$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa File: FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa (raw, json) Hash identifier: b1dwBNxSeyagBJnjfusORa6Ujn0h9iGRZ+f5L/n3uL4= Subject key identifier: 16:FA:8A:C5:6C:55:08:07:DD:53:D7:83:85:D2:3C:FA:3C:83:1B:5A Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 201F Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa Signing time: Fri 17 Jan 2025 01:24:08 +0000 ROA not before: Fri 17 Jan 2025 01:24:08 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 61317 IP address blocks: 103.244.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8223 (0x201f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Jan 17 01:24:08 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=16FA8AC56C550807DD53D78385D23CFA3C831B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:92:d2:99:29:49:60:4e:8a:21:0f:a0:e7: a4:92:aa:d8:97:a0:9e:f7:ae:0f:56:6c:eb:45:c0: 7d:2d:f4:b6:ca:ea:73:67:23:c5:11:e9:26:c3:ef: 39:1e:cd:c8:bd:41:2b:ff:99:e1:48:51:ef:7f:41: 84:f1:85:d4:a3:24:5d:3e:c7:fb:ba:21:49:9c:43: 6f:3f:e3:41:d8:11:bd:43:17:94:61:49:03:07:fe: aa:c7:2a:90:98:f2:bd:6f:16:1a:67:91:ee:df:b1: 93:f7:d7:77:60:e1:bc:ed:8a:51:e2:4d:63:7a:d9: 4e:bd:b4:ec:a9:1e:3d:15:af:1e:1a:1a:9d:21:40: ee:7a:ad:3f:04:63:1c:d1:82:29:c4:c8:57:a1:cc: 3d:bb:26:b0:f4:53:21:c8:30:63:96:22:d9:30:0b: 0b:5d:1e:8e:b4:67:c3:9b:e6:83:78:03:50:24:61: 52:23:37:1c:2e:21:66:17:eb:df:58:7b:f6:bf:30: 43:de:ea:a1:ff:6e:fc:10:41:5e:95:da:5a:00:b3: d1:d4:b4:5e:d7:ea:cf:d4:c4:56:61:6d:15:79:da: 70:87:40:4f:11:fe:9b:d7:ee:2b:e4:bf:77:9e:3a: 92:f1:94:82:6d:1a:61:60:44:8c:a7:57:f9:98:28: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:8A:C5:6C:55:08:07:DD:53:D7:83:85:D2:3C:FA:3C:83:1B:5A X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.244.116.0/22 Signature Algorithm: sha256WithRSAEncryption 46:98:0d:c4:de:37:83:b0:14:a0:aa:aa:b0:8e:b5:e7:7b:39: 5c:81:19:97:59:3a:1c:ad:ec:4b:f7:8c:85:71:c6:89:fd:3d: a5:55:5e:fc:12:d8:b9:26:7c:52:6f:dd:a3:1b:90:f0:fc:e6: b0:4c:d6:1b:07:2a:f6:b4:88:e6:56:48:b7:47:c7:95:d0:f5: 85:d8:a0:90:21:d7:49:bd:e8:61:09:0c:71:b5:91:c8:e0:0e: 34:12:d1:e4:7e:4f:09:2f:a8:d1:ee:71:65:3e:a2:87:20:45: 9d:a9:62:3d:48:74:9a:c7:6f:95:d0:4f:a3:a8:0f:c7:fb:b5: 19:f3:60:7c:44:96:b2:89:c8:ef:40:6a:0e:d7:a0:a2:be:14: 2c:8f:d7:c0:45:0e:e0:48:e4:48:ad:36:2d:65:cd:26:7b:31: ca:36:4b:fe:d0:d3:80:da:17:6a:25:92:3a:43:8c:ed:02:83: f7:d4:f4:7e:1a:d0:b7:b5:f4:87:60:e9:95:32:a2:c3:9c:22: 40:93:38:3a:67:d1:72:5f:90:9f:b4:b5:ac:ae:16:0f:2a:f3: c2:48:08:d3:5c:4f:5f:c3:5e:f6:c3:a1:ff:ac:2d:8f:b3:92: 13:a9:d1:10:ae:62:ca:74:db:77:70:f3:62:02:de:76:81:d9: 47:18:07:31 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw MTI0MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE2RkE4QUM1NkM1NTA4 MDdERDUzRDc4Mzg1RDIzQ0ZBM0M4MzFCNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ppLSmSlJYE6KIQ+g56SSqtiXoJ73rg9WbOtFwH0t9LbK6nNn I8UR6SbD7zkezci9QSv/meFIUe9/QYTxhdSjJF0+x/u6IUmcQ28/40HYEb1DF5Rh SQMH/qrHKpCY8r1vFhpnke7fsZP313dg4bztilHiTWN62U69tOypHj0Vrx4aGp0h QO56rT8EYxzRginEyFehzD27JrD0UyHIMGOWItkwCwtdHo60Z8Ob5oN4A1AkYVIj NxwuIWYX699Ye/a/MEPe6qH/bvwQQV6V2loAs9HUtF7X6s/UxFZhbRV52nCHQE8R /pvX7ivkv3eeOpLxlIJtGmFgRIynV/mYKAl3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFvqKxWxVCAfdU9eDhdI8+jyDG1owHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvRnZxS3hXeFZDQWZk VTllRGhkSTgtanlERzFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf0dDANBgkqhkiG9w0BAQsFAAOCAQEARpgNxN43g7AUoKqqsI6153s5XIEZ l1k6HK3sS/eMhXHGif09pVVe/BLYuSZ8Um/doxuQ8PzmsEzWGwcq9rSI5lZIt0fH ldD1hdigkCHXSb3oYQkMcbWRyOAONBLR5H5PCS+o0e5xZT6ihyBFnaliPUh0msdv ldBPo6gPx/u1GfNgfESWsonI70BqDtegor4ULI/XwEUO4EjkSK02LWXNJnsxyjZL /tDTgNoXaiWSOkOM7QKD99T0fhrQt7X0h2DplTKiw5wiQJM4OmfRcl+Qn7S1rK4W DyrzwkgI01xPX8Ne9sOh/6wtj7OSE6nREK5iynTbd3DzYgLedoHZRxgHMQ== -----END CERTIFICATE-----Generated at Thu May 15 22:20:47 2025 by rpki-client