$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/aE5ia5eB22B6rCYE-22kUUpntDc.roa File: aE5ia5eB22B6rCYE-22kUUpntDc.roa (raw, json) Hash identifier: HVUqY/JomBRLgqWsq9TWEELf6eSpT06R/ojNcbaPVtg= Subject key identifier: 68:4E:62:6B:97:81:DB:60:7A:AC:26:04:FB:6D:A4:51:4A:67:B4:37 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1852 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aE5ia5eB22B6rCYE-22kUUpntDc.roa Signing time: Fri 17 Jan 2025 01:24:54 +0000 ROA not before: Fri 17 Jan 2025 01:24:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6226 (0x1852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=684E626B9781DB607AAC2604FB6DA4514A67B437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:3e:4c:0f:ff:a2:19:3e:f3:19:42:50:e8: 6d:74:1f:c1:76:6a:07:0d:c3:30:ae:65:76:d5:2b: 54:13:c3:59:f7:01:72:ff:57:de:4a:10:59:f2:59: ca:0d:95:cc:19:16:5e:6f:3e:0d:6e:af:67:69:6a: 7a:90:af:14:6d:a2:41:59:4b:d9:b4:8d:9a:30:8d: 7b:b7:79:21:34:d6:0b:22:a2:62:9b:5a:c6:d2:f7: 05:9c:28:1f:51:ee:5a:e4:84:2f:3c:cc:5a:c6:c6: 0c:99:32:d4:7f:c8:f6:13:7d:ba:fe:cb:2d:9f:75: b1:94:dd:c3:be:fa:78:41:be:50:b8:69:7c:d1:5b: 5f:b8:b8:29:0b:6d:e9:92:85:05:1f:cc:84:6c:12: 15:bc:78:c3:41:30:7d:79:2a:33:0f:b3:aa:6e:7f: 76:42:e1:ae:6e:15:ff:41:9c:7e:23:09:ab:e3:cc: 76:c1:e8:3a:64:e8:f8:0d:81:2d:63:77:ee:a6:df: a5:63:2d:3b:b3:f5:b0:bc:2d:2b:4d:b1:a7:d6:a0: d0:7f:40:53:54:4d:ad:55:ee:d5:28:ca:4d:40:6d: b2:ea:64:9c:58:03:95:d4:65:ee:9e:fd:6c:3e:d3: 5f:48:ee:f3:00:79:94:30:1a:ec:15:32:4b:04:28: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4E:62:6B:97:81:DB:60:7A:AC:26:04:FB:6D:A4:51:4A:67:B4:37 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aE5ia5eB22B6rCYE-22kUUpntDc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.41.0/24 Signature Algorithm: sha256WithRSAEncryption d6:12:7e:8a:9e:ec:81:d9:58:82:dc:1d:c5:ab:88:48:f5:84: 7a:01:07:82:52:81:4a:57:d1:82:f6:44:53:4d:67:3c:3e:c9: 90:c7:10:76:e4:d1:ab:87:71:dd:14:2f:92:7f:ac:f9:ad:86: b3:2b:c1:31:fa:35:c5:c1:9e:df:5d:59:61:be:be:61:c7:23: 19:2c:9e:07:58:f1:40:43:d5:88:0a:4c:53:b5:58:31:6d:40: be:49:93:5d:48:3a:55:de:a6:49:08:d8:91:e3:92:6b:c6:8f: 64:88:85:b2:48:06:14:ca:b8:7d:da:7b:74:7b:91:d6:ca:74: 08:fd:9f:9c:c0:22:05:52:f2:6c:a9:87:69:74:57:4f:39:36: 80:74:de:3c:d7:60:e7:5a:0e:e3:cc:32:f0:e3:08:54:af:8d: 1c:c1:04:14:ad:b6:66:21:f7:c5:e8:18:95:d0:d2:8e:0e:04: c8:63:19:9c:4f:71:1d:07:ff:fb:fd:29:5a:f3:c8:d4:75:37: 1f:cb:00:0a:ef:48:51:2d:05:de:8f:3d:7b:49:3a:5a:09:ed: e4:c7:d2:eb:a7:42:8a:05:48:75:03:ea:52:66:c0:97:30:9d: ff:90:af:a1:aa:29:35:e9:5d:eb:d4:af:ee:1f:1c:ba:a5:f6: 9e:d3:f4:56 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY4NEU2MjZCOTc4MURC NjA3QUFDMjYwNEZCNkRBNDUxNEE2N0I0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz9z5MD/+iGT7zGUJQ6G10H8F2agcNwzCuZXbVK1QTw1n3AXL/ V95KEFnyWcoNlcwZFl5vPg1ur2dpanqQrxRtokFZS9m0jZowjXu3eSE01gsiomKb WsbS9wWcKB9R7lrkhC88zFrGxgyZMtR/yPYTfbr+yy2fdbGU3cO++nhBvlC4aXzR W1+4uCkLbemShQUfzIRsEhW8eMNBMH15KjMPs6puf3ZC4a5uFf9BnH4jCavjzHbB 6Dpk6PgNgS1jd+6m36VjLTuz9bC8LStNsafWoNB/QFNUTa1V7tUoyk1AbbLqZJxY A5XUZe6e/Ww+019I7vMAeZQwGuwVMksEKFnvAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUaE5ia5eB22B6rCYE+22kUUpntDcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FFNWlhNWVCMjJCNnJD WUUtMjJrVVVwbnREYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SkwDQYJKoZIhvcNAQELBQADggEBANYSfoqe7IHZWILcHcWriEj1hHoBB4JS gUpX0YL2RFNNZzw+yZDHEHbk0auHcd0UL5J/rPmthrMrwTH6NcXBnt9dWWG+vmHH IxksngdY8UBD1YgKTFO1WDFtQL5Jk11IOlXepkkI2JHjkmvGj2SIhbJIBhTKuH3a e3R7kdbKdAj9n5zAIgVS8myph2l0V085NoB03jzXYOdaDuPMMvDjCFSvjRzBBBSt tmYh98XoGJXQ0o4OBMhjGZxPcR0H//v9KVrzyNR1Nx/LAArvSFEtBd6PPXtJOloJ 7eTH0uunQooFSHUD6lJmwJcwnf+Qr6GqKTXpXevUr+4fHLql9p7T9FY= -----END CERTIFICATE-----Generated at Fri Apr 4 18:39:15 2025 by rpki-client