$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/4YNBqX_13VapWdd87ZJQC9UfyBM.roa File: 4YNBqX_13VapWdd87ZJQC9UfyBM.roa (raw, json) Hash identifier: wrhzTJ3PdRJKas4TUmeKSvC8jV+OyWuQJGujENtY708= Subject key identifier: E1:83:41:A9:7F:F5:DD:56:A9:59:D7:7C:ED:92:50:0B:D5:1F:C8:13 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 19E0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4YNBqX_13VapWdd87ZJQC9UfyBM.roa Signing time: Fri 28 Feb 2025 17:00:50 +0000 ROA not before: Fri 28 Feb 2025 17:00:50 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 17621 IP address blocks: 103.5.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6624 (0x19e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Feb 28 17:00:50 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E18341A97FF5DD56A959D77CED92500BD51FC813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:33:2b:a2:5f:17:71:7e:f8:33:51:d8:ec: ce:5d:57:cf:d8:f3:40:fa:bf:06:e7:af:92:aa:2e: 42:02:84:89:2a:12:04:e9:b5:fb:9f:8d:60:f5:0b: 5a:8e:5a:be:47:b3:eb:dd:7e:d0:31:03:d1:23:74: 02:dd:a9:1a:c2:5e:9b:dc:fd:e6:8c:08:8c:29:50: 00:ff:b3:77:2e:83:ac:30:f0:47:c7:c2:a0:69:d6: d8:e2:c9:50:af:5b:c5:20:f7:f5:ce:6d:e5:d9:a8: f5:e5:b2:0b:ca:0f:9f:57:fa:86:11:70:3d:79:4b: 34:30:26:4b:a7:cd:8f:57:ac:81:62:52:64:f4:ec: 8b:71:66:0b:30:6f:f5:dd:cf:eb:cd:ec:96:2f:d5: 45:05:c0:21:23:bf:da:be:ec:4a:73:86:ce:e5:9e: 8f:90:b2:54:1f:b5:55:4e:db:35:c5:69:c1:85:51: 37:41:12:80:da:c1:ba:0d:d5:88:0d:33:d1:5d:b3: 8a:40:65:d8:da:76:40:1e:50:72:41:16:60:3e:61: 6a:86:c3:40:aa:07:db:2c:c0:98:71:63:b2:a1:b8: bc:ea:c3:06:3e:a6:56:ed:ae:c7:4e:3e:50:32:d5: 7f:f2:ea:c6:d4:ea:b4:43:2d:51:ed:26:56:47:82: 22:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:83:41:A9:7F:F5:DD:56:A9:59:D7:7C:ED:92:50:0B:D5:1F:C8:13 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/4YNBqX_13VapWdd87ZJQC9UfyBM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.192.0/23 Signature Algorithm: sha256WithRSAEncryption c1:09:89:7c:69:32:cb:fa:0b:cb:a3:12:b8:be:41:79:9a:33: b2:69:64:ca:40:70:80:39:f5:7d:61:e1:56:93:9b:e0:a9:a6: 2f:63:ec:b5:4d:8f:18:4c:11:76:32:42:f1:25:f8:65:ef:16: bd:75:1c:4d:73:57:d1:0c:66:12:db:80:85:68:8c:24:e5:9c: e7:a9:6c:8a:9f:98:20:d6:97:37:02:8e:c0:1e:0e:37:3b:e2: ba:67:05:3d:32:4c:d2:7c:49:d0:17:e6:c7:aa:30:60:29:88: 12:76:15:83:ff:1d:51:13:9a:81:bc:2a:06:bb:20:69:9f:3d: af:21:b0:71:c4:55:1f:be:c3:f9:e7:bd:a0:b5:f0:ec:83:ec: 68:3e:1f:ea:f6:83:8b:4d:49:db:ae:24:b2:8c:bd:df:cb:d7: ee:42:44:a6:0c:ec:04:e8:90:97:43:f2:c2:ca:52:89:d5:db: 66:63:56:4a:75:0a:fb:08:37:45:83:81:1a:1c:da:c7:54:50: 97:72:76:a0:cc:8b:3a:ef:19:53:d6:8f:8a:6c:02:ce:5b:7c: 98:ba:25:e3:e3:1d:34:02:d4:9a:80:f8:bb:b7:54:9f:1b:ef: 33:8d:0c:be:89:32:6e:a2:0b:70:d6:ec:e0:f3:50:0d:46:2a: 1a:9f:42:8c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAyMjgx NzAwNTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEUxODM0MUE5N0ZGNURE NTZBOTU5RDc3Q0VEOTI1MDBCRDUxRkM4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAVDMrol8XcX74M1HY7M5dV8/Y80D6vwbnr5KqLkIChIkqEgTp tfufjWD1C1qOWr5Hs+vdftAxA9EjdALdqRrCXpvc/eaMCIwpUAD/s3cug6ww8EfH wqBp1tjiyVCvW8Ug9/XObeXZqPXlsgvKD59X+oYRcD15SzQwJkunzY9XrIFiUmT0 7ItxZgswb/Xdz+vN7JYv1UUFwCEjv9q+7Epzhs7lno+QslQftVVO2zXFacGFUTdB EoDawboN1YgNM9Fds4pAZdjadkAeUHJBFmA+YWqGw0CqB9sswJhxY7KhuLzqwwY+ plbtrsdOPlAy1X/y6sbU6rRDLVHtJlZHgiILAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU4YNBqX/13VapWdd87ZJQC9UfyBMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzRZTkJxWF8xM1ZhcFdk ZDg3WkpRQzlVZnlCTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnBcAwDQYJKoZIhvcNAQELBQADggEBAMEJiXxpMsv6C8ujEri+QXmaM7JpZMpA cIA59X1h4VaTm+Cppi9j7LVNjxhMEXYyQvEl+GXvFr11HE1zV9EMZhLbgIVojCTl nOepbIqfmCDWlzcCjsAeDjc74rpnBT0yTNJ8SdAX5seqMGApiBJ2FYP/HVETmoG8 Kga7IGmfPa8hsHHEVR++w/nnvaC18OyD7Gg+H+r2g4tNSduuJLKMvd/L1+5CRKYM 7ATokJdD8sLKUonV22ZjVkp1CvsIN0WDgRoc2sdUUJdydqDMizrvGVPWj4psAs5b fJi6JePjHTQC1JqA+Lu3VJ8b7zONDL6JMm6iC3DW7ODzUA1GKhqfQow= -----END CERTIFICATE-----Generated at Fri Apr 4 18:40:39 2025 by rpki-client