$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_o6Orm4XevzWXaC0FZGnWkUgos4.roa File: _o6Orm4XevzWXaC0FZGnWkUgos4.roa (raw, json) Hash identifier: q2MNVpwQEo3s3Depm5znu+exK5fkNspMGglWMTcxl/c= Subject key identifier: FE:8E:8E:AE:6E:17:7A:FC:D6:5D:A0:B4:15:91:A7:5A:45:20:A2:CE Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18CB Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_o6Orm4XevzWXaC0FZGnWkUgos4.roa Signing time: Fri 17 Jan 2025 01:25:35 +0000 ROA not before: Fri 17 Jan 2025 01:25:35 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 19:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6347 (0x18cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:35 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FE8E8EAE6E177AFCD65DA0B41591A75A4520A2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:79:4d:2e:83:7b:ce:0d:b8:25:88:07:18: 4b:ec:39:78:4a:6d:b1:4a:b4:63:21:03:ad:95:b8: 4a:2a:b8:2a:88:d4:1e:b5:fa:75:7b:34:5b:71:0b: 3d:5c:27:33:79:8d:5d:80:f3:af:80:13:66:01:b5: d4:67:9d:c3:3e:23:a3:83:a7:b5:ca:e4:ee:cb:14: 84:30:75:41:c7:ce:c0:e2:3c:74:44:76:3c:a5:9c: 72:b2:2a:01:35:6b:cf:86:ad:e3:40:b7:95:61:ce: 49:22:60:1c:0c:68:d4:53:ce:bc:32:cd:f4:fb:78: be:8e:c4:1a:a1:bd:60:ed:ac:70:b9:63:fa:77:df: ed:fb:88:1b:30:c8:c6:8c:1a:d0:5a:2f:34:e8:7b: ba:a6:8a:2d:b2:8c:b8:0f:eb:59:d1:ed:e5:fc:66: fa:13:ee:f4:ba:60:e0:32:28:60:7c:0c:57:a8:20: 78:07:9f:9c:c5:c3:4d:5c:b9:bb:0b:72:d5:2e:49: ce:37:9d:c2:b5:8a:dd:99:01:e6:08:3f:af:38:e9: 02:3f:09:49:87:ce:7f:59:cc:a1:d8:49:fe:ce:66: 49:b7:f6:9f:9c:8d:bc:63:b3:b5:6e:b0:86:55:44: 9f:83:d7:89:65:d3:e4:a8:ec:87:55:fd:41:ba:a0: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8E:8E:AE:6E:17:7A:FC:D6:5D:A0:B4:15:91:A7:5A:45:20:A2:CE X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_o6Orm4XevzWXaC0FZGnWkUgos4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.1.0/24 Signature Algorithm: sha256WithRSAEncryption cf:b3:98:fd:e0:3e:f8:01:d5:07:0b:ae:ff:11:28:44:88:36: 2c:72:9d:fe:04:a6:a1:ce:fe:c3:b7:c9:d4:4a:de:48:d8:85: 6a:9a:12:83:90:2e:e9:0d:6f:c3:81:29:70:5f:4e:99:2a:a0: 5c:e8:18:82:f5:9f:cb:b3:80:69:22:eb:dd:54:38:75:b0:85: 95:2a:e6:ae:e4:bc:4a:3c:d9:ed:59:dd:a8:99:14:a7:92:39: 65:7c:63:eb:36:38:9d:af:fb:49:ba:2c:a9:3d:8a:fb:1b:31: e2:e5:e6:7b:7e:64:2e:59:d4:bd:12:60:ef:ef:a8:2f:ce:d2: ec:31:05:12:3c:0d:d2:ee:68:00:5c:7f:d6:0b:17:ab:ec:5a: b8:08:32:10:0c:91:eb:df:e3:f8:31:3e:67:af:c8:fc:e4:25: 6b:cd:9b:a2:b1:a1:40:cd:68:7a:5d:bb:df:46:9b:47:e3:63: ee:06:4d:c4:3d:06:9d:81:a4:ed:4c:72:0e:24:3d:2c:80:7b: b9:a5:e3:4e:44:c3:9c:4e:10:a4:95:19:c0:b9:9b:e8:f4:9b: c2:0f:db:10:a7:14:b7:47:22:3a:c6:68:63:70:ca:e9:0b:13: 23:1a:a2:a1:77:1b:c1:fb:52:59:1a:26:b8:e8:03:17:3a:f1: 7b:1a:ee:37 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZFOEU4RUFFNkUxNzdB RkNENjVEQTBCNDE1OTFBNzVBNDUyMEEyQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq53lNLoN7zg24JYgHGEvsOXhKbbFKtGMhA62VuEoquCqI1B61 +nV7NFtxCz1cJzN5jV2A86+AE2YBtdRnncM+I6ODp7XK5O7LFIQwdUHHzsDiPHRE djylnHKyKgE1a8+GreNAt5VhzkkiYBwMaNRTzrwyzfT7eL6OxBqhvWDtrHC5Y/p3 3+37iBswyMaMGtBaLzToe7qmii2yjLgP61nR7eX8ZvoT7vS6YOAyKGB8DFeoIHgH n5zFw01cubsLctUuSc43ncK1it2ZAeYIP6846QI/CUmHzn9ZzKHYSf7OZkm39p+c jbxjs7VusIZVRJ+D14ll0+So7IdV/UG6oJ1XAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/o6Orm4XevzWXaC0FZGnWkUgos4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L19vNk9ybTRYZXZ6V1hh QzBGWkduV2tVZ29zNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QEwDQYJKoZIhvcNAQELBQADggEBAM+zmP3gPvgB1QcLrv8RKESINixynf4E pqHO/sO3ydRK3kjYhWqaEoOQLukNb8OBKXBfTpkqoFzoGIL1n8uzgGki691UOHWw hZUq5q7kvEo82e1Z3aiZFKeSOWV8Y+s2OJ2v+0m6LKk9ivsbMeLl5nt+ZC5Z1L0S YO/vqC/O0uwxBRI8DdLuaABcf9YLF6vsWrgIMhAMkevf4/gxPmevyPzkJWvNm6Kx oUDNaHpdu99Gm0fjY+4GTcQ9Bp2BpO1Mcg4kPSyAe7ml405Ew5xOEKSVGcC5m+j0 m8IP2xCnFLdHIjrGaGNwyukLEyMaoqF3G8H7UlkaJrjoAxc68Xsa7jc= -----END CERTIFICATE-----Generated at Mon Apr 14 18:41:59 2025 by rpki-client