$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/EmbyCx99fwrclsgJrznG8SAtB_k.roa File: EmbyCx99fwrclsgJrznG8SAtB_k.roa (raw, json) Hash identifier: HBkTLBiW5pUeGdINPoo4sF0uKcBVBD3QoFCRFj+Rd1k= Subject key identifier: 12:66:F2:0B:1F:7D:7F:0A:DC:96:C8:09:AF:39:C6:F1:20:2D:07:F9 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 183E Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EmbyCx99fwrclsgJrznG8SAtB_k.roa Signing time: Fri 17 Jan 2025 01:24:47 +0000 ROA not before: Fri 17 Jan 2025 01:24:47 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6206 (0x183e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:47 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1266F20B1F7D7F0ADC96C809AF39C6F1202D07F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ba:14:70:2f:f5:9e:6c:d5:84:c6:80:90:8d: a3:38:0b:39:49:5d:0a:fb:8a:84:17:34:2e:5a:bf: 61:f2:3c:84:0f:55:8c:d7:66:59:66:4f:ed:5f:09: a4:4d:f9:93:2a:b2:33:51:cb:70:75:a6:56:28:17: 63:71:90:e6:f5:3a:e8:f0:d3:d0:be:e6:46:de:74: 2c:df:e7:72:b6:cc:99:1f:7f:c7:16:3f:14:75:f4: 30:79:74:7d:f1:ba:e0:80:8f:33:2f:15:ab:0a:57: a7:31:9a:81:00:1e:cf:93:57:a8:d4:0c:cd:ec:6e: 05:5f:d3:e6:85:0e:58:76:e9:18:b8:30:80:85:c2: e8:be:36:c7:97:74:67:eb:5e:f8:dd:5f:e8:b0:ee: a9:8d:71:f8:ba:13:3b:25:df:f3:74:68:57:32:0c: ea:40:f0:b5:10:ef:2c:71:9a:e7:e5:21:4f:40:e3: 71:41:c9:37:9e:de:61:69:b0:6a:01:cb:3a:eb:46: 50:0f:56:37:6a:0d:f1:7a:b7:b5:a9:09:ef:e3:83: 4f:9e:c0:8c:e4:67:02:fc:1a:62:78:00:10:c7:d2: f9:d0:84:8a:a9:7c:05:5c:1a:4a:0f:dc:b5:0f:8c: 09:22:98:b4:b1:2c:07:9f:7f:8a:ab:d9:e6:26:ef: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:66:F2:0B:1F:7D:7F:0A:DC:96:C8:09:AF:39:C6:F1:20:2D:07:F9 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EmbyCx99fwrclsgJrznG8SAtB_k.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.32.0/24 Signature Algorithm: sha256WithRSAEncryption 39:a2:1d:65:b7:33:b5:16:a6:af:be:3d:33:96:06:48:88:d4: e7:93:64:26:49:4c:84:b9:47:5a:17:52:a7:8f:6d:d5:01:01: 60:11:85:f8:e6:78:82:51:50:94:16:16:10:c6:a1:32:26:51: f9:92:fd:e7:28:b6:62:47:3a:d6:a6:79:4d:20:4f:68:d9:e6: 21:a6:9a:c5:5c:75:64:97:f0:78:3d:b1:c8:98:5b:97:08:11: 06:51:f9:de:d4:59:c7:49:71:6e:8f:77:d5:ad:8a:b9:bc:b8: c1:84:e4:cb:48:87:68:42:f8:60:b7:3f:74:d5:5c:a4:3c:79: 3a:46:3b:8e:0d:ea:af:31:10:df:dd:f1:1c:62:0d:af:6d:01: 1b:fb:b8:dd:bb:71:d8:2d:0f:f6:6e:d6:42:e7:0c:3b:a1:4c: 97:c8:65:49:29:f0:57:20:e0:60:53:05:cc:f5:19:ae:f4:ab: 0a:7d:01:b7:c4:3f:cc:3b:19:a7:88:4d:6a:df:ae:b8:37:4c: f2:4c:8b:8b:cb:7b:01:51:fa:74:16:f7:e4:6c:a3:e5:7e:b8: 02:17:07:82:28:7f:2f:0f:b9:21:9a:2e:0e:08:8d:70:3a:b4: 08:29:a6:ac:b8:fc:b6:77:a0:b6:9c:0e:03:52:1a:26:4a:9b: f2:0a:bf:51 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDEyNjZGMjBCMUY3RDdG MEFEQzk2QzgwOUFGMzlDNkYxMjAyRDA3RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvuhRwL/WebNWExoCQjaM4CzlJXQr7ioQXNC5av2HyPIQPVYzX ZllmT+1fCaRN+ZMqsjNRy3B1plYoF2NxkOb1Oujw09C+5kbedCzf53K2zJkff8cW PxR19DB5dH3xuuCAjzMvFasKV6cxmoEAHs+TV6jUDM3sbgVf0+aFDlh26Ri4MICF wui+NseXdGfrXvjdX+iw7qmNcfi6Ezsl3/N0aFcyDOpA8LUQ7yxxmuflIU9A43FB yTee3mFpsGoByzrrRlAPVjdqDfF6t7WpCe/jg0+ewIzkZwL8GmJ4ABDH0vnQhIqp fAVcGkoP3LUPjAkimLSxLAeff4qr2eYm7/H9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEmbyCx99fwrclsgJrznG8SAtB/kwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0VtYnlDeDk5ZndyY2xz Z0pyem5HOFNBdEJfay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SAwDQYJKoZIhvcNAQELBQADggEBADmiHWW3M7UWpq++PTOWBkiI1OeTZCZJ TIS5R1oXUqePbdUBAWARhfjmeIJRUJQWFhDGoTImUfmS/ecotmJHOtameU0gT2jZ 5iGmmsVcdWSX8Hg9sciYW5cIEQZR+d7UWcdJcW6Pd9Wtirm8uMGE5MtIh2hC+GC3 P3TVXKQ8eTpGO44N6q8xEN/d8RxiDa9tARv7uN27cdgtD/Zu1kLnDDuhTJfIZUkp 8Fcg4GBTBcz1Ga70qwp9AbfEP8w7GaeITWrfrrg3TPJMi4vLewFR+nQW9+Rso+V+ uAIXB4Iofy8PuSGaLg4IjXA6tAgppqy4/LZ3oLacDgNSGiZKm/IKv1E= -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:49 2025 by rpki-client