$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa File: 8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa (raw, json) Hash identifier: StSo0cVjWN1em0gavnIIDJ9P278UpnjzSIZioUED/ys= Subject key identifier: F1:93:BA:EA:B7:11:F6:7C:2F:5D:0F:F6:47:DF:EE:A9:70:E0:90:54 Certificate issuer: /CN=715B46D9F995777FA3143263D54A6E676A906EAB Certificate serial: 4EBC Authority key identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa Signing time: Wed 09 Apr 2025 06:48:30 +0000 ROA not before: Wed 09 Apr 2025 06:48:30 +0000 ROA not after: Thu 09 Apr 2026 06:41:15 +0000 asID: 398704 IP address blocks: 103.72.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 00:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20156 (0x4ebc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715B46D9F995777FA3143263D54A6E676A906EAB Validity Not Before: Apr 9 06:48:30 2025 GMT Not After : Apr 9 06:41:15 2026 GMT Subject: CN=F193BAEAB711F67C2F5D0FF647DFEEA970E09054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:55:f9:3a:7d:4f:16:75:2d:95:cf:14:7d: cb:c4:78:4a:24:0e:07:5d:2a:d9:f7:01:ac:98:ef: e6:5b:48:a1:b1:b4:37:cd:6d:84:04:22:ec:39:a3: d3:1e:eb:e3:6a:6c:a8:03:e3:98:41:ca:9b:c1:1d: af:ac:f6:cb:c5:6e:18:d4:32:ba:bc:22:17:96:4e: 70:13:38:e2:c4:4b:91:6e:55:1a:7a:78:db:21:bf: f2:5b:f7:9e:63:5c:61:96:bc:fe:c2:98:67:f9:f2: 57:55:8f:da:a6:68:38:b3:18:5f:ce:fb:59:64:c5: e3:6e:a6:dc:29:67:47:68:d9:c6:7c:03:d6:c2:59: d5:9d:70:dd:7d:5b:da:8d:13:65:8a:a1:54:f4:31: 5a:05:72:c3:14:f4:fd:ed:16:fb:45:1a:1c:12:15: 9e:69:2f:5c:3d:76:af:37:ce:65:56:e0:a7:25:cc: 36:88:58:d6:d2:27:63:f1:d1:30:e3:0f:e4:ee:7f: cc:b3:97:88:ec:82:3e:b0:a1:43:68:34:0c:94:ff: 23:2d:48:80:56:f8:4d:82:1f:95:ac:d9:00:ef:22: 4e:e2:67:ab:eb:4d:46:f0:b3:40:fd:8f:59:f1:38: 5b:6b:6f:6a:dc:1d:96:b7:3a:18:d7:5e:01:44:f5: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:93:BA:EA:B7:11:F6:7C:2F:5D:0F:F6:47:DF:EE:A9:70:E0:90:54 X509v3 Authority Key Identifier: keyid:71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:14:66:93:0c:9d:78:d5:0e:f9:a2:e2:55:c0:f6:45:24:b2: c2:2c:2a:b0:d4:30:b3:f3:4f:67:1a:20:52:b8:f8:10:46:2a: 6e:98:49:76:fe:81:6a:cd:e0:c6:a3:46:4b:6b:ef:b3:b8:c8: 8b:66:0d:98:88:41:54:74:da:df:24:dd:b9:83:97:ce:e8:50: 0b:ca:3a:83:41:93:2a:95:a4:9f:68:e2:97:ac:94:84:f9:50: 59:d9:0c:8a:cb:13:c2:1b:64:d4:7d:15:e0:bb:cc:94:2c:43: d2:a2:8e:f4:81:86:3d:6e:68:8f:a7:a2:db:07:4f:b1:72:7e: 26:e3:4e:dd:18:9f:39:5e:49:8a:53:bd:e7:31:cd:82:64:8b: 15:16:f4:59:24:8a:2c:a0:ba:c5:c5:ec:99:03:d5:37:34:03: 5d:3b:c0:06:d9:e4:ad:8e:71:aa:bf:43:81:c7:66:31:e3:71: 7b:73:fa:e0:41:ba:3e:47:51:62:e8:68:bc:0f:70:d2:70:7a: f3:37:53:2a:68:3f:b9:53:36:69:fd:1a:26:2a:03:41:aa:f0: ac:70:15:b7:d8:8d:7c:e6:fa:70:59:d0:3b:79:97:d3:90:4a: 84:99:e8:ba:cb:b5:84:cd:a2:fc:af:e1:56:4f:54:86:40:e5: 22:b7:a6:2f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICTrwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzE1 QjQ2RDlGOTk1Nzc3RkEzMTQzMjYzRDU0QTZFNjc2QTkwNkVBQjAeFw0yNTA0MDkw NjQ4MzBaFw0yNjA0MDkwNjQxMTVaMDMxMTAvBgNVBAMTKEYxOTNCQUVBQjcxMUY2 N0MyRjVEMEZGNjQ3REZFRUE5NzBFMDkwNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClx1X5On1PFnUtlc8UfcvEeEokDgddKtn3AayY7+ZbSKGxtDfN bYQEIuw5o9Me6+NqbKgD45hBypvBHa+s9svFbhjUMrq8IheWTnATOOLES5FuVRp6 eNshv/Jb955jXGGWvP7CmGf58ldVj9qmaDizGF/O+1lkxeNuptwpZ0do2cZ8A9bC WdWdcN19W9qNE2WKoVT0MVoFcsMU9P3tFvtFGhwSFZ5pL1w9dq83zmVW4KclzDaI WNbSJ2Px0TDjD+Tuf8yzl4jsgj6woUNoNAyU/yMtSIBW+E2CH5Ws2QDvIk7iZ6vr TUbws0D9j1nxOFtrb2rcHZa3OhjXXgFE9XRFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8ZO66rcR9nwvXQ/2R9/uqXDgkFQwHwYDVR0jBBgwFoAUcVtG2fmVd3+jFDJj 1UpuZ2qQbqswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3 NS9jVnRHMmZtVmQzLWpGREpqMVVwdVoycVFicXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2NWdEcyZm1WZDMtakZESmoxVXB1WjJxUWJxcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNzUvOFpPNjZyY1I5bnd2 WFFfMlI5X3VxWERna0ZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdIeDANBgkqhkiG9w0BAQsFAAOCAQEAGhRmkwydeNUO+aLiVcD2RSSywiwq sNQws/NPZxogUrj4EEYqbphJdv6Bas3gxqNGS2vvs7jIi2YNmIhBVHTa3yTduYOX zuhQC8o6g0GTKpWkn2jil6yUhPlQWdkMissTwhtk1H0V4LvMlCxD0qKO9IGGPW5o j6ei2wdPsXJ+JuNO3RifOV5JilO95zHNgmSLFRb0WSSKLKC6xcXsmQPVNzQDXTvA BtnkrY5xqr9DgcdmMeNxe3P64EG6PkdRYuhovA9w0nB68zdTKmg/uVM2af0aJioD QarwrHAVt9iNfOb6cFnQO3mX05BKhJnousu1hM2i/K/hVk9UhkDlIremLw== -----END CERTIFICATE-----Generated at Sun May 18 19:51:46 2025 by rpki-client