$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/r4FNSangl9kDliJ-9jeOIsxuroY.roa File: r4FNSangl9kDliJ-9jeOIsxuroY.roa (raw, json) Hash identifier: 231PVUR9dlinnEPnrK0mso1HSl30yrN/uiepT9uJhd0= Subject key identifier: AF:81:4D:49:A9:E0:97:D9:03:96:22:7E:F6:37:8E:22:CC:6E:AE:86 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1847 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/r4FNSangl9kDliJ-9jeOIsxuroY.roa Signing time: Fri 17 Jan 2025 01:24:50 +0000 ROA not before: Fri 17 Jan 2025 01:24:50 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6215 (0x1847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:50 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AF814D49A9E097D90396227EF6378E22CC6EAE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:95:d8:26:33:a4:ca:7a:e7:a7:76:0d:a7: 6a:b6:0c:b5:eb:ab:2a:e9:af:e4:0b:e1:9c:10:93: c8:c8:ec:d1:59:06:cb:af:c0:f0:1e:b3:ed:03:cc: 6d:84:43:31:7a:da:72:ce:54:06:7d:e6:9f:88:f2: 4d:99:60:1b:7f:8c:68:6e:c3:6d:77:69:d7:3e:5c: 7a:6f:0d:08:93:5e:5b:2e:42:95:c6:d9:6f:ea:92: b6:4c:38:35:18:c9:9b:c9:18:af:88:6c:19:37:9d: fe:16:ea:5f:c2:0c:d1:7e:94:38:31:29:d4:46:e4: c2:ac:f9:4f:9e:c3:df:7c:0a:d1:53:2c:00:79:64: 4c:c2:13:ff:92:ea:9c:b5:d0:d5:55:ed:f4:3a:b7: 96:1a:6d:b9:97:63:37:fd:d9:c2:41:a3:e6:c4:f2: 5a:63:1f:43:6f:0e:9a:d4:a8:21:33:85:aa:00:c8: e7:6a:4b:7c:cf:7c:47:39:76:5c:60:09:8f:61:f7: a8:e4:f7:9c:9a:c0:a4:34:12:9c:af:86:bc:13:e0: 55:4a:09:94:42:4c:a8:f6:30:f2:1c:a3:a5:10:76: 67:75:b9:c3:75:a8:ef:27:72:e5:02:e0:2b:2b:ff: 51:ed:32:a2:5f:f9:72:67:ad:44:f0:ea:78:de:a8: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:81:4D:49:A9:E0:97:D9:03:96:22:7E:F6:37:8E:22:CC:6E:AE:86 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/r4FNSangl9kDliJ-9jeOIsxuroY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.32.0/22 Signature Algorithm: sha256WithRSAEncryption 24:c5:8d:5f:69:5d:32:87:9c:e7:15:4e:c3:dc:ae:23:31:89: 65:98:8f:f7:80:50:f6:e4:5a:5b:d7:e4:af:d2:52:32:8b:ce: b6:46:cf:d8:19:01:e9:47:94:2c:14:93:6a:7f:15:01:bc:44: 42:a7:6d:34:81:92:9e:61:16:65:6d:7c:a1:6d:84:d7:3c:a7: cc:d4:d5:61:d5:27:3c:25:16:b6:7b:70:4c:4e:06:96:bf:26: 2c:cb:7a:2d:9b:91:10:17:27:e3:8d:63:b1:28:f8:33:f4:06: 33:d3:58:43:67:7a:5a:68:de:05:6e:1a:68:35:e4:f9:25:b1: f1:25:6e:60:94:56:d7:7d:b4:9d:df:9d:e7:af:b3:1d:66:a0: b8:17:20:56:28:ca:be:b4:b7:60:79:d6:33:64:e7:5e:5d:d9: 09:c1:aa:a5:1f:5a:b4:df:9e:51:da:4a:e9:80:4a:27:6e:b6: 0b:04:2f:2c:d7:5f:47:72:34:94:ed:73:5a:e6:83:a6:a5:72: 86:39:6b:8a:36:bf:77:d5:00:c5:07:fc:cd:ff:47:32:de:c5: d6:b3:9d:8d:54:00:d6:07:98:42:3b:6d:54:17:72:27:ad:4c: 75:75:e4:b6:53:f9:09:00:1d:54:d1:e5:9f:66:52:c5:58:23: 5d:87:c8:47 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFGODE0RDQ5QTlFMDk3 RDkwMzk2MjI3RUY2Mzc4RTIyQ0M2RUFFODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCU8ZXYJjOkynrnp3YNp2q2DLXrqyrpr+QL4ZwQk8jI7NFZBsuv wPAes+0DzG2EQzF62nLOVAZ95p+I8k2ZYBt/jGhuw213adc+XHpvDQiTXlsuQpXG 2W/qkrZMODUYyZvJGK+IbBk3nf4W6l/CDNF+lDgxKdRG5MKs+U+ew998CtFTLAB5 ZEzCE/+S6py10NVV7fQ6t5YabbmXYzf92cJBo+bE8lpjH0NvDprUqCEzhaoAyOdq S3zPfEc5dlxgCY9h96jk95yawKQ0EpyvhrwT4FVKCZRCTKj2MPIco6UQdmd1ucN1 qO8ncuUC4Csr/1HtMqJf+XJnrUTw6njeqLI1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUr4FNSangl9kDliJ+9jeOIsxuroYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3I0Rk5TYW5nbDlrRGxp Si05amVPSXN4dXJvWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SAwDQYJKoZIhvcNAQELBQADggEBACTFjV9pXTKHnOcVTsPcriMxiWWYj/eA UPbkWlvX5K/SUjKLzrZGz9gZAelHlCwUk2p/FQG8REKnbTSBkp5hFmVtfKFthNc8 p8zU1WHVJzwlFrZ7cExOBpa/JizLei2bkRAXJ+ONY7Eo+DP0BjPTWENnelpo3gVu Gmg15PklsfElbmCUVtd9tJ3fneevsx1moLgXIFYoyr60t2B51jNk515d2QnBqqUf WrTfnlHaSumASidutgsELyzXX0dyNJTtc1rmg6alcoY5a4o2v3fVAMUH/M3/RzLe xdaznY1UANYHmEI7bVQXcietTHV15LZT+QkAHVTR5Z9mUsVYI12HyEc= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:15 2025 by rpki-client