$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/pP2_1K83CFKUzt6daLPVOoczMIc.roa File: pP2_1K83CFKUzt6daLPVOoczMIc.roa (raw, json) Hash identifier: o8ECgfUnAoe75inwKKyZpV+tByZPHixKdIbmmMa+2sY= Subject key identifier: A4:FD:BF:D4:AF:37:08:52:94:CE:DE:9D:68:B3:D5:3A:87:33:30:87 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18D2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pP2_1K83CFKUzt6daLPVOoczMIc.roa Signing time: Fri 17 Jan 2025 01:25:37 +0000 ROA not before: Fri 17 Jan 2025 01:25:37 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6354 (0x18d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:37 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A4FDBFD4AF37085294CEDE9D68B3D53A87333087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:6f:7e:94:56:23:5f:4c:88:78:49:2e:32: e2:81:40:20:e5:9e:9d:a8:bf:2d:7e:96:8d:eb:d3: 79:12:6c:e6:5e:c0:5e:d4:46:72:90:58:98:40:08: fc:be:32:69:93:5e:d5:24:c9:d1:9f:6e:90:d8:b7: b3:7f:53:f2:81:dd:03:c8:d7:ab:39:54:fc:7d:2e: 15:6c:04:4e:57:34:78:39:45:0d:85:ba:e0:20:05: 1c:18:ff:d3:2e:45:e7:be:33:95:8d:8d:e4:75:04: 37:ce:08:08:82:84:66:78:c8:e3:c0:c3:05:49:f2: b8:f4:99:ca:10:5f:f6:c5:18:fa:29:05:33:9a:e7: f2:7f:49:25:54:cd:9f:1b:5a:67:ba:d2:9d:62:67: 6d:63:d5:0e:7d:f2:fc:9d:d7:04:8c:2e:86:bf:f5: a5:82:91:40:28:a2:b8:34:c7:7a:9b:07:3c:5c:40: 0a:7b:4c:18:02:75:94:11:69:7a:2c:67:b5:48:3a: da:58:b9:c3:d3:ab:3d:8a:29:c1:cc:62:92:0c:fa: fd:cb:a7:87:05:49:97:4c:2a:f6:b6:84:74:09:e4: 28:ff:6e:f0:33:af:89:9d:e3:07:3e:ed:9d:f4:65: 2e:6f:e1:ad:45:82:df:ce:e5:67:f6:74:b0:b0:0f: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:BF:D4:AF:37:08:52:94:CE:DE:9D:68:B3:D5:3A:87:33:30:87 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/pP2_1K83CFKUzt6daLPVOoczMIc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.9.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:8d:b7:8f:2b:3b:cf:3b:51:c6:53:0d:0f:3e:47:dd:23:95: 3e:21:12:2a:cd:60:03:ff:5a:51:dc:a9:ac:88:bd:52:5a:f0: a7:35:7b:8d:f8:30:c5:22:b2:be:4f:51:7c:84:10:d1:db:29: d8:f1:b3:e4:fa:d6:18:88:f6:8e:d3:8f:9b:d7:e3:9c:6b:10: 8b:32:e2:4e:48:fe:3e:43:44:5f:48:59:94:95:72:78:30:6e: 04:d0:5e:fd:48:68:b5:31:0a:f2:ba:5b:45:20:89:cb:b0:ea: 92:42:42:d8:9f:40:de:02:84:94:7b:77:1c:c4:40:5d:9f:3a: d9:a8:9b:44:52:06:e3:31:f0:f2:db:6b:3e:c1:30:13:3f:9a: 0c:6b:58:94:db:fe:9f:d4:94:72:41:5b:53:d5:df:b5:c2:0c: f7:e9:c3:85:54:0a:4f:85:3d:ad:09:e3:62:4c:69:51:73:fa: 51:47:a9:93:ba:21:f5:fb:a5:be:df:76:13:fd:e7:1e:94:87: 79:50:7b:d8:79:e7:bc:fd:5c:b7:ed:fa:fc:3b:23:3e:82:3f: 1a:66:9d:80:38:83:d4:8e:e6:83:09:aa:78:2b:3d:c9:b0:c2: d3:f9:dc:e7:0d:2d:94:cd:0e:a4:02:81:5d:9e:bb:84:1c:b3: b8:38:bc:7b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEE0RkRCRkQ0QUYzNzA4 NTI5NENFREU5RDY4QjNENTNBODczMzMwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk7W9+lFYjX0yIeEkuMuKBQCDlnp2ovy1+lo3r03kSbOZewF7U RnKQWJhACPy+MmmTXtUkydGfbpDYt7N/U/KB3QPI16s5VPx9LhVsBE5XNHg5RQ2F uuAgBRwY/9MuRee+M5WNjeR1BDfOCAiChGZ4yOPAwwVJ8rj0mcoQX/bFGPopBTOa 5/J/SSVUzZ8bWme60p1iZ21j1Q598vyd1wSMLoa/9aWCkUAoorg0x3qbBzxcQAp7 TBgCdZQRaXosZ7VIOtpYucPTqz2KKcHMYpIM+v3Lp4cFSZdMKva2hHQJ5Cj/bvAz r4md4wc+7Z30ZS5v4a1Fgt/O5Wf2dLCwD2ejAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUpP2/1K83CFKUzt6daLPVOoczMIcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3BQMl8xSzgzQ0ZLVXp0 NmRhTFBWT29jek1JYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QkwDQYJKoZIhvcNAQELBQADggEBAA2Nt48rO887UcZTDQ8+R90jlT4hEirN YAP/WlHcqayIvVJa8Kc1e434MMUisr5PUXyEENHbKdjxs+T61hiI9o7Tj5vX45xr EIsy4k5I/j5DRF9IWZSVcngwbgTQXv1IaLUxCvK6W0Ugicuw6pJCQtifQN4ChJR7 dxzEQF2fOtmom0RSBuMx8PLbaz7BMBM/mgxrWJTb/p/UlHJBW1PV37XCDPfpw4VU Ck+FPa0J42JMaVFz+lFHqZO6IfX7pb7fdhP95x6Uh3lQe9h557z9XLft+vw7Iz6C PxpmnYA4g9SO5oMJqngrPcmwwtP53OcNLZTNDqQCgV2eu4Qcs7g4vHs= -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:50 2025 by rpki-client