$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-iVGQ0MjN26aOEuWOqg2FXtkLCw.roa File: -iVGQ0MjN26aOEuWOqg2FXtkLCw.roa (raw, json) Hash identifier: k4gXPUQjq7f56Hgy/7HU+k2aI7CliSJZ6lrPQhCRuXg= Subject key identifier: FA:25:46:43:43:23:37:6E:9A:38:4B:96:3A:A8:36:15:7B:64:2C:2C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18AE Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-iVGQ0MjN26aOEuWOqg2FXtkLCw.roa Signing time: Fri 17 Jan 2025 01:25:24 +0000 ROA not before: Fri 17 Jan 2025 01:25:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6318 (0x18ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FA2546434323376E9A384B963AA836157B642C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:85:bd:2a:d9:56:bd:eb:1f:66:04:3b:d6: 1c:b5:76:9c:2e:95:52:46:b3:a1:94:cc:7e:3c:0e: 33:c6:aa:a3:2b:c0:c5:b7:8d:d6:1f:12:3a:86:94: 1a:ef:89:64:5e:97:1a:77:e7:6e:79:42:bb:0f:aa: 15:0d:d9:37:38:f7:d8:9f:54:69:dd:31:7d:ab:3d: 74:e4:17:f4:89:0b:3c:ca:59:8b:43:9f:f9:3d:22: 2d:88:96:1e:0b:63:b2:9b:57:b9:87:62:57:5a:c0: b7:1a:33:d5:b3:b0:6d:64:36:1c:ce:7c:15:e1:1e: 9b:0b:f2:62:fe:e5:4b:23:ba:17:7d:22:f2:aa:c8: f5:ab:5e:5a:9f:10:f2:32:3d:a6:07:c4:ac:6f:7e: f8:ff:d9:44:00:02:45:e0:1f:69:c6:7c:0b:d0:bd: 8e:b6:1f:33:98:81:ad:9e:b2:05:95:ea:f2:95:5c: 34:2d:5c:a1:f8:f9:bb:44:5d:34:6b:5b:11:76:62: c9:27:c9:ee:55:cb:15:28:9b:bb:76:35:b9:05:cd: 08:4d:4b:58:81:85:84:a5:94:77:f9:77:7b:9b:42: 10:88:fc:10:82:b7:4c:82:65:c5:2b:86:ac:42:2a: f8:c6:35:0a:c5:72:02:b7:57:14:32:26:24:50:04: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:46:43:43:23:37:6E:9A:38:4B:96:3A:A8:36:15:7B:64:2C:2C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-iVGQ0MjN26aOEuWOqg2FXtkLCw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.36.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:f4:95:43:3c:82:f1:e7:95:08:fe:02:02:98:12:4e:c7:f0: a6:f3:6f:dc:17:bd:13:13:dc:b9:1f:1a:31:ed:00:53:72:16: a4:74:e9:8e:dd:dd:d4:11:b1:02:f1:9c:40:b1:61:a7:a0:08: 0e:82:c0:c0:d9:bc:74:6f:ae:74:94:e7:bc:7b:e8:02:ee:69: ff:a3:c3:ef:1c:e6:f7:f6:1c:72:37:01:14:bd:41:8f:52:46: 46:8f:49:a8:b6:f7:7f:45:36:08:dc:01:23:56:10:ae:66:95: 1a:37:03:8b:26:3b:97:70:a7:f6:64:9d:d0:e1:8b:8d:26:ca: e8:af:2e:ec:91:95:6b:08:dc:19:3d:94:33:bb:5d:57:84:64: 4b:e2:66:ec:6b:82:b2:20:1c:71:b7:b5:fb:f4:a2:53:82:4b: d4:42:a0:9d:6c:07:aa:82:2f:85:23:93:c2:7c:c8:ea:c0:03: 9b:3e:a6:97:e7:26:fc:f0:b7:78:62:7e:b8:df:d8:3c:a1:70: 3a:e0:a8:bb:4d:3f:cf:b1:a1:e5:df:63:34:ab:b4:3e:d1:6e: 5b:57:06:77:0b:c4:8a:de:f0:f4:f1:74:d7:b5:27:70:a6:fa: 42:28:7a:55:2d:8b:d3:05:f3:5a:0d:9b:7d:b2:b3:c2:5a:77: a2:91:b7:e1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZBMjU0NjQzNDMyMzM3 NkU5QTM4NEI5NjNBQTgzNjE1N0I2NDJDMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCle4W9KtlWvesfZgQ71hy1dpwulVJGs6GUzH48DjPGqqMrwMW3 jdYfEjqGlBrviWRelxp35255QrsPqhUN2Tc499ifVGndMX2rPXTkF/SJCzzKWYtD n/k9Ii2Ilh4LY7KbV7mHYldawLcaM9WzsG1kNhzOfBXhHpsL8mL+5Usjuhd9IvKq yPWrXlqfEPIyPaYHxKxvfvj/2UQAAkXgH2nGfAvQvY62HzOYga2esgWV6vKVXDQt XKH4+btEXTRrWxF2Ysknye5VyxUom7t2NbkFzQhNS1iBhYSllHf5d3ubQhCI/BCC t0yCZcUrhqxCKvjGNQrFcgK3VxQyJiRQBKxdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU+iVGQ0MjN26aOEuWOqg2FXtkLCwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly1pVkdRME1qTjI2YU9F dVdPcWcyRlh0a0xDdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SQwDQYJKoZIhvcNAQELBQADggEBAB30lUM8gvHnlQj+AgKYEk7H8Kbzb9wX vRMT3LkfGjHtAFNyFqR06Y7d3dQRsQLxnECxYaegCA6CwMDZvHRvrnSU57x76ALu af+jw+8c5vf2HHI3ARS9QY9SRkaPSai2939FNgjcASNWEK5mlRo3A4smO5dwp/Zk ndDhi40myuivLuyRlWsI3Bk9lDO7XVeEZEviZuxrgrIgHHG3tfv0olOCS9RCoJ1s B6qCL4Ujk8J8yOrAA5s+ppfnJvzwt3hifrjf2DyhcDrgqLtNP8+xoeXfYzSrtD7R bltXBncLxIre8PTxdNe1J3Cm+kIoelUti9MF81oNm32ys8Jad6KRt+E= -----END CERTIFICATE-----Generated at Fri Apr 4 18:41:26 2025 by rpki-client