$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/QCpxlqVembFTmfeMtuBzBESm-JA.roa File: QCpxlqVembFTmfeMtuBzBESm-JA.roa (raw, json) Hash identifier: xcpaUEvMmYAW2SGTqp3FuvaFDPrTL4CzFzU/n/pTTVA= Subject key identifier: 40:2A:71:96:A5:5E:99:B1:53:99:F7:8C:B6:E0:73:04:44:A6:F8:90 Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Certificate serial: 14C1 Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/QCpxlqVembFTmfeMtuBzBESm-JA.roa Signing time: Sun 27 Apr 2025 09:29:37 +0000 ROA not before: Sun 27 Apr 2025 09:29:37 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 152320 IP address blocks: 103.223.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 09:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5313 (0x14c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Validity Not Before: Apr 27 09:29:37 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=402A7196A55E99B15399F78CB6E0730444A6F890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:27:95:6b:92:25:a7:9e:5a:57:fa:da:b2: e3:12:cf:86:b6:09:08:8c:65:6b:83:b2:4c:93:be: fe:ca:26:5d:86:fe:fc:ad:b2:63:a5:ec:10:3d:31: 41:af:18:44:64:73:4e:3b:8e:eb:f8:cb:b7:88:92: 3d:92:9c:eb:b2:da:bd:db:4f:c4:5a:6b:16:90:0d: bb:49:b9:45:8a:22:49:a9:45:4a:bc:ba:8d:7c:57: f8:1b:08:53:13:50:b9:d9:8a:08:93:60:6d:a5:f4: 72:af:ac:f1:80:3e:2c:04:3d:be:00:b8:29:84:87: 79:96:42:fe:ab:15:d0:f1:df:6d:ad:5c:4b:d6:60: ed:c8:6c:f9:42:f2:80:9e:97:ee:a5:7d:1d:93:51: 46:56:53:39:f4:47:7a:8a:4d:0c:bd:ee:9a:47:0b: 3b:45:12:de:1c:ea:98:bd:72:6e:56:38:a0:3c:c4: c8:88:01:c7:bf:62:e8:f8:d8:d1:6f:bb:65:41:0d: 58:6c:c7:71:08:3b:63:cf:4a:98:4c:02:94:47:60: e8:82:2f:d8:f9:bc:9a:78:6d:87:42:46:9f:43:71: 78:5e:60:72:53:95:13:d4:f7:8c:9e:6d:3d:fb:70: 93:f4:79:62:79:13:b3:90:9f:68:bb:c8:25:ff:66: e2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:71:96:A5:5E:99:B1:53:99:F7:8C:B6:E0:73:04:44:A6:F8:90 X509v3 Authority Key Identifier: keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/QCpxlqVembFTmfeMtuBzBESm-JA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.223.122.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:ec:0c:24:b1:8e:56:6f:f9:5e:76:54:74:26:61:73:4b:df: e6:13:e0:9a:83:e1:26:0e:a7:20:45:2d:32:94:15:97:ed:3f: 7d:78:de:c5:de:59:f3:a5:a3:d1:7a:00:42:3d:f4:37:7e:ea: fa:7c:1c:7d:53:29:25:94:c0:eb:fa:4f:c5:57:11:13:82:90: 81:90:94:1d:11:87:a8:62:db:1b:4e:60:ce:0b:65:3c:93:cf: 74:14:28:bf:f4:91:03:82:f9:05:53:57:65:7f:c9:06:bb:f1: 21:55:6c:26:a4:de:24:4a:40:ef:ef:18:ae:90:51:a6:d6:a1: 75:f9:87:38:30:8f:3e:e1:14:f1:10:50:c4:a4:b7:16:db:83: aa:73:42:96:9c:e5:8c:ec:6f:1f:9a:30:95:57:90:5f:a7:74: 8b:4d:c2:aa:b5:52:bf:78:db:ff:b0:2f:8c:bf:78:be:ef:61: 3f:09:5a:0f:a5:f6:c4:ee:92:80:7c:5b:94:9d:fa:da:0a:83: 87:36:0f:57:bb:bd:1b:f8:bc:89:2a:a6:b7:aa:6d:1d:78:a4: 19:ee:80:28:a7:f5:34:b9:35:d5:3f:93:a8:38:f0:d1:68:df: 7f:4c:b0:12:1a:88:40:a5:cd:b0:ba:cc:84:b8:e6:90:00:cc: 20:8d:fd:9a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNTA0Mjcw OTI5MzdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQwMkE3MTk2QTU1RTk5 QjE1Mzk5Rjc4Q0I2RTA3MzA0NDRBNkY4OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5FCeVa5Ilp55aV/rasuMSz4a2CQiMZWuDskyTvv7KJl2G/vyt smOl7BA9MUGvGERkc047juv4y7eIkj2SnOuy2r3bT8RaaxaQDbtJuUWKIkmpRUq8 uo18V/gbCFMTULnZigiTYG2l9HKvrPGAPiwEPb4AuCmEh3mWQv6rFdDx322tXEvW YO3IbPlC8oCel+6lfR2TUUZWUzn0R3qKTQy97ppHCztFEt4c6pi9cm5WOKA8xMiI Ace/Yuj42NFvu2VBDVhsx3EIO2PPSphMApRHYOiCL9j5vJp4bYdCRp9DcXheYHJT lRPU94yebT37cJP0eWJ5E7OQn2i7yCX/ZuIFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQCpxlqVembFTmfeMtuBzBESm+JAwHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh 7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYvUUNweGxxVmVtYkZU bWZlTXR1QnpCRVNtLUpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGffejANBgkqhkiG9w0BAQsFAAOCAQEAG+wMJLGOVm/5XnZUdCZhc0vf5hPg moPhJg6nIEUtMpQVl+0/fXjexd5Z86Wj0XoAQj30N37q+nwcfVMpJZTA6/pPxVcR E4KQgZCUHRGHqGLbG05gzgtlPJPPdBQov/SRA4L5BVNXZX/JBrvxIVVsJqTeJEpA 7+8YrpBRptahdfmHODCPPuEU8RBQxKS3FtuDqnNClpzljOxvH5owlVeQX6d0i03C qrVSv3jb/7AvjL94vu9hPwlaD6X2xO6SgHxblJ362gqDhzYPV7u9G/i8iSqmt6pt HXikGe6AKKf1NLk11T+TqDjw0Wjff0ywEhqIQKXNsLrMhLjmkADMII39mg== -----END CERTIFICATE-----Generated at Sat May 17 06:48:08 2025 by rpki-client