$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/jCHcBwiMsMGruoboPN9JaUb2F-Y.roa File: jCHcBwiMsMGruoboPN9JaUb2F-Y.roa (raw, json) Hash identifier: XfghknMM+d103KxLh/UyfORTGdhGoDklFKUqYNOYLXQ= Subject key identifier: 8C:21:DC:07:08:8C:B0:C1:AB:BA:86:E8:3C:DF:49:69:46:F6:17:E6 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 17FD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jCHcBwiMsMGruoboPN9JaUb2F-Y.roa Signing time: Fri 17 Jan 2025 01:24:24 +0000 ROA not before: Fri 17 Jan 2025 01:24:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6141 (0x17fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8C21DC07088CB0C1ABBA86E83CDF496946F617E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:82:02:22:1c:83:45:6d:b3:db:c6:b4:4a: b6:d7:a3:2c:73:85:15:a8:ae:8a:ed:7f:a1:9c:a7: 6a:a1:c2:91:c2:35:ed:12:6f:18:24:c7:8b:48:1d: 0f:13:d1:22:ad:4d:c5:f8:3a:bb:0e:db:d9:c2:a3: e4:ac:ac:ff:d8:5a:6d:68:a7:b6:0f:ca:66:2b:11: 4a:52:08:96:a0:fc:cc:b1:00:fc:65:4b:27:a9:7f: 3f:ed:36:08:44:6d:d9:0f:67:7a:75:d1:5a:f9:53: 89:5e:8c:de:c6:82:c9:71:3b:ca:95:15:ea:e2:2d: ca:66:19:72:e0:85:89:7c:f1:80:56:f8:ec:b3:9d: 48:c1:d9:89:35:c3:3b:3a:45:5b:fc:e5:46:42:0a: 35:13:96:27:b9:be:4a:1c:51:73:56:35:73:91:d0: 12:70:4f:76:8e:ab:34:55:65:10:27:88:30:5e:ab: 04:fd:13:f0:a1:a0:ed:ae:95:3c:5f:49:8d:ea:fe: ce:02:87:ac:da:db:32:43:60:bd:d9:77:e2:5c:e3: 5b:cb:69:97:31:d3:82:ca:0f:cf:be:54:d2:c9:9b: 50:32:d5:76:b4:7a:f5:21:93:21:20:e3:85:8b:cf: b1:08:1f:68:ab:6e:85:4f:dc:05:b8:4e:22:18:d2: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:21:DC:07:08:8C:B0:C1:AB:BA:86:E8:3C:DF:49:69:46:F6:17:E6 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jCHcBwiMsMGruoboPN9JaUb2F-Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.26.0/24 Signature Algorithm: sha256WithRSAEncryption 08:fc:b3:68:25:66:7b:db:00:b1:29:db:f0:4d:f1:f1:da:54: 0e:48:cf:02:81:a8:ec:19:ab:41:d2:65:72:40:77:1e:e4:cb: 2d:73:6c:bf:c9:88:63:f6:fc:bd:30:a5:94:da:5c:15:9c:ff: ae:80:7c:8d:c4:03:ae:4b:1d:26:55:ac:57:d0:b6:96:1a:d7: 84:78:9f:a0:c9:0f:01:13:78:2e:67:9b:ef:52:59:95:a2:7c: f3:8c:13:cc:c1:b1:a9:45:ed:8e:93:01:39:91:65:1b:d3:20: e0:24:3f:9a:ed:93:0a:db:bd:e5:64:7b:e1:97:76:5a:57:4b: ad:a4:27:5d:73:a3:de:d2:fa:dc:ca:e1:2d:83:99:a9:8b:e8: 15:92:2e:6b:ae:ae:06:b9:e1:df:e5:39:64:c6:c8:bb:b4:4d: c9:d5:a6:ef:fd:81:98:5d:80:56:cc:d0:c9:d4:6c:d6:fa:9b: 2a:eb:cc:ab:90:82:a1:ec:4f:19:70:a8:b1:aa:e7:75:cf:9d: d9:21:4a:21:bf:d6:8c:a7:76:3c:7b:69:6e:88:03:e4:e0:c1: 55:8c:44:62:81:b4:c0:62:f2:69:c4:dd:f0:c4:d1:6d:bf:88: 36:49:32:34:bf:f8:e4:c0:77:8a:0f:78:66:0d:e9:5a:9d:93: cc:b6:8e:3d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhDMjFEQzA3MDg4Q0Iw QzFBQkJBODZFODNDREY0OTY5NDZGNjE3RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeSoICIhyDRW2z28a0SrbXoyxzhRWorortf6Gcp2qhwpHCNe0S bxgkx4tIHQ8T0SKtTcX4OrsO29nCo+SsrP/YWm1op7YPymYrEUpSCJag/MyxAPxl Syepfz/tNghEbdkPZ3p10Vr5U4lejN7GgslxO8qVFeriLcpmGXLghYl88YBW+Oyz nUjB2Yk1wzs6RVv85UZCCjUTlie5vkocUXNWNXOR0BJwT3aOqzRVZRAniDBeqwT9 E/ChoO2ulTxfSY3q/s4Ch6za2zJDYL3Zd+Jc41vLaZcx04LKD8++VNLJm1Ay1Xa0 evUhkyEg44WLz7EIH2irboVP3AW4TiIY0lVNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUjCHcBwiMsMGruoboPN9JaUb2F+YwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2pDSGNCd2lNc01HcnVv Ym9QTjlKYVViMkYtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3RowDQYJKoZIhvcNAQELBQADggEBAAj8s2glZnvbALEp2/BN8fHaVA5IzwKB qOwZq0HSZXJAdx7kyy1zbL/JiGP2/L0wpZTaXBWc/66AfI3EA65LHSZVrFfQtpYa 14R4n6DJDwETeC5nm+9SWZWifPOME8zBsalF7Y6TATmRZRvTIOAkP5rtkwrbveVk e+GXdlpXS62kJ11zo97S+tzK4S2DmamL6BWSLmuurga54d/lOWTGyLu0TcnVpu/9 gZhdgFbM0MnUbNb6myrrzKuQgqHsTxlwqLGq53XPndkhSiG/1oyndjx7aW6IA+Tg wVWMRGKBtMBi8mnE3fDE0W2/iDZJMjS/+OTAd4oPeGYN6Vqdk8y2jj0= -----END CERTIFICATE-----Generated at Fri Apr 4 18:39:13 2025 by rpki-client