$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/gk_mleru9Wa_PbXNeo5mHWP6ojg.roa File: gk_mleru9Wa_PbXNeo5mHWP6ojg.roa (raw, json) Hash identifier: 1HLcvm6EuHkWYFcWUgONDyEhmlwxwd9Rkyu7jRQiWyc= Subject key identifier: 82:4F:E6:95:EA:EE:F5:66:BF:3D:B5:CD:7A:8E:66:1D:63:FA:A2:38 Certificate issuer: /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B Certificate serial: 12B9 Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/gk_mleru9Wa_PbXNeo5mHWP6ojg.roa Signing time: Fri 17 Jan 2025 01:28:42 +0000 ROA not before: Fri 17 Jan 2025 01:28:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139119 IP address blocks: 103.157.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4793 (0x12b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B Validity Not Before: Jan 17 01:28:42 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=824FE695EAEEF566BF3DB5CD7A8E661D63FAA238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:41:03:c3:34:1a:ef:b3:d0:95:fe:66:5b: 04:cc:89:89:d1:63:8c:8c:4a:d5:1a:f6:45:dc:c6: c4:42:fa:be:13:42:dd:29:12:e2:5e:0e:f0:ba:2e: 68:c5:46:3e:d5:5c:0e:42:ea:e2:64:1d:6c:b8:5f: 5f:31:ac:d0:ae:05:05:13:3b:34:a7:8d:46:64:f2: d0:95:47:b6:16:98:c2:a9:d9:12:8c:8f:65:be:ff: f4:e9:93:67:e4:51:87:d4:87:c1:d9:d2:93:c4:89: f4:4d:bc:fd:72:c3:83:52:68:85:60:86:4a:61:83: 9d:c9:fa:75:34:da:ee:76:7d:e9:8d:f7:06:5e:a3: ee:34:fc:e2:94:c6:80:70:2a:45:31:1b:fa:e4:58: 55:aa:a9:6f:1b:e0:36:9e:b9:c7:c4:36:93:c8:c5: fe:fc:a4:c1:a4:89:19:9d:7c:60:94:14:3a:12:75: 3d:99:a9:1c:f2:25:26:8d:3d:bd:0d:91:08:f2:f1: 1d:79:d6:38:38:90:85:a4:31:94:15:fc:8d:63:99: af:d6:b4:30:30:5a:63:52:54:36:5f:9d:7e:d5:84: 9e:49:0a:41:b0:a6:f6:56:89:09:71:b5:7e:c3:73: a7:90:d3:ca:0f:0a:6a:23:b7:f1:14:32:8d:57:40: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4F:E6:95:EA:EE:F5:66:BF:3D:B5:CD:7A:8E:66:1D:63:FA:A2:38 X509v3 Authority Key Identifier: keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/gk_mleru9Wa_PbXNeo5mHWP6ojg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.157.234.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5f:9b:0e:31:fd:a9:87:9d:88:ba:97:a6:e7:36:33:38:fe: 53:06:da:f4:ea:f3:42:cf:61:13:6b:85:9a:61:3e:e2:37:29: f4:ff:8b:83:46:1a:f0:cf:12:59:2a:a6:fd:21:e2:a7:3f:a6: 2d:9f:e4:5f:19:16:3f:8f:45:f7:f2:18:c1:1e:6e:c2:3f:03: ec:17:6b:27:41:71:c5:26:de:2c:c3:d1:97:d0:2f:8b:48:f1: f0:c7:ab:7e:3c:5b:7f:38:9f:40:88:fc:d6:6d:52:8d:83:f6: 76:d8:77:ee:7d:6e:1f:89:5c:61:5d:a1:1a:cd:dd:fa:6f:19: 54:37:97:08:e0:57:5e:f8:9b:da:d7:77:ce:36:2f:e0:04:17: 22:d0:9e:1f:21:45:c0:c9:7d:9c:95:75:5e:3d:fa:1b:dc:cf: 6e:c2:be:5d:96:23:c0:37:32:96:10:01:ba:f7:ae:1d:c2:aa: bc:f5:da:3b:bc:4a:99:96:be:69:e9:1e:77:e6:0a:fa:a7:3c: 17:49:6a:43:62:60:0a:c6:6a:52:4c:38:12:30:31:96:24:55: fc:2e:cc:a8:4e:cd:7d:d9:63:98:f7:05:e0:e5:a6:a6:ab:16: dd:8f:39:d4:26:3e:ca:9d:6c:00:53:1f:3c:13:06:a5:ff:ed: 87:72:0b:40 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICErkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUVE MEU3NjY2NTI3MkZBRjk1QzMxMDRFQUUxODJCRDJENUEwODAwQjAeFw0yNTAxMTcw MTI4NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDgyNEZFNjk1RUFFRUY1 NjZCRjNEQjVDRDdBOEU2NjFENjNGQUEyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1eUEDwzQa77PQlf5mWwTMiYnRY4yMStUa9kXcxsRC+r4TQt0p EuJeDvC6LmjFRj7VXA5C6uJkHWy4X18xrNCuBQUTOzSnjUZk8tCVR7YWmMKp2RKM j2W+//Tpk2fkUYfUh8HZ0pPEifRNvP1yw4NSaIVghkphg53J+nU02u52femN9wZe o+40/OKUxoBwKkUxG/rkWFWqqW8b4DaeucfENpPIxf78pMGkiRmdfGCUFDoSdT2Z qRzyJSaNPb0NkQjy8R151jg4kIWkMZQV/I1jma/WtDAwWmNSVDZfnX7VhJ5JCkGw pvZWiQlxtX7Dc6eQ08oPCmojt/EUMo1XQH6NAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgk/mleru9Wa/PbXNeo5mHWP6ojgwHwYDVR0jBBgwFoAU7tDnZmUnL6+VwxBO rhgr0tWggAswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAy Ny83dERuWm1Vbkw2LVZ3eEJPcmhncjB0V2dnQXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzd0RG5abVVuTDYtVnd4Qk9yaGdyMHRXZ2dBcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMjcvZ2tfbWxlcnU5V2Ff UGJYTmVvNW1IV1A2b2pnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGed6jANBgkqhkiG9w0BAQsFAAOCAQEAkF+bDjH9qYediLqXpuc2Mzj+Uwba 9OrzQs9hE2uFmmE+4jcp9P+Lg0Ya8M8SWSqm/SHipz+mLZ/kXxkWP49F9/IYwR5u wj8D7BdrJ0FxxSbeLMPRl9Avi0jx8MerfjxbfzifQIj81m1SjYP2dth37n1uH4lc YV2hGs3d+m8ZVDeXCOBXXvib2td3zjYv4AQXItCeHyFFwMl9nJV1Xj36G9zPbsK+ XZYjwDcylhABuveuHcKqvPXaO7xKmZa+aeked+YK+qc8F0lqQ2JgCsZqUkw4EjAx liRV/C7MqE7NfdljmPcF4OWmpqsW3Y851CY+yp1sAFMfPBMGpf/th3ILQA== -----END CERTIFICATE-----Generated at Sun May 18 03:07:28 2025 by rpki-client