$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/b6xYKSLGz18BN2xIrblSCRlue8Y.roa File: b6xYKSLGz18BN2xIrblSCRlue8Y.roa (raw, json) Hash identifier: ZKbFiHS0maTwFnBvd4+Py3hTk8m0FCCWWHKGFVhk4Vs= Subject key identifier: 6F:AC:58:29:22:C6:CF:5F:01:37:6C:48:AD:B9:52:09:19:6E:7B:C6 Certificate issuer: /CN=D6DD0B467EE8D75B15146628C991AC3140558F94 Certificate serial: 1B6E Authority key identifier: D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/b6xYKSLGz18BN2xIrblSCRlue8Y.roa Signing time: Fri 17 Jan 2025 01:27:39 +0000 ROA not before: Fri 17 Jan 2025 01:27:39 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 56005 IP address blocks: 103.22.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 14:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7022 (0x1b6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6DD0B467EE8D75B15146628C991AC3140558F94 Validity Not Before: Jan 17 01:27:39 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6FAC582922C6CF5F01376C48ADB95209196E7BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:00:e2:e8:64:59:62:08:25:6c:5b:90:a1: de:b2:39:77:dd:18:6c:b5:26:a0:33:eb:ec:74:c3: 22:0c:11:ac:7f:fc:72:6d:85:7d:51:90:33:0a:13: c3:96:9f:8b:2a:37:62:55:0a:b6:80:9b:34:6d:fa: e4:30:4a:7e:43:07:c5:8c:d7:94:0d:f9:50:c9:3e: cc:5f:5c:f5:c3:0b:1c:41:77:d7:e9:fe:15:d6:1b: b3:72:a0:02:42:da:99:52:59:40:b0:fd:3c:5c:93: a5:a4:ed:19:ca:3f:6d:59:aa:ef:09:e5:c3:c6:82: 27:d0:98:b7:66:58:46:c9:a5:3a:a7:36:4a:ef:b1: 4f:41:6a:33:08:32:24:f0:c0:55:0e:e2:b7:fc:14: 34:fa:10:d6:3d:61:3a:ff:1a:61:c3:cf:95:61:56: a3:3e:11:9a:f3:cc:34:d6:d6:26:01:a1:42:f9:ca: 02:87:63:64:ae:d7:aa:d7:62:f7:be:83:d5:26:d0: d3:31:96:f5:e7:4b:76:d3:ef:17:2b:4c:ee:a7:55: 34:71:06:e4:a3:ea:8d:97:70:a6:18:ab:55:f2:86: 3d:d9:e4:34:3c:96:2f:7f:1e:c2:03:bc:80:7e:b9: c9:31:60:b7:82:a7:b5:6d:13:09:4d:69:22:39:99: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AC:58:29:22:C6:CF:5F:01:37:6C:48:AD:B9:52:09:19:6E:7B:C6 X509v3 Authority Key Identifier: keyid:D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/b6xYKSLGz18BN2xIrblSCRlue8Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.22.188.0/24 Signature Algorithm: sha256WithRSAEncryption 60:fa:6b:ee:ba:84:de:c9:fc:64:d0:a9:e6:59:91:c2:5b:70: 4a:df:91:8e:ed:3c:58:e1:fd:2c:3f:fc:1f:5c:9c:3e:2d:6a: 6d:6d:0b:53:ac:7b:81:65:50:38:9e:00:e6:41:fd:61:d3:0d: 87:dc:5d:20:c4:c5:19:8d:a4:60:ee:81:0a:2f:96:5d:8a:9e: 3e:e4:6b:19:eb:cc:8d:02:38:44:f8:2b:63:e9:20:15:de:a2: 0b:8e:ad:7e:64:92:3b:ca:53:59:18:24:28:47:0d:29:bb:58: 86:97:e9:55:7d:4f:64:ee:13:8f:56:00:9f:db:ba:b3:d7:44: 6b:91:68:9f:69:40:d2:c5:cf:af:f2:77:00:5c:a1:df:62:e4: 45:c7:9b:6f:cd:a9:2c:19:27:7e:55:ab:c6:17:16:f7:20:31: 4c:99:e2:15:96:03:5e:c6:29:de:bd:5d:3b:37:5a:f9:91:d9: 2a:09:d1:46:0b:63:25:e8:94:6b:8f:19:59:f7:3a:4b:ce:88: 86:a1:28:7f:e6:3f:b0:42:c0:d7:5f:ee:e0:58:46:9e:9e:4b: bc:e7:33:0a:aa:48:63:50:e1:28:89:7d:7e:bb:61:67:2f:6b: d0:c5:cc:20:39:75:64:a5:bd:2e:a6:c3:f5:7d:0f:10:d7:5a: 23:36:c9:78 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZE RDBCNDY3RUU4RDc1QjE1MTQ2NjI4Qzk5MUFDMzE0MDU1OEY5NDAeFw0yNTAxMTcw MTI3MzlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZGQUM1ODI5MjJDNkNG NUYwMTM3NkM0OEFEQjk1MjA5MTk2RTdCQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIpwDi6GRZYgglbFuQod6yOXfdGGy1JqAz6+x0wyIMEax//HJt hX1RkDMKE8OWn4sqN2JVCraAmzRt+uQwSn5DB8WM15QN+VDJPsxfXPXDCxxBd9fp /hXWG7NyoAJC2plSWUCw/Txck6Wk7RnKP21Zqu8J5cPGgifQmLdmWEbJpTqnNkrv sU9BajMIMiTwwFUO4rf8FDT6ENY9YTr/GmHDz5VhVqM+EZrzzDTW1iYBoUL5ygKH Y2Su16rXYve+g9Um0NMxlvXnS3bT7xcrTO6nVTRxBuSj6o2XcKYYq1Xyhj3Z5DQ8 li9/HsIDvIB+uckxYLeCp7VtEwlNaSI5mZZxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUb6xYKSLGz18BN2xIrblSCRlue8YwHwYDVR0jBBgwFoAU1t0LRn7o11sVFGYo yZGsMUBVj5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc0 Mi8xdDBMUm43bzExc1ZGR1lveVpHc01VQlZqNVEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzF0MExSbjdvMTFzVkZHWW95WkdzTVVCVmo1US5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NDIvYjZ4WUtTTEd6MThC TjJ4SXJibFNDUmx1ZThZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcWvDANBgkqhkiG9w0BAQsFAAOCAQEAYPpr7rqE3sn8ZNCp5lmRwltwSt+R ju08WOH9LD/8H1ycPi1qbW0LU6x7gWVQOJ4A5kH9YdMNh9xdIMTFGY2kYO6BCi+W XYqePuRrGevMjQI4RPgrY+kgFd6iC46tfmSSO8pTWRgkKEcNKbtYhpfpVX1PZO4T j1YAn9u6s9dEa5Fon2lA0sXPr/J3AFyh32LkRcebb82pLBknflWrxhcW9yAxTJni FZYDXsYp3r1dOzda+ZHZKgnRRgtjJeiUa48ZWfc6S86IhqEof+Y/sELA11/u4FhG np5LvOczCqpIY1DhKIl9frthZy9r0MXMIDl1ZKW9LqbD9X0PENdaIzbJeA== -----END CERTIFICATE-----Generated at Sun May 18 12:42:43 2025 by rpki-client