$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa File: hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa (raw, json) Hash identifier: 2Vn8f0lm4bXJ6phvRt7XoC++jp3dCf7kzB9LVXj1jVc= Subject key identifier: 85:20:34:18:DD:EF:AC:13:0E:C0:49:D9:62:24:17:1F:A0:D8:B9:CF Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 12CC Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa Signing time: Fri 17 Jan 2025 01:23:35 +0000 ROA not before: Fri 17 Jan 2025 01:23:35 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63719 IP address blocks: 103.232.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4812 (0x12cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Jan 17 01:23:35 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=85203418DDEFAC130EC049D96224171FA0D8B9CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:ef:94:d7:77:88:24:6f:53:de:60:2f:5a: a7:0a:41:57:44:86:f2:a2:d0:24:56:10:86:fc:b7: 90:83:c5:46:b4:c1:19:98:11:a6:db:c0:28:f8:8f: 90:d4:06:bb:ec:7e:4b:21:29:1c:99:6a:ff:ab:ee: d8:5d:5d:65:d0:4c:ea:4e:7f:1c:67:03:86:63:c6: ca:7b:b0:8c:bc:25:db:3c:df:bb:64:6e:41:6a:50: a4:db:26:b2:1a:41:db:ac:10:fa:38:d7:db:5a:12: 62:eb:e8:fe:b4:6c:ea:94:c8:0a:df:d9:d5:fa:61: 30:cf:f3:f4:48:c0:1f:00:e7:04:d1:c7:4d:0d:a4: df:54:3f:71:57:e3:29:4b:ef:72:32:74:64:7d:e7: 40:93:2a:fa:ca:88:52:aa:22:f3:95:6b:d8:71:61: fd:91:e4:a3:86:a5:63:c5:b9:8f:97:8d:63:2a:ea: 88:e9:b9:1f:1f:e5:99:3a:45:a2:ee:ad:72:ca:07: 3f:de:d8:1b:59:17:9d:41:ba:08:ca:63:85:4b:d6: 7a:5c:76:f3:bf:ec:44:0c:82:71:ac:c5:e2:63:a3: e4:df:b9:2f:65:12:9f:cb:08:91:f9:f7:28:fe:a4: 54:be:65:a0:2d:65:ae:b9:2e:bb:0e:72:9d:e4:8b: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:20:34:18:DD:EF:AC:13:0E:C0:49:D9:62:24:17:1F:A0:D8:B9:CF X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.232.144.0/22 Signature Algorithm: sha256WithRSAEncryption 22:f8:c7:49:55:fe:30:3a:ce:cb:a4:0e:fe:40:25:2b:93:96: ba:35:12:b2:b8:e6:ff:41:c7:55:1d:50:fc:a6:1a:c8:39:4b: b5:8f:47:29:a5:f0:83:19:d7:10:22:a3:f6:96:36:fe:02:ce: e5:f9:bd:7b:e2:3b:5f:43:a4:87:f8:44:3c:8c:b8:af:ec:c2: 19:67:9c:ee:a7:99:8f:24:0b:42:32:85:95:d4:2c:89:23:8e: 0a:55:71:4e:68:7c:6e:10:42:16:3e:c7:07:5f:f4:95:12:91: 7b:79:94:eb:b2:7e:00:c7:a3:14:b5:26:ba:9e:4b:92:06:39: 3a:e4:a4:ad:fa:b5:12:68:c4:1a:8e:a3:dc:cc:23:f0:32:3d: c8:39:e1:f3:01:24:15:c5:47:3a:d3:9f:ab:09:50:22:0e:ee: 66:c4:0a:b7:e6:46:b5:7a:66:3b:f9:fd:73:44:fa:08:ea:29: 8f:b8:a9:51:1e:3c:f4:9a:76:43:73:dc:c2:da:e6:0f:1d:1b: d2:af:28:d7:ab:17:27:4d:48:8a:3c:3d:08:93:47:5a:2d:80: 1d:22:5e:9f:26:1a:34:83:03:7b:84:41:66:c8:bd:5a:ce:e2: 81:aa:b7:0a:4c:37:72:f1:32:bd:d9:cc:03:dd:fc:b1:51:b8: 02:bb:00:8c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNTAxMTcw MTIzMzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg1MjAzNDE4RERFRkFD MTMwRUMwNDlEOTYyMjQxNzFGQTBEOEI5Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp7e+U13eIJG9T3mAvWqcKQVdEhvKi0CRWEIb8t5CDxUa0wRmY EabbwCj4j5DUBrvsfkshKRyZav+r7thdXWXQTOpOfxxnA4Zjxsp7sIy8Jds837tk bkFqUKTbJrIaQdusEPo419taEmLr6P60bOqUyArf2dX6YTDP8/RIwB8A5wTRx00N pN9UP3FX4ylL73IydGR950CTKvrKiFKqIvOVa9hxYf2R5KOGpWPFuY+XjWMq6ojp uR8f5Zk6RaLurXLKBz/e2BtZF51BugjKY4VL1npcdvO/7EQMgnGsxeJjo+TfuS9l Ep/LCJH59yj+pFS+ZaAtZa65LrsOcp3ki8V7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhSA0GN3vrBMOwEnZYiQXH6DYuc8wHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L2hTQTBHTjN2ckJNT3dF blpZaVFYSDZEWXVjOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn6JAwDQYJKoZIhvcNAQELBQADggEBACL4x0lV/jA6zsukDv5AJSuTlro1ErK4 5v9Bx1UdUPymGsg5S7WPRyml8IMZ1xAio/aWNv4CzuX5vXviO19DpIf4RDyMuK/s whlnnO6nmY8kC0IyhZXULIkjjgpVcU5ofG4QQhY+xwdf9JUSkXt5lOuyfgDHoxS1 JrqeS5IGOTrkpK36tRJoxBqOo9zMI/AyPcg54fMBJBXFRzrTn6sJUCIO7mbECrfm RrV6Zjv5/XNE+gjqKY+4qVEePPSadkNz3MLa5g8dG9KvKNerFydNSIo8PQiTR1ot gB0iXp8mGjSDA3uEQWbIvVrO4oGqtwpMN3LxMr3ZzAPd/LFRuAK7AIw= -----END CERTIFICATE-----Generated at Fri Apr 4 18:39:11 2025 by rpki-client