01:30:03 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=18221DC6A9BE59CB073A3EBF6055184660D16D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:9a:cd:25:d5:ef:2f:49:3b:be:4f:f1:c6: 9a:f4:ff:be:00:ef:49:93:40:a3:e9:db:f5:d2:13: cc:f9:a9:9d:d2:4c:bd:61:f8:ed:bb:31:eb:45:b8: 9b:e4:7e:db:be:86:7a:e7:39:ff:16:30:aa:0b:d9: 0f:96:d7:06:da:92:0b:6b:ea:ac:ea:11:ad:02:13: 35:5c:40:83:db:83:fc:4f:25:9a:30:8d:8d:a2:73: 45:c1:f9:12:4b:1d:32:dc:c9:4b:47:fc:59:40:83: d3:c6:cf:58:4a:f4:da:af:9b:c6:bd:6d:62:17:dd: 12:2d:f5:f8:f7:a9:36:c9:b3:64:79:12:0f:e8:b5: cc:ae:17:5a:2a:fe:98:04:3c:95:7c:fb:93:b3:b0: 77:f8:f9:13:87:2a:2b:61:c1:c4:98:64:a0:4a:1d: ff:d6:c6:1f:bf:3b:6d:81:49:4d:74:83:74:fa:39: d4:fa:37:50:03:1d:10:0a:19:e2:94:92:1b:ac:d0: db:af:a1:92:0d:55:67:00:09:3c:4a:22:6d:0f:4a: 44:53:50:e5:3d:47:88:d0:66:68:a3:de:2d:b3:2d: a4:80:2b:4e:72:06:cb:c7:62:90:9a:ad:e1:e6:35: 16:3b:64:ca:37:29:c9:a2:65:8c:19:48:29:4c:ce: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:1D:C6:A9:BE:59:CB:07:3A:3E:BF:60:55:18:46:60:D1:6D:9B X509v3 Authority Key Identifier: keyid:9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.40.174.0/23 Signature Algorithm: sha256WithRSAEncryption 80:b3:4a:4b:88:03:ad:ac:85:92:eb:28:ab:f5:3a:c8:49:e4: 38:4b:74:9c:53:15:e5:88:c2:1f:cd:d4:e7:a9:cf:4c:a2:d7: 44:7b:af:5e:e8:26:1e:d2:97:ec:76:f4:85:6a:77:4f:43:69: bf:84:a1:4a:c3:69:50:1a:8f:1d:44:ee:ba:e3:38:53:50:67: da:70:0c:fb:58:f7:37:f1:45:84:83:d1:57:49:3a:75:2c:51: c0:5c:4f:ec:13:f9:3d:58:96:54:95:8b:d5:7e:55:18:16:3f: 20:19:d8:3f:31:1b:e0:15:70:09:ee:c5:ff:6a:77:05:fa:5a: 8d:fb:ce:94:2e:f2:da:09:38:ea:c2:6a:ce:a0:b7:14:7d:19: 85:45:26:87:8f:dc:b5:b6:1f:7d:3c:b6:f7:95:ce:8a:a9:15: 44:9b:6d:0d:75:17:35:c8:dc:fd:20:4a:79:b4:64:97:9f:6f: 9d:3a:16:c5:3d:76:af:50:b9:7f:1c:c5:1a:3a:c6:47:fa:0e: 7e:7a:21:87:10:50:23:42:89:22:dd:bf:59:d3:1c:36:f9:1b: 94:12:6e:58:34:e4:fc:85:9e:d0:4f:3f:1d:ea:82:90:45:1c: 4e:22:69:fe:7e:85:c4:ba:90:61:38:40:75:a5:c2:8f:ee:20: 02:61:da:c6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI0 QTNDMzZCNDIzNDdBQ0VGMzZFODRBNjZFNjlFRTU5QkVEOEI3NjAeFw0yNTAxMTcw MTMwMDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE4MjIxREM2QTlCRTU5 Q0IwNzNBM0VCRjYwNTUxODQ2NjBEMTZEOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJB5rNJdXvL0k7vk/xxpr0/74A70mTQKPp2/XSE8z5qZ3STL1h +O27MetFuJvkftu+hnrnOf8WMKoL2Q+W1wbakgtr6qzqEa0CEzVcQIPbg/xPJZow jY2ic0XB+RJLHTLcyUtH/FlAg9PGz1hK9Nqvm8a9bWIX3RIt9fj3qTbJs2R5Eg/o tcyuF1oq/pgEPJV8+5OzsHf4+ROHKithwcSYZKBKHf/Wxh+/O22BSU10g3T6OdT6 N1ADHRAKGeKUkhus0NuvoZINVWcACTxKIm0PSkRTUOU9R4jQZmij3i2zLaSAK05y BsvHYpCareHmNRY7ZMo3KcmiZYwZSClMzpQdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUGCIdxqm+WcsHOj6/YFUYRmDRbZswHwYDVR0jBBgwFoAUm0o8NrQjR6zvNuhK Zuae5Zvti3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTA4 L20wbzhOclFqUjZ6dk51aEtadWFlNVp2dGkzWS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbTBvOE5yUWpSNnp2TnVoS1p1YWU1WnZ0aTNZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTA4L0dDSWR4cW0tV2NzSE9q Nl9ZRlVZUm1EUmJacy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnKK4wDQYJKoZIhvcNAQELBQADggEBAICzSkuIA62shZLrKKv1OshJ5DhLdJxT FeWIwh/N1Oepz0yi10R7r17oJh7Sl+x29IVqd09Dab+EoUrDaVAajx1E7rrjOFNQ Z9pwDPtY9zfxRYSD0VdJOnUsUcBcT+wT+T1YllSVi9V+VRgWPyAZ2D8xG+AVcAnu xf9qdwX6Wo37zpQu8toJOOrCas6gtxR9GYVFJoeP3LW2H308tveVzoqpFUSbbQ11 FzXI3P0gSnm0ZJefb506FsU9dq9QuX8cxRo6xkf6Dn56IYcQUCNCiSLdv1nTHDb5 G5QSblg05PyFntBPPx3qgpBFHE4iaf5+hcS6kGE4QHWlwo/uIAJh2sY= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:33 2025 by rpki-client