$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/mcBWNNfKWHhWwSWLtTkDmokW2D8.roa File: mcBWNNfKWHhWwSWLtTkDmokW2D8.roa (raw, json) Hash identifier: CM6eAmKjdrX5e/tottUUjLLureTid6uRFwt94cm4j/M= Subject key identifier: 99:C0:56:34:D7:CA:58:78:56:C1:25:8B:B5:39:03:9A:89:16:D8:3F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18BD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mcBWNNfKWHhWwSWLtTkDmokW2D8.roa Signing time: Fri 17 Jan 2025 01:25:30 +0000 ROA not before: Fri 17 Jan 2025 01:25:30 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6333 (0x18bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:30 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=99C05634D7CA587856C1258BB539039A8916D83F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:ea:d7:62:07:5f:ea:74:4f:68:b1:0d:1f: 0d:32:89:1e:28:64:5a:98:4d:57:80:58:64:25:94: 07:72:0f:b0:37:05:96:66:67:6e:15:1d:46:5a:47: 0d:b3:4a:93:20:77:0f:16:6f:63:cf:c0:e9:8f:01: d3:ad:0b:b7:63:f7:c6:74:78:80:e9:cd:ce:a6:4b: cb:19:15:dc:15:d1:9c:87:d9:06:3d:d4:db:53:4c: a2:f1:ec:4b:27:71:bd:89:7a:cf:65:18:31:bb:00: ca:0a:c0:f5:f4:ac:e7:a2:d7:eb:14:79:1b:79:8a: fc:32:ef:c9:6d:23:0b:2e:59:58:d4:ed:6a:45:29: 39:cc:cf:c1:9c:98:f9:da:12:c4:46:6e:15:e2:a3: a7:80:6e:f0:f8:38:b2:33:65:6c:82:6d:ea:28:36: 94:f9:13:4d:f6:1e:ae:39:9b:a7:25:e9:d5:2c:cf: c1:ff:1e:83:cb:29:bc:6f:af:4e:48:39:f8:fd:cd: 00:1c:79:be:4c:35:8d:99:a9:40:13:eb:1c:d8:87: 59:87:33:39:a5:4f:67:ca:f3:25:73:3e:0e:77:25: 0d:ea:ac:bd:aa:3c:33:24:2a:4b:34:71:90:f0:c1: 53:a9:d8:f3:bf:2b:09:8b:b1:35:45:a9:c6:56:a2: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C0:56:34:D7:CA:58:78:56:C1:25:8B:B5:39:03:9A:89:16:D8:3F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mcBWNNfKWHhWwSWLtTkDmokW2D8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.8.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:99:f6:56:ec:50:9b:4e:b3:e3:4d:a7:7c:c3:7a:a5:a1:b2: aa:23:87:3c:55:a7:32:d9:7c:ae:12:cd:95:0e:6b:7a:ca:79: d0:29:21:ac:08:90:2b:5e:29:d0:12:cc:ae:de:c1:4f:bf:36: 81:88:4f:81:8f:76:51:b9:2b:23:90:b0:82:16:2f:cf:7d:4a: 28:04:35:2a:61:be:66:83:1e:84:37:b3:88:cb:e4:b9:5f:ab: 44:b9:6a:ea:44:07:cf:76:2f:80:c3:ce:06:90:71:e2:30:7e: ac:0b:44:02:90:aa:7c:56:ec:59:62:b4:82:47:c7:58:6b:60: ff:42:f2:01:1b:51:ee:c9:13:c0:9e:38:05:5f:fe:1f:7b:9f: 27:c7:28:57:d0:41:04:cc:5d:fe:7f:9f:da:f7:e9:32:db:be: 33:39:79:53:47:7b:db:2e:21:cb:31:80:51:b1:4d:31:30:ec: b2:1d:ae:1d:78:96:29:15:95:66:50:3f:53:e5:6a:e1:71:59: af:9e:3c:ba:37:23:c7:67:b2:71:57:7d:02:16:14:a9:89:13: 71:0f:3b:2e:28:67:89:56:0e:4d:3e:9e:53:df:d7:25:be:48: d6:08:5c:7b:5b:24:a9:91:23:a7:6b:ea:63:71:02:98:82:51: da:8e:a3:36 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk5QzA1NjM0RDdDQTU4 Nzg1NkMxMjU4QkI1MzkwMzlBODkxNkQ4M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC68erXYgdf6nRPaLENHw0yiR4oZFqYTVeAWGQllAdyD7A3BZZm Z24VHUZaRw2zSpMgdw8Wb2PPwOmPAdOtC7dj98Z0eIDpzc6mS8sZFdwV0ZyH2QY9 1NtTTKLx7Esncb2Jes9lGDG7AMoKwPX0rOei1+sUeRt5ivwy78ltIwsuWVjU7WpF KTnMz8GcmPnaEsRGbhXio6eAbvD4OLIzZWyCbeooNpT5E032Hq45m6cl6dUsz8H/ HoPLKbxvr05IOfj9zQAceb5MNY2ZqUAT6xzYh1mHMzmlT2fK8yVzPg53JQ3qrL2q PDMkKks0cZDwwVOp2PO/KwmLsTVFqcZWol4fAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmcBWNNfKWHhWwSWLtTkDmokW2D8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L21jQldOTmZLV0hoV3dT V0x0VGtEbW9rVzJEOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QgwDQYJKoZIhvcNAQELBQADggEBAEyZ9lbsUJtOs+NNp3zDeqWhsqojhzxV pzLZfK4SzZUOa3rKedApIawIkCteKdASzK7ewU+/NoGIT4GPdlG5KyOQsIIWL899 SigENSphvmaDHoQ3s4jL5Llfq0S5aupEB892L4DDzgaQceIwfqwLRAKQqnxW7Fli tIJHx1hrYP9C8gEbUe7JE8CeOAVf/h97nyfHKFfQQQTMXf5/n9r36TLbvjM5eVNH e9suIcsxgFGxTTEw7LIdrh14likVlWZQP1PlauFxWa+ePLo3I8dnsnFXfQIWFKmJ E3EPOy4oZ4lWDk0+nlPf1yW+SNYIXHtbJKmRI6dr6mNxApiCUdqOozY= -----END CERTIFICATE-----Generated at Fri Apr 4 21:17:21 2025 by rpki-client