$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DlM90BauHoYC02-1dBLm-V9Ce-o.roa File: DlM90BauHoYC02-1dBLm-V9Ce-o.roa (raw, json) Hash identifier: uGwGridbDPovLsRpCBwLo5jGlHcQMewj8+jUGSFyx+U= Subject key identifier: 0E:53:3D:D0:16:AE:1E:86:02:D3:6F:B5:74:12:E6:F9:5F:42:7B:EA Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18ED Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DlM90BauHoYC02-1dBLm-V9Ce-o.roa Signing time: Fri 17 Jan 2025 01:25:49 +0000 ROA not before: Fri 17 Jan 2025 01:25:49 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6381 (0x18ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:49 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0E533DD016AE1E8602D36FB57412E6F95F427BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:0e:b4:c2:d1:8c:01:49:18:2b:fd:28:11: 52:2a:ce:84:07:e9:53:b3:e0:21:6d:13:47:af:6b: 1a:4a:76:df:56:32:2f:aa:5f:34:c5:49:4d:bf:3d: eb:cb:79:b0:01:49:89:45:bd:2d:72:60:02:ce:a5: de:e3:09:bf:e0:cf:27:18:35:0f:a9:35:0d:b0:a1: ab:5f:43:56:46:4a:37:73:09:9f:e4:bf:9a:46:e4: 18:67:e9:09:0a:fe:a3:d5:f1:fb:3f:b1:4d:80:88: 81:3b:61:05:55:bd:de:e4:b8:8d:da:92:90:1a:d7: cf:55:54:86:c2:ff:2c:19:cc:59:e7:20:65:1b:d9: c3:f9:1c:cb:f4:00:07:46:46:75:ac:84:91:f8:87: 2d:e4:8e:35:be:98:e4:ce:f1:1a:cf:c2:2a:18:16: 78:23:31:b8:48:70:8e:c3:5e:33:27:57:f0:95:53: 9b:e7:98:bb:53:bf:32:59:b5:4a:ba:9d:de:e9:eb: 03:85:61:c9:0e:f3:d1:b3:2f:fd:9f:12:96:01:fa: c4:0e:27:c8:7f:89:d3:d2:4a:9a:78:80:d5:b7:13: 7b:60:d7:01:64:a0:1b:e0:96:68:76:4a:21:a5:9d: 56:e4:3f:03:4a:f8:0e:11:72:be:a1:49:22:20:50: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:53:3D:D0:16:AE:1E:86:02:D3:6F:B5:74:12:E6:F9:5F:42:7B:EA X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DlM90BauHoYC02-1dBLm-V9Ce-o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.30.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b6:3f:99:03:c0:d2:c2:55:97:4e:aa:05:57:d9:57:e1:41: 8c:55:ed:bd:8f:d7:a5:a5:c5:8f:f7:1b:46:4d:6c:1d:10:39: be:66:1a:c3:3e:44:9d:91:16:3e:9b:4e:e4:9a:aa:df:be:db: bd:69:ae:bf:c4:b3:71:e5:7a:a6:8d:73:ee:63:bf:a8:fb:a5: ed:c5:2a:c4:92:8a:f7:d0:c4:6e:c0:a5:2a:70:55:2d:7d:86: 98:43:95:13:a8:64:f3:77:74:0f:e0:72:51:c4:ce:bd:42:7b: ae:c0:d3:9c:3b:dc:59:c6:1c:5f:47:67:88:f2:d8:bb:89:23: ff:81:bd:86:9f:e9:75:09:a2:8b:29:5d:88:d7:82:32:9b:9d: 1e:1c:08:ad:3d:34:08:e4:6c:b8:3f:d2:d3:e8:91:b4:6a:de: 1c:0f:02:4e:06:ab:58:7d:ee:48:7b:df:21:db:be:de:70:85: 27:30:06:e5:64:2f:33:54:d3:5e:5c:ba:7e:41:b1:ad:f8:10: e5:b3:1d:7d:87:b4:29:bf:9c:a8:85:b2:83:fe:6c:2d:19:d3: 61:a3:b9:c8:8e:76:92:36:93:15:92:af:ce:a2:99:58:05:5a: bd:f5:eb:77:35:b6:16:9d:93:c1:0f:2b:27:2c:dd:68:ba:77: 1b:81:05:57 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBFNTMzREQwMTZBRTFF ODYwMkQzNkZCNTc0MTJFNkY5NUY0MjdCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxCA60wtGMAUkYK/0oEVIqzoQH6VOz4CFtE0evaxpKdt9WMi+q XzTFSU2/PevLebABSYlFvS1yYALOpd7jCb/gzycYNQ+pNQ2woatfQ1ZGSjdzCZ/k v5pG5Bhn6QkK/qPV8fs/sU2AiIE7YQVVvd7kuI3akpAa189VVIbC/ywZzFnnIGUb 2cP5HMv0AAdGRnWshJH4hy3kjjW+mOTO8RrPwioYFngjMbhIcI7DXjMnV/CVU5vn mLtTvzJZtUq6nd7p6wOFYckO89GzL/2fEpYB+sQOJ8h/idPSSpp4gNW3E3tg1wFk oBvglmh2SiGlnVbkPwNK+A4Rcr6hSSIgUIPVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDlM90BauHoYC02+1dBLm+V9Ce+owHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0RsTTkwQmF1SG9ZQzAy LTFkQkxtLVY5Q2Utby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3R4wDQYJKoZIhvcNAQELBQADggEBAHy2P5kDwNLCVZdOqgVX2VfhQYxV7b2P 16WlxY/3G0ZNbB0QOb5mGsM+RJ2RFj6bTuSaqt++271prr/Es3HleqaNc+5jv6j7 pe3FKsSSivfQxG7ApSpwVS19hphDlROoZPN3dA/gclHEzr1Ce67A05w73FnGHF9H Z4jy2LuJI/+BvYaf6XUJoospXYjXgjKbnR4cCK09NAjkbLg/0tPokbRq3hwPAk4G q1h97kh73yHbvt5whScwBuVkLzNU015cun5Bsa34EOWzHX2HtCm/nKiFsoP+bC0Z 02GjuciOdpI2kxWSr86imVgFWr3163c1thadk8EPKycs3Wi6dxuBBVc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:55:10 2025 by rpki-client