$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DVHwsi5lLnGlBfITub2vKrsUUrw.roa File: DVHwsi5lLnGlBfITub2vKrsUUrw.roa (raw, json) Hash identifier: nVk7/Vejf4Va/P8hFUB3buY+dnXf52opUBCiDWkeCN8= Subject key identifier: 0D:51:F0:B2:2E:65:2E:71:A5:05:F2:13:B9:BD:AF:2A:BB:14:52:BC Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18F5 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DVHwsi5lLnGlBfITub2vKrsUUrw.roa Signing time: Fri 17 Jan 2025 01:25:52 +0000 ROA not before: Fri 17 Jan 2025 01:25:52 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6389 (0x18f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:52 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0D51F0B22E652E71A505F213B9BDAF2ABB1452BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:00:fb:27:13:cd:6f:1f:b3:e9:f6:ef:3e: 10:1f:c2:75:99:94:4e:5e:49:24:8d:e9:53:eb:ce: 21:6f:20:a0:25:22:97:cf:cf:fe:b4:a3:5e:dc:21: 30:fa:e6:ab:3d:88:9b:13:11:50:e6:70:8e:70:10: b4:7b:6f:8d:d8:ae:36:23:64:5f:76:69:92:bf:ff: 72:50:33:e0:c4:d2:83:22:99:ac:90:4f:a8:2e:ab: 0e:fb:51:da:9a:a3:13:f2:49:b5:7c:b4:0c:58:b6: 1e:da:38:a3:4f:7c:67:15:40:aa:cd:2d:3a:b2:35: 37:0d:5f:5d:bb:2b:31:a3:98:a9:43:72:6c:3f:24: 02:c7:c6:4b:ff:cd:ba:1c:e0:cb:91:6e:be:5b:ce: b3:0b:cb:cb:d2:60:5b:41:b7:6b:62:74:de:26:92: 03:bc:91:2c:17:e0:39:b1:7b:00:94:33:ee:cb:e4: b0:0c:92:bb:01:44:e0:b7:9c:a0:f9:ba:99:c7:52: 2b:81:8b:fd:cd:6f:e7:f2:8c:0c:01:41:12:39:67: 80:cc:5c:07:9b:4b:2b:19:91:c5:2d:1f:90:57:32: 5f:e1:23:95:ca:bf:87:51:a3:4e:ec:f5:1f:04:2b: f7:7f:88:11:b4:29:23:ce:6d:16:1b:cd:c8:6c:19: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:51:F0:B2:2E:65:2E:71:A5:05:F2:13:B9:BD:AF:2A:BB:14:52:BC X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DVHwsi5lLnGlBfITub2vKrsUUrw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.26.0/24 Signature Algorithm: sha256WithRSAEncryption a2:c7:83:59:b7:1f:99:7d:14:1b:51:67:7f:b4:13:40:90:66: 1f:75:a0:15:ae:52:23:7f:ec:7c:bc:3f:92:2a:aa:6e:35:79: 4b:71:88:ef:b2:31:8a:cd:a9:48:78:9f:a5:e9:f3:75:bd:6d: a5:51:c3:51:e5:11:19:59:5e:9c:21:28:88:91:37:fb:54:58: ea:41:2a:ec:ce:91:f4:54:8e:b0:fd:fd:ae:45:62:1e:24:7a: 5d:5f:be:4b:23:8b:b0:70:9b:84:ed:c2:fa:ec:2c:08:9e:97: 4d:f6:dd:32:09:4f:3b:e9:29:f7:7a:18:ae:da:8f:41:bc:49: 44:b1:2c:33:48:fd:b3:55:df:5a:ff:89:6d:75:10:b6:80:a0: 55:6a:65:5b:3a:e3:96:d1:9a:16:d7:76:f9:d2:37:ac:01:d9: d8:54:58:c4:71:98:ea:1a:47:c6:94:4f:d0:f5:ee:1e:f4:12: 37:a7:3c:31:1e:c9:a8:70:c5:3a:b1:41:99:d4:5e:4d:89:77: c2:7e:1e:72:a2:87:41:0e:c2:de:d4:74:79:61:74:5d:94:b9: 56:63:05:df:0d:93:93:e3:c0:ae:ec:71:fe:da:80:ab:8c:dd: 68:12:a9:76:ec:f3:55:48:97:2d:1a:d3:07:b8:f8:42:b6:5e: 7b:90:bf:d4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBENTFGMEIyMkU2NTJF NzFBNTA1RjIxM0I5QkRBRjJBQkIxNDUyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmlAD7JxPNbx+z6fbvPhAfwnWZlE5eSSSN6VPrziFvIKAlIpfP z/60o17cITD65qs9iJsTEVDmcI5wELR7b43YrjYjZF92aZK//3JQM+DE0oMimayQ T6guqw77UdqaoxPySbV8tAxYth7aOKNPfGcVQKrNLTqyNTcNX127KzGjmKlDcmw/ JALHxkv/zboc4MuRbr5bzrMLy8vSYFtBt2tidN4mkgO8kSwX4DmxewCUM+7L5LAM krsBROC3nKD5upnHUiuBi/3Nb+fyjAwBQRI5Z4DMXAebSysZkcUtH5BXMl/hI5XK v4dRo07s9R8EK/d/iBG0KSPObRYbzchsGeB7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDVHwsi5lLnGlBfITub2vKrsUUrwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0RWSHdzaTVsTG5HbEJm SVR1YjJ2S3JzVVVydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RowDQYJKoZIhvcNAQELBQADggEBAKLHg1m3H5l9FBtRZ3+0E0CQZh91oBWu UiN/7Hy8P5Iqqm41eUtxiO+yMYrNqUh4n6Xp83W9baVRw1HlERlZXpwhKIiRN/tU WOpBKuzOkfRUjrD9/a5FYh4kel1fvksji7Bwm4TtwvrsLAiel0323TIJTzvpKfd6 GK7aj0G8SUSxLDNI/bNV31r/iW11ELaAoFVqZVs645bRmhbXdvnSN6wB2dhUWMRx mOoaR8aUT9D17h70EjenPDEeyahwxTqxQZnUXk2Jd8J+HnKih0EOwt7UdHlhdF2U uVZjBd8Nk5PjwK7scf7agKuM3WgSqXbs81VIly0a0we4+EK2XnuQv9Q= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:44 2025 by rpki-client