$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/i1eM9nIMnEu8j78ugJO7grwQftQ.roa File: i1eM9nIMnEu8j78ugJO7grwQftQ.roa (raw, json) Hash identifier: Ksl36pzHmsakbN8JZft0MVtoWA5U72R+c1WnNe3n2Rs= Subject key identifier: 8B:57:8C:F6:72:0C:9C:4B:BC:8F:BF:2E:80:93:BB:82:BC:10:7E:D4 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1858 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/i1eM9nIMnEu8j78ugJO7grwQftQ.roa Signing time: Fri 17 Jan 2025 01:24:57 +0000 ROA not before: Fri 17 Jan 2025 01:24:57 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4812 IP address blocks: 103.24.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6232 (0x1858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:57 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8B578CF6720C9C4BBC8FBF2E8093BB82BC107ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:e7:7e:e6:8e:b4:87:ac:f3:e2:e1:ab:0a: ec:40:87:6d:83:e4:46:d4:0c:d5:e3:0d:cc:d1:d7: 0b:87:ee:06:a0:68:46:39:f3:33:98:21:36:92:8d: 7c:96:fe:0f:c0:a2:f5:c4:71:c0:14:0a:f9:70:0f: 34:b5:be:ae:60:42:ec:bc:d6:cb:e3:d7:7a:e4:7f: 6f:08:a4:5f:7a:18:d4:bf:d1:c5:42:0e:4d:4e:a4: f2:92:cb:7e:37:0e:14:31:0c:17:13:ed:ca:dc:f7: 76:d0:f6:60:51:8d:4e:3f:8f:9d:4e:8a:ed:cf:39: 26:e2:21:1d:b6:8e:20:51:1b:37:01:9a:85:0f:97: 10:3e:bc:b6:a3:9c:5e:0d:70:b4:46:81:a5:52:1e: a5:ff:4e:99:2c:b8:ab:20:a5:41:d5:30:f9:d6:9e: 24:7f:6b:53:63:d6:2c:e2:b3:f6:c7:f7:f8:27:51: 8a:55:06:57:39:3d:87:ef:1e:48:41:3e:5c:92:fc: 8a:b7:54:a0:d4:fc:0e:63:11:d7:c9:e6:de:0f:c8: 7f:ff:10:86:97:79:d2:23:14:bf:ca:de:45:f2:96: 41:fb:91:f0:e7:5e:f1:5a:4f:2d:a6:e6:b6:43:6f: 7d:06:eb:ad:4d:b6:bf:83:c8:22:8d:f6:b9:d9:da: f8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:57:8C:F6:72:0C:9C:4B:BC:8F:BF:2E:80:93:BB:82:BC:10:7E:D4 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/i1eM9nIMnEu8j78ugJO7grwQftQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.116.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:a3:66:4c:b9:6e:0d:5a:f0:cf:77:eb:47:93:e3:70:b6:4a: df:4b:d9:aa:c9:f3:e6:b7:33:a3:1a:07:f2:40:d5:5b:11:1d: 89:4e:ff:18:4b:98:3a:1c:52:01:2d:d0:06:6a:68:8d:6d:66: de:a5:f8:0c:00:da:41:77:39:f4:c7:0c:a3:38:ee:d8:ec:04: 34:af:43:91:d7:78:a8:ca:10:7f:6e:45:7f:91:76:9b:24:d6: 44:e4:e0:35:2a:b0:0c:8f:de:14:14:72:f8:ad:a5:af:02:c8: 4a:8f:a9:61:56:4a:cf:7c:ae:07:29:e3:8d:6c:31:71:8f:aa: d2:24:30:a6:79:41:8c:0b:97:97:34:06:1f:0b:59:e5:c0:bd: 8a:40:5f:b2:8a:82:89:78:52:30:c9:3c:e4:9b:b4:f5:38:52: 03:91:2c:7b:35:6a:2d:76:e5:6b:52:1f:cb:b2:ea:77:11:74: 49:71:6d:e2:52:5c:f4:94:27:fe:4b:b9:dc:16:ed:e2:38:51: ea:49:b6:e8:56:52:19:fb:2d:bc:60:95:ea:8e:0f:bf:0a:24: e6:b3:d0:f4:85:73:c4:14:1d:e9:3c:bb:56:41:db:1c:c2:23: 1d:ed:be:cb:3c:b2:de:fa:b5:7c:36:6d:5f:29:0b:2d:04:da: a8:ac:98:c3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhCNTc4Q0Y2NzIwQzlD NEJCQzhGQkYyRTgwOTNCQjgyQkMxMDdFRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOeed+5o60h6zz4uGrCuxAh22D5EbUDNXjDczR1wuH7gagaEY5 8zOYITaSjXyW/g/AovXEccAUCvlwDzS1vq5gQuy81svj13rkf28IpF96GNS/0cVC Dk1OpPKSy343DhQxDBcT7crc93bQ9mBRjU4/j51Oiu3POSbiIR22jiBRGzcBmoUP lxA+vLajnF4NcLRGgaVSHqX/TpksuKsgpUHVMPnWniR/a1Nj1izis/bH9/gnUYpV Blc5PYfvHkhBPlyS/Iq3VKDU/A5jEdfJ5t4PyH//EIaXedIjFL/K3kXylkH7kfDn XvFaTy2m5rZDb30G661Ntr+DyCKN9rnZ2vgBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUi1eM9nIMnEu8j78ugJO7grwQftQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2kxZU05bklNbkV1OGo3 OHVnSk83Z3J3UWZ0US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnGHQwDQYJKoZIhvcNAQELBQADggEBAEyjZky5bg1a8M9360eT43C2St9L2arJ 8+a3M6MaB/JA1VsRHYlO/xhLmDocUgEt0AZqaI1tZt6l+AwA2kF3OfTHDKM47tjs BDSvQ5HXeKjKEH9uRX+Rdpsk1kTk4DUqsAyP3hQUcvitpa8CyEqPqWFWSs98rgcp 441sMXGPqtIkMKZ5QYwLl5c0Bh8LWeXAvYpAX7KKgol4UjDJPOSbtPU4UgORLHs1 ai125WtSH8uy6ncRdElxbeJSXPSUJ/5LudwW7eI4UepJtuhWUhn7LbxgleqOD78K JOaz0PSFc8QUHek8u1ZB2xzCIx3tvss8st76tXw2bV8pCy0E2qismMM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:38 2025 by rpki-client