$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa File: 1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa (raw, json) Hash identifier: M6l4D8s67NLbiidJV/CwXD93wBCesGN7x6RL/99YpG4= Subject key identifier: D4:AC:D5:9A:D1:F6:08:F9:C7:9C:F1:55:D7:24:BD:48:4F:C1:88:20 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18D5 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa Signing time: Fri 17 Jan 2025 01:25:38 +0000 ROA not before: Fri 17 Jan 2025 01:25:38 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6357 (0x18d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:38 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D4ACD59AD1F608F9C79CF155D724BD484FC18820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:53:11:6c:8f:ae:e9:3c:7a:af:1c:81:47: 92:f5:ee:20:80:b8:5f:29:74:bd:a0:1c:24:f5:da: 6e:67:23:11:fb:99:a2:96:f0:9e:5d:4b:ec:78:6d: a6:2b:bf:41:54:76:2f:69:a7:2f:a6:e0:86:3b:85: 1c:7b:d7:e0:de:60:b9:18:e2:40:c7:e8:57:7e:7a: 4a:f7:35:9f:f8:bf:cd:d1:7b:64:7c:2b:8e:be:93: db:89:b5:c2:a8:2a:10:55:d3:37:51:b2:8c:4b:6b: 8e:ec:62:56:7c:dc:96:22:4a:1d:6f:70:52:6c:e2: 82:6f:9d:ed:af:ef:cf:e7:c2:1a:eb:1f:44:bf:dc: 52:6b:54:2f:4d:4b:06:ad:04:5a:73:09:b2:64:b6: 61:fb:83:b7:4f:62:ec:da:e2:5d:a8:35:af:b8:dd: e6:fb:84:36:3b:99:71:25:57:a3:d4:df:a1:2f:54: b8:ac:21:f8:85:4b:ac:12:a3:7a:c8:42:29:18:0f: 49:77:76:26:c0:97:a9:d1:eb:c2:f5:94:05:b4:c6: d2:91:a0:2d:d6:2d:dd:80:4b:5a:3a:c9:10:ea:9a: 7c:d1:ca:10:68:f7:00:9e:64:a6:b9:10:10:cc:45: 8d:94:d9:e1:c2:ba:09:28:8a:e7:60:e0:c5:f8:a9: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AC:D5:9A:D1:F6:08:F9:C7:9C:F1:55:D7:24:BD:48:4F:C1:88:20 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.17.0/24 Signature Algorithm: sha256WithRSAEncryption 51:5b:e1:e3:c8:d5:f2:e9:f0:ab:21:37:85:6a:05:d3:2b:c1: ae:72:b8:0d:56:63:8d:ae:04:5f:84:3f:a8:f3:10:28:41:fb: 5e:b3:87:74:43:38:5b:f3:ad:33:15:e0:c9:fb:73:bc:9e:f2: 00:33:23:8f:09:e0:4a:55:58:ce:ef:83:2f:81:3c:98:90:5b: 43:a6:37:b0:70:79:b7:fc:30:4b:17:2f:6d:b4:40:80:12:6b: 84:ec:b5:de:a4:7e:7b:e1:7d:16:d9:28:b2:d0:c7:5d:61:5e: de:81:fa:3c:45:c2:c7:54:26:35:90:7b:bd:b1:c4:4d:8a:15: db:bd:98:d5:b0:57:97:82:ce:8e:72:1d:ef:7f:91:65:50:37: a8:fd:ee:0a:4b:bc:71:54:44:b6:2c:61:6a:b6:ca:83:c8:4a: fe:f3:1d:e5:36:0d:dc:96:78:03:f3:9c:70:e5:76:76:b2:87: 8c:35:97:12:c7:38:8c:83:3a:73:06:e6:ff:d6:d6:57:a6:4d: c5:f6:fa:c8:28:f2:e1:5e:46:24:83:13:a8:bc:8b:27:02:cd: cd:e5:98:13:28:4e:ac:05:a5:c5:b9:62:10:07:6c:6e:a0:a6: 04:5c:92:23:07:ee:db:62:ee:92:c2:5a:db:e8:23:c8:92:87: 2e:b7:e5:ff -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ0QUNENTlBRDFGNjA4 RjlDNzlDRjE1NUQ3MjRCRDQ4NEZDMTg4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKZ1MRbI+u6Tx6rxyBR5L17iCAuF8pdL2gHCT12m5nIxH7maKW 8J5dS+x4baYrv0FUdi9ppy+m4IY7hRx71+DeYLkY4kDH6Fd+ekr3NZ/4v83Re2R8 K46+k9uJtcKoKhBV0zdRsoxLa47sYlZ83JYiSh1vcFJs4oJvne2v78/nwhrrH0S/ 3FJrVC9NSwatBFpzCbJktmH7g7dPYuza4l2oNa+43eb7hDY7mXElV6PU36EvVLis IfiFS6wSo3rIQikYD0l3dibAl6nR68L1lAW0xtKRoC3WLd2AS1o6yRDqmnzRyhBo 9wCeZKa5EBDMRY2U2eHCugkoiudg4MX4qUwnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU1KzVmtH2CPnHnPFV1yS9SE/BiCAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzFLelZtdEgyQ1BuSG5Q RlYxeVM5U0VfQmlDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3REwDQYJKoZIhvcNAQELBQADggEBAFFb4ePI1fLp8KshN4VqBdMrwa5yuA1W Y42uBF+EP6jzEChB+16zh3RDOFvzrTMV4Mn7c7ye8gAzI48J4EpVWM7vgy+BPJiQ W0OmN7Bwebf8MEsXL220QIASa4Tstd6kfnvhfRbZKLLQx11hXt6B+jxFwsdUJjWQ e72xxE2KFdu9mNWwV5eCzo5yHe9/kWVQN6j97gpLvHFURLYsYWq2yoPISv7zHeU2 DdyWeAPznHDldnayh4w1lxLHOIyDOnMG5v/W1lemTcX2+sgo8uFeRiSDE6i8iycC zc3lmBMoTqwFpcW5YhAHbG6gpgRckiMH7tti7pLCWtvoI8iShy635f8= -----END CERTIFICATE-----Generated at Fri Apr 4 18:41:52 2025 by rpki-client