$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa File: 8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa (raw, json) Hash identifier: DLkfkKkYbBqlpfpmTqVc4hhdSqL0TnCipgs6o9Ni3gg= Subject key identifier: F0:74:1F:25:D0:28:E2:AE:32:D7:76:71:2B:AF:B1:15:12:C9:35:3E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa Signing time: Fri 17 Jan 2025 01:25:20 +0000 ROA not before: Fri 17 Jan 2025 01:25:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6304 (0x18a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F0741F25D028E2AE32D776712BAFB11512C9353E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:55:0a:13:d0:2f:65:5d:6e:28:60:63:74: c9:d1:b5:f9:c8:76:d4:08:4d:81:63:71:3f:d0:83: 6a:e3:ae:76:fb:f5:91:bc:52:97:91:2d:76:64:44: 2d:04:b0:f8:d5:59:21:fa:d5:0d:fb:29:90:5e:61: 94:1f:b7:68:6e:cb:13:f8:e4:c0:2f:f7:a9:11:db: 68:99:62:75:da:c3:d4:f3:ce:f4:90:02:a3:64:8c: db:53:5b:5c:4e:63:f5:45:2c:04:68:ed:48:8a:de: 9b:5e:c8:b5:f0:7c:f6:f0:18:0d:6c:7f:6e:b4:7d: b1:fc:a4:fd:1c:cb:52:a9:ad:b7:ee:d9:65:0a:b9: 8d:62:80:94:ee:f0:7a:22:e6:d5:e2:56:f0:26:6f: a4:a8:2b:15:40:25:2f:97:06:7a:8f:2e:db:57:3f: d6:3b:7a:97:6b:4f:ce:12:af:89:5b:63:50:ba:3d: 14:a3:5c:0b:04:2f:48:00:9e:c5:c3:51:62:8c:3a: cb:4b:6d:be:a5:ca:c2:95:f4:c8:a2:31:58:7d:14: 3a:83:36:b7:70:8e:a8:a8:4a:06:2a:6b:06:f4:01: 88:fd:fc:05:ad:ab:6b:c2:ea:6b:73:66:2b:3a:54: 7f:a7:ce:cb:9a:b1:2f:fa:d0:97:7b:d1:c0:12:b0: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:74:1F:25:D0:28:E2:AE:32:D7:76:71:2B:AF:B1:15:12:C9:35:3E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.28.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:49:ec:e3:c7:62:f7:34:0d:1a:d3:c8:ae:c6:8b:61:c0:a2: 1e:54:89:18:b1:f5:5d:63:93:70:51:81:1f:01:62:a7:48:85: 4d:ed:bb:cf:a6:72:83:05:28:87:ca:a6:e3:47:ff:fd:6e:28: 5f:1a:0b:7f:f5:4f:fa:87:d7:aa:4d:8c:69:89:50:ef:6b:09: 99:62:0e:b6:e3:b5:ec:b8:2d:94:bb:55:df:54:e0:56:27:51: 57:e5:b6:c6:c8:94:94:a5:34:fb:c9:09:23:a2:18:05:a2:02: 15:4f:ac:cd:b9:e1:c3:1d:50:f9:6c:72:28:bf:d8:4e:a2:4e: 9b:4b:69:f6:4c:8b:d0:13:1f:46:3b:e5:c8:46:50:36:94:c7: 50:5a:34:ae:d5:d0:f9:b5:94:9f:ac:cd:1a:46:c8:42:cf:54: 38:bf:3a:c5:e0:ca:31:a5:7e:95:d3:b2:8f:09:1b:43:57:30: 50:75:10:f0:ce:63:6d:36:8a:d1:8e:a3:24:58:35:b7:83:81: 65:3d:7d:3c:a0:4b:68:9f:a3:9b:ad:15:54:26:0f:3c:57:67: 4d:26:68:fd:01:d7:dc:d6:49:23:fd:03:ea:ce:d6:9d:ee:bd: b5:e8:6f:70:a8:a2:38:14:98:7b:e2:18:b2:fc:06:6a:82:16: 1e:b1:1c:75 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYwNzQxRjI1RDAyOEUy QUUzMkQ3NzY3MTJCQUZCMTE1MTJDOTM1M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjgVUKE9AvZV1uKGBjdMnRtfnIdtQITYFjcT/Qg2rjrnb79ZG8 UpeRLXZkRC0EsPjVWSH61Q37KZBeYZQft2huyxP45MAv96kR22iZYnXaw9TzzvSQ AqNkjNtTW1xOY/VFLARo7UiK3pteyLXwfPbwGA1sf260fbH8pP0cy1Kprbfu2WUK uY1igJTu8Hoi5tXiVvAmb6SoKxVAJS+XBnqPLttXP9Y7epdrT84Sr4lbY1C6PRSj XAsEL0gAnsXDUWKMOstLbb6lysKV9MiiMVh9FDqDNrdwjqioSgYqawb0AYj9/AWt q2vC6mtzZis6VH+nzsuasS/60Jd70cASsCU1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8HQfJdAo4q4y13ZxK6+xFRLJNT4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhIUWZKZEFvNHE0eTEz WnhLNi14RlJMSk5UNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3RwwDQYJKoZIhvcNAQELBQADggEBACpJ7OPHYvc0DRrTyK7Gi2HAoh5UiRix 9V1jk3BRgR8BYqdIhU3tu8+mcoMFKIfKpuNH//1uKF8aC3/1T/qH16pNjGmJUO9r CZliDrbjtey4LZS7Vd9U4FYnUVfltsbIlJSlNPvJCSOiGAWiAhVPrM254cMdUPls cii/2E6iTptLafZMi9ATH0Y75chGUDaUx1BaNK7V0Pm1lJ+szRpGyELPVDi/OsXg yjGlfpXTso8JG0NXMFB1EPDOY202itGOoyRYNbeDgWU9fTygS2ifo5utFVQmDzxX Z00maP0B19zWSSP9A+rO1p3uvbXob3CoojgUmHviGLL8BmqCFh6xHHU= -----END CERTIFICATE-----Generated at Fri Apr 4 18:44:39 2025 by rpki-client