$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/1d2pREnK7BBWYZwSFO0abGp7GXo.roa File: 1d2pREnK7BBWYZwSFO0abGp7GXo.roa (raw, json) Hash identifier: wkR1lGXucq9LhXuTAFoMUqhb5R3K40IzZo2zGa1pin8= Subject key identifier: D5:DD:A9:44:49:CA:EC:10:56:61:9C:12:14:ED:1A:6C:6A:7B:19:7A Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 2344 Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/1d2pREnK7BBWYZwSFO0abGp7GXo.roa Signing time: Tue 08 Apr 2025 03:06:31 +0000 ROA not before: Tue 08 Apr 2025 03:06:31 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 59067 IP address blocks: 103.36.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9028 (0x2344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Apr 8 03:06:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D5DDA94449CAEC1056619C1214ED1A6C6A7B197A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:34:46:3e:f4:d3:d1:fb:b4:1c:d1:bc:65: fb:a9:f7:f2:03:b5:0b:ef:15:9f:23:03:60:48:2d: da:56:60:41:6a:15:7e:d7:0b:7e:51:4b:d0:37:de: a8:49:cd:94:f1:7d:84:02:e2:54:f5:76:86:e1:64: 6a:15:19:68:fc:8f:ea:b5:6c:a4:86:1c:3d:51:4b: 42:db:50:33:66:68:95:25:4a:a4:e2:17:df:41:88: 93:1b:fc:ff:7d:ea:d1:cd:dc:fa:c7:c0:a2:05:a1: 75:15:43:a2:f8:de:ae:26:36:ab:d9:59:81:a1:8d: 15:33:6a:11:f1:ce:5f:99:c8:5b:dc:f4:df:95:b6: 2a:cc:78:dd:65:cb:85:5c:13:8e:6d:86:1b:78:f4: f1:7b:c2:82:d7:18:f7:8f:15:9f:a0:d8:6a:ec:04: 83:59:25:cb:89:35:36:a6:55:71:03:e3:a9:01:fd: 03:bc:98:7d:de:a6:15:be:c4:ea:5c:5c:fd:e0:d2: 82:6d:7b:9c:42:e5:72:5e:6e:19:d2:75:3c:5d:8c: 1f:61:a5:00:dd:6e:ed:e6:b9:26:01:65:39:d1:de: 16:b8:6d:25:f4:fd:f2:f1:0d:1b:a6:2d:55:e9:e9: de:0b:bd:f3:7d:e4:f8:cb:f8:f2:86:50:62:dc:57: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DD:A9:44:49:CA:EC:10:56:61:9C:12:14:ED:1A:6C:6A:7B:19:7A X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/1d2pREnK7BBWYZwSFO0abGp7GXo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.36.96.0/22 Signature Algorithm: sha256WithRSAEncryption 32:e7:22:db:cb:17:d2:bf:66:49:eb:95:2f:f6:20:46:b1:12: 2f:86:10:d1:68:8a:81:04:9a:2f:70:a4:bb:85:56:a7:b5:bb: cf:fa:2b:5e:2d:8b:72:8d:fd:a9:d4:85:96:97:07:a9:ef:d6: fd:a8:15:86:f2:8e:6e:70:97:b6:e5:03:66:ef:77:ca:7c:89: 6a:e8:24:f0:b5:f7:8d:e7:20:29:2b:2f:05:16:1c:0d:62:78: e3:ff:9f:19:9f:8d:97:cb:b8:c1:10:17:db:ca:d1:85:b4:14: fb:2b:1a:60:ce:36:9d:c1:83:55:a8:58:6e:50:5d:4e:79:c8: 0c:d3:cd:e1:a8:87:1d:41:00:a9:30:25:58:e9:61:f9:94:a3: 49:09:7b:40:5b:93:d0:72:3e:70:47:96:52:dd:4b:3d:81:60: 52:3f:7d:1f:ee:30:46:9a:7d:1c:fc:89:b6:ba:5e:d2:ad:e8: 3a:0a:e9:78:ec:88:3d:42:f4:5f:6d:ff:94:d4:99:d4:83:db: 5d:59:b4:09:a3:b3:a8:67:0f:77:f5:ef:54:93:6f:65:d2:92: e7:0f:4e:72:0f:d3:b7:ed:9f:e2:b4:42:a2:59:50:b1:d3:89: fb:d8:b1:9d:e8:df:74:cc:2c:6b:67:23:a2:8b:e3:34:81:7f: b3:b2:fb:9b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICI0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTA0MDgw MzA2MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ1RERBOTQ0NDlDQUVD MTA1NjYxOUMxMjE0RUQxQTZDNkE3QjE5N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHizRGPvTT0fu0HNG8Zfup9/IDtQvvFZ8jA2BILdpWYEFqFX7X C35RS9A33qhJzZTxfYQC4lT1dobhZGoVGWj8j+q1bKSGHD1RS0LbUDNmaJUlSqTi F99BiJMb/P996tHN3PrHwKIFoXUVQ6L43q4mNqvZWYGhjRUzahHxzl+ZyFvc9N+V tirMeN1ly4VcE45thht49PF7woLXGPePFZ+g2GrsBINZJcuJNTamVXED46kB/QO8 mH3ephW+xOpcXP3g0oJte5xC5XJebhnSdTxdjB9hpQDdbu3muSYBZTnR3ha4bSX0 /fLxDRumLVXp6d4LvfN95PjL+PKGUGLcV2zvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1d2pREnK7BBWYZwSFO0abGp7GXowHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvMWQycFJFbks3QkJX WVp3U0ZPMGFiR3A3R1hvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmckYDANBgkqhkiG9w0BAQsFAAOCAQEAMuci28sX0r9mSeuVL/YgRrESL4YQ 0WiKgQSaL3Cku4VWp7W7z/orXi2Lco39qdSFlpcHqe/W/agVhvKObnCXtuUDZu93 ynyJaugk8LX3jecgKSsvBRYcDWJ44/+fGZ+Nl8u4wRAX28rRhbQU+ysaYM42ncGD VahYblBdTnnIDNPN4aiHHUEAqTAlWOlh+ZSjSQl7QFuT0HI+cEeWUt1LPYFgUj99 H+4wRpp9HPyJtrpe0q3oOgrpeOyIPUL0X23/lNSZ1IPbXVm0CaOzqGcPd/XvVJNv ZdKS5w9Ocg/Tt+2f4rRCollQsdOJ+9ixnejfdMwsa2cjoovjNIF/s7L7mw== -----END CERTIFICATE-----Generated at Sun May 18 03:54:20 2025 by rpki-client