$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/PBcWatDyjvV0lbjudYqTz6HoX6M.roa File: PBcWatDyjvV0lbjudYqTz6HoX6M.roa (raw, json) Hash identifier: uguhnfOTaHzv8NLUhRkiGLKmgSxuSfHBU+uFGH5tx6E= Subject key identifier: 3C:17:16:6A:D0:F2:8E:F5:74:95:B8:EE:75:8A:93:CF:A1:E8:5F:A3 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18B1 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PBcWatDyjvV0lbjudYqTz6HoX6M.roa Signing time: Fri 17 Jan 2025 01:25:26 +0000 ROA not before: Fri 17 Jan 2025 01:25:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4812 IP address blocks: 103.5.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6321 (0x18b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:26 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3C17166AD0F28EF57495B8EE758A93CFA1E85FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:b8:2b:b7:17:19:49:38:f3:81:9b:c3:4e: 95:c8:ce:7b:c9:d5:8f:fe:16:da:74:ae:fe:90:12: 63:58:37:3e:09:f4:d5:29:dc:89:e8:33:6d:5f:e8: 9d:70:3c:fc:d5:c1:2b:d3:e8:e2:4b:e8:9b:03:68: ab:e2:ad:db:31:41:28:64:18:a6:72:c7:55:66:60: a5:61:7f:a4:a5:30:d0:42:b6:85:55:13:4c:88:47: a4:54:52:39:1b:9c:6b:7d:5a:0e:8c:df:26:00:47: 89:13:68:28:23:bf:3f:3c:52:97:39:1e:fe:b1:28: 70:13:24:d9:5a:23:8b:45:53:a1:59:30:78:30:f3: 60:d6:1b:ff:fc:42:11:f4:60:e6:e4:20:2f:f0:34: 1c:b5:66:f2:c8:17:38:ea:f8:9d:f3:bd:f1:1d:09: 6e:8f:82:99:b2:eb:ca:90:0a:74:74:a3:22:fd:09: 91:f5:76:68:48:43:39:f0:4b:05:91:34:c4:94:f8: 7f:bd:87:67:ca:bb:e2:4b:be:3f:b7:df:57:5f:c3: cd:7f:f7:4b:63:52:dc:58:be:53:b6:91:99:67:2f: 6b:78:ea:34:63:fd:85:b8:6d:3f:74:5a:3a:de:2c: d7:3c:e8:ae:49:d4:8e:6b:1f:f6:eb:8a:36:96:31: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:16:6A:D0:F2:8E:F5:74:95:B8:EE:75:8A:93:CF:A1:E8:5F:A3 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PBcWatDyjvV0lbjudYqTz6HoX6M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.192.0/22 Signature Algorithm: sha256WithRSAEncryption 76:ef:8a:28:df:18:2b:4b:c8:9e:08:7a:eb:70:8d:6e:e8:45: 42:1f:11:97:1f:87:99:31:2e:51:c8:00:96:55:72:28:44:fa: f9:64:7d:5f:6c:c2:f9:3c:28:56:d3:05:61:b0:53:c3:51:8c: e3:99:8c:9d:74:7f:61:0f:2d:8f:c1:56:91:60:dc:b4:97:6c: d6:85:33:62:51:ee:64:17:70:6e:e1:9a:5a:71:fb:89:86:53: b2:1a:b6:37:79:da:bf:47:ab:96:22:8c:f5:e5:de:2a:d6:d5: be:b3:02:e4:c6:d3:19:75:81:3e:04:00:3f:48:d0:44:66:15: 0a:9a:3c:3d:45:38:11:60:a0:72:1b:c4:75:cb:65:43:d9:f7: 2b:f1:75:39:e7:67:7d:07:f6:7a:b0:98:b5:a8:d3:67:37:d4: 7b:f0:6b:87:b4:d5:fd:10:db:3f:af:9e:2b:92:7f:00:78:de: 21:ea:eb:13:ef:af:43:05:d7:2a:29:3d:8a:8b:c3:de:a4:90: 77:14:1b:a0:84:75:e6:36:4e:ac:9d:78:dd:7c:30:1f:ee:a9: ec:68:0e:46:de:34:b8:9e:6d:73:d9:18:a5:3b:a8:41:1c:82: a4:fb:ac:90:ad:d7:9c:0a:6a:49:48:4c:5c:c7:31:77:ec:a7: 3e:d3:5e:e2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNDMTcxNjZBRDBGMjhF RjU3NDk1QjhFRTc1OEE5M0NGQTFFODVGQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNbbgrtxcZSTjzgZvDTpXIznvJ1Y/+Ftp0rv6QEmNYNz4J9NUp 3InoM21f6J1wPPzVwSvT6OJL6JsDaKvirdsxQShkGKZyx1VmYKVhf6SlMNBCtoVV E0yIR6RUUjkbnGt9Wg6M3yYAR4kTaCgjvz88Upc5Hv6xKHATJNlaI4tFU6FZMHgw 82DWG//8QhH0YObkIC/wNBy1ZvLIFzjq+J3zvfEdCW6Pgpmy68qQCnR0oyL9CZH1 dmhIQznwSwWRNMSU+H+9h2fKu+JLvj+331dfw81/90tjUtxYvlO2kZlnL2t46jRj /YW4bT90WjreLNc86K5J1I5rH/brijaWMXArAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUPBcWatDyjvV0lbjudYqTz6HoX6MwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1BCY1dhdER5anZWMGxi anVkWXFUejZIb1g2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBcAwDQYJKoZIhvcNAQELBQADggEBAHbviijfGCtLyJ4IeutwjW7oRUIfEZcf h5kxLlHIAJZVcihE+vlkfV9swvk8KFbTBWGwU8NRjOOZjJ10f2EPLY/BVpFg3LSX bNaFM2JR7mQXcG7hmlpx+4mGU7Iatjd52r9Hq5YijPXl3irW1b6zAuTG0xl1gT4E AD9I0ERmFQqaPD1FOBFgoHIbxHXLZUPZ9yvxdTnnZ30H9nqwmLWo02c31Hvwa4e0 1f0Q2z+vniuSfwB43iHq6xPvr0MF1yopPYqLw96kkHcUG6CEdeY2TqydeN18MB/u qexoDkbeNLiebXPZGKU7qEEcgqT7rJCt15wKaklITFzHMXfspz7TXuI= -----END CERTIFICATE-----Generated at Fri Apr 4 18:41:22 2025 by rpki-client