$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/AYzOsGtZXYEpaDRK5g9td9HjdVc.roa File: AYzOsGtZXYEpaDRK5g9td9HjdVc.roa (raw, json) Hash identifier: NH4jT1u8xSEESSQYvJSIuRYwcEfLj3okTtBBY9M11u8= Subject key identifier: 01:8C:CE:B0:6B:59:5D:81:29:68:34:4A:E6:0F:6D:77:D1:E3:75:57 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A5 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/AYzOsGtZXYEpaDRK5g9td9HjdVc.roa Signing time: Fri 17 Jan 2025 01:25:21 +0000 ROA not before: Fri 17 Jan 2025 01:25:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6309 (0x18a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=018CCEB06B595D812968344AE60F6D77D1E37557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9e:f9:08:fc:f6:aa:af:00:cb:8b:74:85:f1: 36:6c:fa:f1:ff:a2:ac:af:18:96:ff:2d:af:e1:43: da:d2:40:1c:a2:b8:19:88:33:03:09:c2:c9:b4:cd: 6f:df:df:73:ae:3f:4a:e1:a1:66:af:28:90:d0:46: d5:fb:2c:73:74:98:24:21:79:09:e8:72:f0:7e:8f: be:d3:f8:4c:fb:6f:b4:2b:72:d8:70:0c:78:f7:a3: f2:ae:d6:0a:5e:a2:94:60:82:51:85:bb:3c:0b:d7: fe:f6:8c:20:78:6d:97:f1:e6:f7:2c:a5:57:c8:aa: 4b:55:cc:ab:f6:0e:aa:68:b8:f7:25:c5:25:b9:2f: a5:1a:41:32:a8:25:75:23:dc:a0:c0:9d:6a:63:86: 34:7f:91:b6:38:d1:79:77:9b:dc:fa:35:ad:df:cb: f1:f3:6b:73:f6:90:a9:4a:d3:b1:fe:6d:c7:b4:26: 28:6c:13:b3:ae:38:5f:ec:ac:ab:c8:9d:eb:79:67: 3c:74:e0:35:fa:92:a0:b4:c5:ff:dc:0d:23:f5:25: 05:fd:a3:3c:ed:85:1b:62:f7:b2:7e:90:9a:10:1e: 31:94:73:15:dd:48:71:92:50:68:15:8c:25:03:4b: d8:b7:96:62:11:6b:72:f3:1c:78:19:59:86:75:1e: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8C:CE:B0:6B:59:5D:81:29:68:34:4A:E6:0F:6D:77:D1:E3:75:57 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/AYzOsGtZXYEpaDRK5g9td9HjdVc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.8.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:9f:26:73:2e:0a:91:ab:38:59:70:81:a9:2a:0b:14:d4:c5: a9:d3:c0:2f:08:5f:4d:ec:39:63:fe:e4:1a:ea:a6:44:94:c6: f1:5f:ae:ed:5a:50:f8:4b:9e:36:c8:bc:60:e6:dc:ae:a1:9f: 68:d3:f9:83:a8:a3:dd:aa:97:5d:44:ee:21:eb:73:6d:78:45: 29:ae:25:d7:af:24:b1:0d:c4:0c:35:79:8c:84:f7:dc:c3:8a: 07:0e:fd:08:e7:f3:c0:03:e8:a3:66:f7:64:33:78:fc:09:70: 8c:e9:8e:8c:b5:64:73:91:a0:cf:c5:06:4c:9e:dc:63:e9:86: 80:00:4c:4c:5b:fb:35:39:c9:fe:97:77:79:d6:fe:1c:57:75: 74:4a:14:0b:cf:13:41:71:56:80:be:f3:35:2d:99:cb:c3:2e: 60:9c:d4:d2:5c:23:0b:86:67:93:67:96:75:d5:ce:89:0a:eb: 28:ae:ec:73:16:ef:15:ef:91:88:73:3d:cb:2e:c9:7b:24:dd: 91:63:28:e4:38:cb:79:74:d8:51:c6:a6:88:e6:2b:b9:8d:0e: 7e:ac:2c:fd:aa:b7:2f:8e:9e:70:22:5b:5e:ed:4d:77:d6:b8: b1:b9:c2:fa:3b:03:c6:b6:4e:3c:d0:2b:1c:3a:eb:08:0f:ac: ea:3b:ef:95 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAxOENDRUIwNkI1OTVE ODEyOTY4MzQ0QUU2MEY2RDc3RDFFMzc1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXnvkI/PaqrwDLi3SF8TZs+vH/oqyvGJb/La/hQ9rSQByiuBmI MwMJwsm0zW/f33OuP0rhoWavKJDQRtX7LHN0mCQheQnocvB+j77T+Ez7b7Qrcthw DHj3o/Ku1gpeopRgglGFuzwL1/72jCB4bZfx5vcspVfIqktVzKv2DqpouPclxSW5 L6UaQTKoJXUj3KDAnWpjhjR/kbY40Xl3m9z6Na3fy/Hza3P2kKlK07H+bce0Jihs E7OuOF/srKvInet5Zzx04DX6kqC0xf/cDSP1JQX9ozzthRti97J+kJoQHjGUcxXd SHGSUGgVjCUDS9i3lmIRa3LzHHgZWYZ1HlHdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUAYzOsGtZXYEpaDRK5g9td9HjdVcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0FZek9zR3RaWFlFcGFE Uks1Zzl0ZDlIamRWYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QgwDQYJKoZIhvcNAQELBQADggEBAHufJnMuCpGrOFlwgakqCxTUxanTwC8I X03sOWP+5BrqpkSUxvFfru1aUPhLnjbIvGDm3K6hn2jT+YOoo92ql11E7iHrc214 RSmuJdevJLENxAw1eYyE99zDigcO/Qjn88AD6KNm92QzePwJcIzpjoy1ZHORoM/F Bkye3GPphoAATExb+zU5yf6Xd3nW/hxXdXRKFAvPE0FxVoC+8zUtmcvDLmCc1NJc IwuGZ5NnlnXVzokK6yiu7HMW7xXvkYhzPcsuyXsk3ZFjKOQ4y3l02FHGpojmK7mN Dn6sLP2qty+OnnAiW17tTXfWuLG5wvo7A8a2TjzQKxw66wgPrOo775U= -----END CERTIFICATE-----Generated at Fri Apr 4 18:40:38 2025 by rpki-client