$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/gBqv6HF5MHStuwWSFyxAoRXnVDE.roa File: gBqv6HF5MHStuwWSFyxAoRXnVDE.roa (raw, json) Hash identifier: M2Q84g1lMDxGpeV2JilSiyxZIxwhxx8xDEnRj9ICQPU= Subject key identifier: 80:1A:AF:E8:71:79:30:74:AD:BB:05:92:17:2C:40:A1:15:E7:54:31 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/gBqv6HF5MHStuwWSFyxAoRXnVDE.roa Signing time: Fri 17 Jan 2025 01:25:20 +0000 ROA not before: Fri 17 Jan 2025 01:25:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 103.24.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6306 (0x18a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=801AAFE871793074ADBB0592172C40A115E75431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:39:65:fa:7a:78:6a:ec:8e:43:63:0b:cd: 84:43:fa:a9:72:7e:3b:87:64:65:37:29:dc:db:fa: 8a:4f:13:33:19:59:3c:5d:1c:d6:88:a7:5f:5d:ae: e7:47:6b:12:69:fe:b2:b0:f2:84:b0:b5:f7:b4:01: 61:f8:56:9d:aa:4d:a6:f3:b3:3a:5f:36:92:68:c0: 8d:62:a1:ad:3c:bb:8e:6c:d0:f5:32:91:40:55:68: 65:a5:63:a2:b4:c6:8c:52:41:d8:40:7a:69:38:de: 4f:ad:92:6f:1a:4f:84:c6:c7:4f:af:b7:b5:ce:07: de:50:42:76:b5:36:73:97:e4:d3:b1:f5:fd:05:d2: 42:30:2b:17:f0:54:2c:7e:30:ad:2f:f3:8e:62:b8: 97:27:a3:fb:a0:8a:a9:e0:66:5f:e8:47:b4:55:9e: 71:d2:c9:c8:24:0d:79:c4:df:fa:62:51:5b:ae:05: 5c:2e:cb:59:61:42:fe:58:54:8a:1b:74:d3:b8:32: 80:25:90:7d:08:87:55:6e:b9:43:04:35:45:6a:aa: 94:1e:44:16:a8:11:20:4f:a1:3c:18:0e:70:5d:54: df:0c:38:bf:b9:00:95:8d:58:83:49:a9:4e:d1:09: 50:b4:31:3f:07:7e:e7:a5:96:0a:2d:95:1a:50:df: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1A:AF:E8:71:79:30:74:AD:BB:05:92:17:2C:40:A1:15:E7:54:31 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/gBqv6HF5MHStuwWSFyxAoRXnVDE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.117.0/24 Signature Algorithm: sha256WithRSAEncryption 30:2c:40:0e:33:f0:6d:80:52:bc:df:7d:6e:6a:7e:81:f7:2f: e6:b0:a9:8a:a1:4b:84:07:10:e6:58:8c:e2:43:27:37:b4:35: 1d:42:d6:e4:d2:73:64:cb:03:b3:b3:e0:20:10:97:aa:2e:31: c4:45:1b:97:a7:53:3c:bf:1a:aa:bc:b9:07:ea:ce:a7:d6:93: ae:f2:59:c9:2e:d3:48:86:54:ea:e1:c2:b9:bb:4a:b8:0f:ab: 9f:72:c8:cb:fa:29:ca:60:ad:b4:70:9c:69:0b:fd:24:cf:6f: 93:81:04:eb:d6:21:59:07:fd:12:8d:97:56:fa:a2:89:19:12: 14:b6:f1:13:46:9d:23:ac:79:d3:75:0c:23:ea:64:3b:f2:f4: f1:87:59:5b:a0:fb:e5:0a:f0:bc:61:c8:83:53:ea:63:00:20: 03:f2:b4:05:18:aa:cd:36:67:38:ba:03:b3:97:ff:e8:7e:bd: 4a:98:83:0e:b2:54:96:f2:d4:2f:46:69:c3:16:b2:02:b4:44: d1:e0:cb:24:6b:c0:6c:b4:a8:d2:31:f2:74:a7:76:72:9d:fe: 23:52:aa:26:df:22:e6:6d:1d:76:ef:b4:82:1e:a9:65:f3:54: 4d:f6:92:44:4f:b0:de:87:3d:75:63:13:cc:e2:39:c7:ad:ee: 9d:42:5a:68 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDgwMUFBRkU4NzE3OTMw NzRBREJCMDU5MjE3MkM0MEExMTVFNzU0MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFVTll+np4auyOQ2MLzYRD+qlyfjuHZGU3Kdzb+opPEzMZWTxd HNaIp19drudHaxJp/rKw8oSwtfe0AWH4Vp2qTabzszpfNpJowI1ioa08u45s0PUy kUBVaGWlY6K0xoxSQdhAemk43k+tkm8aT4TGx0+vt7XOB95QQna1NnOX5NOx9f0F 0kIwKxfwVCx+MK0v845iuJcno/ugiqngZl/oR7RVnnHSycgkDXnE3/piUVuuBVwu y1lhQv5YVIobdNO4MoAlkH0Ih1VuuUMENUVqqpQeRBaoESBPoTwYDnBdVN8MOL+5 AJWNWINJqU7RCVC0MT8HfuellgotlRpQ32O7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUgBqv6HF5MHStuwWSFyxAoRXnVDEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2dCcXY2SEY1TUhTdHV3 V1NGeXhBb1JYblZERS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnGHUwDQYJKoZIhvcNAQELBQADggEBADAsQA4z8G2AUrzffW5qfoH3L+awqYqh S4QHEOZYjOJDJze0NR1C1uTSc2TLA7Oz4CAQl6ouMcRFG5enUzy/Gqq8uQfqzqfW k67yWcku00iGVOrhwrm7SrgPq59yyMv6KcpgrbRwnGkL/STPb5OBBOvWIVkH/RKN l1b6ookZEhS28RNGnSOsedN1DCPqZDvy9PGHWVug++UK8LxhyINT6mMAIAPytAUY qs02Zzi6A7OX/+h+vUqYgw6yVJby1C9GacMWsgK0RNHgyyRrwGy0qNIx8nSndnKd /iNSqibfIuZtHXbvtIIeqWXzVE32kkRPsN6HPXVjE8ziOcet7p1CWmg= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:32 2025 by rpki-client