$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/NKCpOHY0M5P9RsQdVCKCq5dzxcU.roa File: NKCpOHY0M5P9RsQdVCKCq5dzxcU.roa (raw, json) Hash identifier: Ph/CT4637FBcWZLK47GyRDrBS2hh4dPA3sqm6BCdpM8= Subject key identifier: 34:A0:A9:38:76:34:33:93:FD:46:C4:1D:54:22:82:AB:97:73:C5:C5 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NKCpOHY0M5P9RsQdVCKCq5dzxcU.roa Signing time: Fri 17 Jan 2025 01:25:20 +0000 ROA not before: Fri 17 Jan 2025 01:25:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 103.221.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6308 (0x18a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=34A0A93876343393FD46C41D542282AB9773C5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:cf:97:f7:cd:99:54:21:0c:57:e3:20:cb: db:8b:88:9a:43:59:17:02:01:15:51:2d:1e:b5:c5: 4c:05:e7:72:94:30:43:24:73:0c:9c:64:f5:ca:87: 31:f1:8c:88:ee:46:92:3e:0c:5a:a7:63:a0:ac:9a: c8:88:9e:8f:14:e8:16:b7:20:9a:1a:d5:f2:42:ce: 59:af:94:b0:d0:e2:22:df:8c:35:67:ee:86:97:44: 97:03:76:b8:3d:b1:74:e1:46:72:db:0e:52:3e:3b: 00:11:76:15:53:54:e7:e8:5a:61:86:13:96:f5:5c: 3b:0d:76:fb:90:0a:ea:16:98:24:25:67:9d:6a:26: 3c:dd:54:68:9f:1f:2a:e7:0c:d5:00:a3:d1:76:89: 70:2a:ed:c4:dc:de:f8:be:25:fb:0e:97:c2:15:a9: 58:f4:64:2f:5f:30:3b:8b:f1:a6:a1:4b:0c:80:1c: 87:be:b7:9d:6c:0b:8b:7b:bd:b7:48:3c:c2:bf:92: f3:84:41:2e:ca:de:88:7a:4a:28:70:30:83:e9:26: 09:93:8d:25:f9:83:47:2d:4d:b0:4f:c9:5f:05:37: 8e:90:c8:01:2c:cd:73:4c:54:86:e7:44:e8:85:8e: cb:49:02:af:fa:2d:07:11:a2:75:75:45:38:ed:40: ae:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A0:A9:38:76:34:33:93:FD:46:C4:1D:54:22:82:AB:97:73:C5:C5 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NKCpOHY0M5P9RsQdVCKCq5dzxcU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.8.0/22 Signature Algorithm: sha256WithRSAEncryption 35:ff:dc:b5:b5:95:fb:b2:c8:99:3b:20:c3:74:5a:37:ca:aa: f5:fd:31:89:8d:f9:2a:2a:d7:f4:a7:2d:0b:e9:3f:2b:ea:1b: e1:b7:fb:81:2e:bc:23:53:4a:31:d9:e1:0e:64:2a:88:9b:14: 01:9f:5b:59:db:df:18:38:bc:3e:ea:53:47:d5:b6:fd:18:f3: bb:f2:54:9c:26:0a:26:bb:62:63:5f:5e:ca:77:47:c9:cd:25: c7:d5:ff:3b:f9:4e:c2:ba:b5:3f:b9:94:f6:fd:35:6f:8e:8e: f5:7e:fa:63:b6:84:69:19:b7:05:74:f0:2b:09:8a:b0:55:fd: 2f:41:7b:ba:1e:76:24:a4:31:93:e0:43:28:51:03:41:6f:68: 75:91:0d:38:1f:54:62:e4:36:25:ec:6a:f5:c6:48:de:83:4b: bf:31:20:8a:24:45:4a:fd:73:6e:cd:9f:07:dd:2a:c6:c0:6b: 09:d6:59:8d:2a:d8:ea:89:82:94:72:43:3d:ed:ad:6f:a3:b0: ad:17:85:54:2c:7e:59:9a:e6:3a:d8:3d:f1:8c:20:14:7e:15: ca:bc:f4:fd:71:2e:87:6f:1f:68:4e:f2:46:9b:7e:d0:57:4c: 1a:3b:27:bd:9b:59:e6:1f:dd:ee:1e:0e:ee:37:b9:cc:e5:24: df:a5:c3:5c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM0QTBBOTM4NzYzNDMz OTNGRDQ2QzQxRDU0MjI4MkFCOTc3M0M1QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChqM+X982ZVCEMV+Mgy9uLiJpDWRcCARVRLR61xUwF53KUMEMk cwycZPXKhzHxjIjuRpI+DFqnY6CsmsiIno8U6Ba3IJoa1fJCzlmvlLDQ4iLfjDVn 7oaXRJcDdrg9sXThRnLbDlI+OwARdhVTVOfoWmGGE5b1XDsNdvuQCuoWmCQlZ51q JjzdVGifHyrnDNUAo9F2iXAq7cTc3vi+JfsOl8IVqVj0ZC9fMDuL8aahSwyAHIe+ t51sC4t7vbdIPMK/kvOEQS7K3oh6SihwMIPpJgmTjSX5g0ctTbBPyV8FN46QyAEs zXNMVIbnROiFjstJAq/6LQcRonV1RTjtQK5NAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUNKCpOHY0M5P9RsQdVCKCq5dzxcUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L05LQ3BPSFkwTTVQOVJz UWRWQ0tDcTVkenhjVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3QgwDQYJKoZIhvcNAQELBQADggEBADX/3LW1lfuyyJk7IMN0WjfKqvX9MYmN +Soq1/SnLQvpPyvqG+G3+4EuvCNTSjHZ4Q5kKoibFAGfW1nb3xg4vD7qU0fVtv0Y 87vyVJwmCia7YmNfXsp3R8nNJcfV/zv5TsK6tT+5lPb9NW+OjvV++mO2hGkZtwV0 8CsJirBV/S9Be7oediSkMZPgQyhRA0FvaHWRDTgfVGLkNiXsavXGSN6DS78xIIok RUr9c27NnwfdKsbAawnWWY0q2OqJgpRyQz3trW+jsK0XhVQsflma5jrYPfGMIBR+ Fcq89P1xLodvH2hO8kabftBXTBo7J72bWeYf3e4eDu43uczlJN+lw1w= -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:36 2025 by rpki-client