$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa File: AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa (raw, json) Hash identifier: Kl4ON26En4eQQWoPY5fQ8/eUXeZ0rB7LwCLX4iDWg+4= Subject key identifier: 02:02:71:64:AF:67:F8:B7:53:02:34:D0:EF:D8:C3:AD:4E:57:84:B1 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 201A Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa Signing time: Fri 17 Jan 2025 01:24:06 +0000 ROA not before: Fri 17 Jan 2025 01:24:06 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139648 IP address blocks: 103.244.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8218 (0x201a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Jan 17 01:24:06 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=02027164AF67F8B7530234D0EFD8C3AD4E5784B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:d7:60:61:c3:44:d7:a6:fa:83:5c:87:b2: ef:ea:df:86:7c:2b:72:e8:60:34:db:3f:ed:2c:b5: 26:a5:65:ac:e5:c5:86:78:e5:6f:59:49:15:bb:f4: f0:72:eb:8e:87:82:96:02:a9:59:59:5f:d1:d2:1f: d6:3c:25:97:be:8d:2b:be:f5:e2:7c:84:dd:87:b0: 69:45:41:57:a0:1c:d4:83:c0:18:28:28:5c:08:a0: 40:5a:ca:17:6f:2e:2b:ef:4e:25:26:32:94:87:e6: 44:e9:89:4f:22:de:00:8e:80:e3:6e:79:5d:d2:22: 91:19:e5:f1:c0:6d:14:b3:c3:94:0a:65:4f:b7:48: 2a:be:a9:ae:4b:30:aa:06:05:cf:4f:46:fa:0f:57: 0b:b8:a0:dd:8b:63:6b:28:fc:43:d2:59:8f:d0:73: 18:9c:6f:b5:58:e3:35:27:f7:db:93:c0:2f:82:70: d8:c7:34:a2:5a:2f:a4:b1:78:61:be:c5:a2:9d:2e: 8b:ea:cc:04:69:a2:0f:eb:aa:0e:b7:37:ed:56:5b: b6:10:cb:8f:38:fb:e4:ad:de:dd:ef:46:50:0a:01: 1f:62:36:20:fa:60:99:a9:73:fa:06:5b:3d:68:8d: 9c:63:f3:96:9e:46:ba:2d:61:7b:44:9c:21:81:b9: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:02:71:64:AF:67:F8:B7:53:02:34:D0:EF:D8:C3:AD:4E:57:84:B1 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.244.116.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:19:5c:34:5a:2c:09:95:91:5c:67:03:c8:73:eb:26:45:a6: 4d:d3:3a:14:da:52:06:35:bf:3f:83:12:9c:65:13:b9:9e:4a: 87:67:fb:14:da:26:65:9d:d7:4b:3f:66:02:67:f6:14:98:1e: 9e:36:81:85:8a:85:14:a8:0a:5a:fa:06:e2:92:8d:2d:2c:ae: 76:9e:92:43:36:ae:95:75:8c:f8:8d:f6:d6:89:2f:ce:e2:79: 3a:0c:7a:cf:a2:30:41:f2:4e:b6:4b:86:85:6f:df:09:ae:ac: ca:6b:89:93:fc:f7:c6:fa:8f:99:c5:38:0c:db:39:4b:02:fe: 13:e6:bb:59:ed:b1:b7:0a:03:4e:67:36:43:4a:a3:9c:d9:1f: c9:e2:58:a3:5a:48:e2:34:07:c8:1e:92:b8:30:1f:48:dc:f3: 8e:a3:15:a4:9d:f8:21:4f:8f:a0:f7:2e:b2:aa:96:d9:79:5d: aa:e3:87:a5:33:a6:72:9e:43:ec:62:65:7e:f1:3c:cf:28:96: 58:26:6a:d3:84:90:28:86:69:64:59:c7:e1:5a:55:fe:4a:b3: 4d:ce:0e:fe:f8:c5:d8:a0:d4:71:05:d4:fa:7b:17:56:b3:f7: 2e:b0:72:c0:20:09:03:11:2b:51:9a:65:ef:2c:bc:0f:eb:2d: 9d:e2:8e:7d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw MTI0MDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyMDI3MTY0QUY2N0Y4 Qjc1MzAyMzREMEVGRDhDM0FENEU1Nzg0QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/j9dgYcNE16b6g1yHsu/q34Z8K3LoYDTbP+0stSalZazlxYZ4 5W9ZSRW79PBy646HgpYCqVlZX9HSH9Y8JZe+jSu+9eJ8hN2HsGlFQVegHNSDwBgo KFwIoEBayhdvLivvTiUmMpSH5kTpiU8i3gCOgONueV3SIpEZ5fHAbRSzw5QKZU+3 SCq+qa5LMKoGBc9PRvoPVwu4oN2LY2so/EPSWY/Qcxicb7VY4zUn99uTwC+CcNjH NKJaL6SxeGG+xaKdLovqzARpog/rqg63N+1WW7YQy484++St3t3vRlAKAR9iNiD6 YJmpc/oGWz1ojZxj85aeRrotYXtEnCGBuXkzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUAgJxZK9n+LdTAjTQ79jDrU5XhLEwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvQWdKeFpLOW4tTGRU QWpUUTc5akRyVTVYaExFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf0dDANBgkqhkiG9w0BAQsFAAOCAQEAXRlcNFosCZWRXGcDyHPrJkWmTdM6 FNpSBjW/P4MSnGUTuZ5Kh2f7FNomZZ3XSz9mAmf2FJgenjaBhYqFFKgKWvoG4pKN LSyudp6SQzaulXWM+I321okvzuJ5Ogx6z6IwQfJOtkuGhW/fCa6symuJk/z3xvqP mcU4DNs5SwL+E+a7We2xtwoDTmc2Q0qjnNkfyeJYo1pI4jQHyB6SuDAfSNzzjqMV pJ34IU+PoPcusqqW2XldquOHpTOmcp5D7GJlfvE8zyiWWCZq04SQKIZpZFnH4VpV /kqzTc4O/vjF2KDUcQXU+nsXVrP3LrBywCAJAxErUZpl7yy8D+stneKOfQ== -----END CERTIFICATE-----Generated at Sat May 17 11:44:46 2025 by rpki-client