$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/jslkFqpMPPAP3cSK2RwADcGyq0Q.roa File: jslkFqpMPPAP3cSK2RwADcGyq0Q.roa (raw, json) Hash identifier: 74CH6adfQFThY0ATVAgTJmWTnDgR+EgOV2HNpV5BEag= Subject key identifier: 8E:C9:64:16:AA:4C:3C:F0:0F:DD:C4:8A:D9:1C:00:0D:C1:B2:AB:44 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A7 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jslkFqpMPPAP3cSK2RwADcGyq0Q.roa Signing time: Fri 17 Jan 2025 01:25:22 +0000 ROA not before: Fri 17 Jan 2025 01:25:22 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 103.221.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6311 (0x18a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:22 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8EC96416AA4C3CF00FDDC48AD91C000DC1B2AB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:c5:e7:8d:04:ce:b4:e4:c6:54:d2:4f:1a: 1c:40:ef:a1:63:fa:af:3d:54:0b:9a:69:bf:21:2e: 09:84:7b:f9:e1:8d:87:7c:60:13:57:41:53:50:a5: 8c:f0:e8:0d:bb:ff:03:c3:e4:df:71:23:9d:dd:8c: 11:aa:1b:0f:9a:71:a2:d1:bd:19:f7:bf:e9:2f:ce: b0:48:eb:c9:b4:e9:28:c2:1f:79:a6:1c:e8:cd:55: 90:9b:8c:56:09:bd:3a:14:33:cc:6d:f5:e0:fb:ae: f5:b2:58:55:d0:f9:1f:6f:78:bb:10:22:83:3a:f0: 80:56:12:2d:21:d5:95:e0:03:30:a6:ea:11:22:10: af:5b:d2:6e:e2:f9:3e:c9:d2:a9:02:74:90:6c:3a: 9f:65:86:16:41:f5:2b:db:65:fd:ac:94:69:7f:37: 13:d9:63:f6:a9:b6:c4:6a:7d:10:90:66:31:96:69: 61:40:2b:7b:7b:42:3f:91:f0:c2:96:48:7e:ef:50: d8:94:84:78:d9:53:10:cf:a7:5f:21:5a:8e:ac:88: b2:20:53:30:a1:60:78:42:06:e1:80:34:72:37:e9: 31:a5:c7:a4:f0:08:94:cb:36:b2:b7:c8:97:ed:ea: d0:e4:35:2e:74:f1:33:3e:fe:c6:2c:b7:81:75:a2: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C9:64:16:AA:4C:3C:F0:0F:DD:C4:8A:D9:1C:00:0D:C1:B2:AB:44 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jslkFqpMPPAP3cSK2RwADcGyq0Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption 57:86:65:da:6c:05:16:e6:a9:2f:6e:4a:83:cb:ed:cb:74:07: 75:dc:b4:11:33:93:d5:96:08:3c:45:f3:24:d7:72:70:19:a2: be:8a:6f:47:f8:09:5b:82:08:07:9a:4c:31:01:12:62:cf:da: dd:c5:a4:33:86:28:39:de:e9:a8:16:d1:0a:06:5d:4e:cc:a1: 50:04:4e:c1:99:83:fd:f5:5e:be:0e:e8:fc:27:45:78:b3:1e: 4d:bf:aa:1f:73:91:83:2f:a7:ec:6e:28:02:e3:9e:cf:db:5c: 90:53:9c:6a:ae:0f:27:8f:81:25:af:ed:ad:10:9d:c7:81:6f: 9e:ea:0f:b8:2c:ac:e7:de:d4:06:a8:4e:97:21:e1:62:b3:83: d9:7c:93:0a:75:2f:3a:88:11:32:cc:55:d5:07:ad:45:85:78: be:86:ca:dc:e7:45:f4:cf:63:4e:8d:ed:60:b0:d2:ad:83:28: 37:a2:8a:31:7a:32:73:ec:f1:4b:10:b1:96:13:3c:00:f8:4a: 55:e0:58:3c:03:30:89:11:88:09:af:b8:cd:34:e3:7a:97:6e: 34:51:4c:e4:31:75:c1:b9:68:a1:b8:35:7a:89:8d:60:ea:34: c9:d5:22:da:bc:b4:ef:08:0a:78:e4:76:e8:fa:18:e3:ce:3a: ab:c4:e3:36 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhFQzk2NDE2QUE0QzND RjAwRkREQzQ4QUQ5MUMwMDBEQzFCMkFCNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJFMXnjQTOtOTGVNJPGhxA76Fj+q89VAuaab8hLgmEe/nhjYd8 YBNXQVNQpYzw6A27/wPD5N9xI53djBGqGw+acaLRvRn3v+kvzrBI68m06SjCH3mm HOjNVZCbjFYJvToUM8xt9eD7rvWyWFXQ+R9veLsQIoM68IBWEi0h1ZXgAzCm6hEi EK9b0m7i+T7J0qkCdJBsOp9lhhZB9SvbZf2slGl/NxPZY/aptsRqfRCQZjGWaWFA K3t7Qj+R8MKWSH7vUNiUhHjZUxDPp18hWo6siLIgUzChYHhCBuGANHI36TGlx6Tw CJTLNrK3yJft6tDkNS508TM+/sYst4F1osAnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUjslkFqpMPPAP3cSK2RwADcGyq0QwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2pzbGtGcXBNUFBBUDNj U0syUndBRGNHeXEwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3VwwDQYJKoZIhvcNAQELBQADggEBAFeGZdpsBRbmqS9uSoPL7ct0B3XctBEz k9WWCDxF8yTXcnAZor6Kb0f4CVuCCAeaTDEBEmLP2t3FpDOGKDne6agW0QoGXU7M oVAETsGZg/31Xr4O6PwnRXizHk2/qh9zkYMvp+xuKALjns/bXJBTnGquDyePgSWv 7a0QnceBb57qD7gsrOfe1AaoTpch4WKzg9l8kwp1LzqIETLMVdUHrUWFeL6Gytzn RfTPY06N7WCw0q2DKDeiijF6MnPs8UsQsZYTPAD4SlXgWDwDMIkRiAmvuM0043qX bjRRTOQxdcG5aKG4NXqJjWDqNMnVItq8tO8ICnjkduj6GOPOOqvE4zY= -----END CERTIFICATE-----Generated at Fri Apr 4 18:38:50 2025 by rpki-client