$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/KLm7z4uQla_TB8iyLu6RKo7KgRk.roa File: KLm7z4uQla_TB8iyLu6RKo7KgRk.roa (raw, json) Hash identifier: 0mQQ5ro+G4wEmqUmYO+lq97rWjKgTT+/E3bZLn21LF8= Subject key identifier: 28:B9:BB:CF:8B:90:95:AF:D3:07:C8:B2:2E:EE:91:2A:8E:CA:81:19 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 180B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/KLm7z4uQla_TB8iyLu6RKo7KgRk.roa Signing time: Fri 17 Jan 2025 01:24:29 +0000 ROA not before: Fri 17 Jan 2025 01:24:29 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6155 (0x180b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:29 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=28B9BBCF8B9095AFD307C8B22EEE912A8ECA8119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7f:fc:c5:aa:11:fc:fe:d0:ae:ae:75:df:89: eb:e2:fd:6c:2d:17:d1:26:c6:2a:68:b0:b5:11:d1: d7:bd:73:e4:7f:3c:b4:92:c2:ff:53:50:b8:9f:c4: ea:de:cd:9a:13:39:11:7b:c2:f4:e1:fb:97:d4:cd: 00:32:58:e8:30:de:8e:75:c6:ba:4b:1c:5f:dd:ab: 31:65:18:d8:87:eb:e4:69:11:50:7c:6d:95:a8:19: 96:c5:ac:1d:39:55:2d:cf:c2:ac:21:4b:78:37:68: 8e:0f:aa:38:cc:6f:3b:0d:94:73:a6:9a:21:1f:fc: c6:20:8d:fe:fb:b6:db:45:35:a0:5d:62:91:ef:1c: 4d:47:8a:30:2f:ef:1e:65:fc:b1:7b:d2:5c:58:ad: e2:8e:fb:55:7d:2e:ec:5d:9e:67:c3:9c:34:ca:09: f6:51:51:4f:3d:48:2f:97:c0:05:9e:92:f1:73:68: c9:2b:d5:3c:0d:0d:be:5e:70:eb:7d:e6:88:d3:5d: 7c:93:68:88:dc:d8:61:0d:26:44:e1:61:f0:17:8a: d4:cb:b9:fa:fe:5e:de:85:e1:1a:a2:16:7d:dd:7d: 24:d1:86:5a:92:36:11:e3:f7:7b:3e:4d:d9:f3:2b: 78:21:88:8e:be:86:76:e6:f4:32:f5:e7:ab:a4:7c: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:BB:CF:8B:90:95:AF:D3:07:C8:B2:2E:EE:91:2A:8E:CA:81:19 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/KLm7z4uQla_TB8iyLu6RKo7KgRk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.37.0/24 Signature Algorithm: sha256WithRSAEncryption 57:5a:95:fc:a1:b4:55:11:a3:d3:e7:af:65:87:2e:df:d5:73: d1:7c:b9:94:ea:35:6e:e2:9f:4c:ba:df:92:6e:9c:e8:e6:b1: ec:15:bd:f2:8d:82:45:6e:ba:d2:92:41:92:de:52:11:d9:5f: 3d:2e:15:e0:da:47:2b:db:bc:00:d6:9d:9d:40:df:eb:3f:06: 7b:c1:da:dd:42:bc:b7:75:2a:74:c6:51:55:0e:8b:bb:1a:00: 3f:d1:83:92:df:21:cc:f2:70:36:d8:df:e5:16:17:64:83:ed: a5:98:5e:ca:7d:a1:53:ab:c7:cd:f1:35:54:19:bb:44:e5:0d: 15:ce:3e:b0:c3:ea:a0:7f:4d:de:ea:ef:b1:61:a1:ac:a4:5f: e2:19:71:2d:99:52:8a:03:1d:1d:be:42:ff:87:ec:e9:89:44: 86:d5:cf:96:ed:80:e5:7d:21:5a:f3:e6:85:59:c3:5e:fc:0e: d1:35:29:5a:31:42:96:3a:f8:ef:ae:d9:bb:9e:43:72:36:5b: e2:29:f2:0e:92:15:e7:91:87:31:00:3a:16:39:2a:92:98:29: 04:1b:ad:a2:db:fb:96:d4:97:eb:a8:20:65:a2:59:2a:c7:88: 21:67:ca:90:e5:5d:84:61:15:9c:c7:a7:88:61:85:31:7c:40: 23:6d:80:42 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI4QjlCQkNGOEI5MDk1 QUZEMzA3QzhCMjJFRUU5MTJBOEVDQTgxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3f/zFqhH8/tCurnXfievi/WwtF9EmxiposLUR0de9c+R/PLSS wv9TULifxOrezZoTORF7wvTh+5fUzQAyWOgw3o51xrpLHF/dqzFlGNiH6+RpEVB8 bZWoGZbFrB05VS3PwqwhS3g3aI4PqjjMbzsNlHOmmiEf/MYgjf77tttFNaBdYpHv HE1HijAv7x5l/LF70lxYreKO+1V9LuxdnmfDnDTKCfZRUU89SC+XwAWekvFzaMkr 1TwNDb5ecOt95ojTXXyTaIjc2GENJkThYfAXitTLufr+Xt6F4RqiFn3dfSTRhlqS NhHj93s+TdnzK3ghiI6+hnbm9DL156ukfAYbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUKLm7z4uQla/TB8iyLu6RKo7KgRkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0tMbTd6NHVRbGFfVEI4 aXlMdTZSS283S2dSay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SUwDQYJKoZIhvcNAQELBQADggEBAFdalfyhtFURo9Pnr2WHLt/Vc9F8uZTq NW7in0y635JunOjmsewVvfKNgkVuutKSQZLeUhHZXz0uFeDaRyvbvADWnZ1A3+s/ BnvB2t1CvLd1KnTGUVUOi7saAD/Rg5LfIczycDbY3+UWF2SD7aWYXsp9oVOrx83x NVQZu0TlDRXOPrDD6qB/Td7q77FhoaykX+IZcS2ZUooDHR2+Qv+H7OmJRIbVz5bt gOV9IVrz5oVZw178DtE1KVoxQpY6+O+u2bueQ3I2W+Ip8g6SFeeRhzEAOhY5KpKY KQQbraLb+5bUl+uoIGWiWSrHiCFnypDlXYRhFZzHp4hhhTF8QCNtgEI= -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:50 2025 by rpki-client