$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa File: JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa (raw, json) Hash identifier: xipJcpVSlnpeHteK7tGV1IKhb4Wx/LG6+nhoJGKQuIE= Subject key identifier: 24:DF:A8:AC:69:A8:E0:45:09:D4:85:CB:1D:69:44:98:68:12:A9:0C Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CCC Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa Signing time: Thu 02 Jan 2025 13:58:28 +0000 ROA not before: Thu 02 Jan 2025 13:58:28 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 14.103.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7372 (0x1ccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:28 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=24DFA8AC69A8E04509D485CB1D6944986812A90C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:4b:6a:b7:aa:a6:bc:49:57:b1:2c:3d:07: b8:0e:d8:11:28:b5:d0:c2:63:bf:f0:57:97:ef:85: c2:fa:63:a5:28:55:52:a3:95:d9:56:5e:b4:63:65: c0:2c:d7:0f:8a:f3:1d:21:37:de:75:02:a9:f0:99: 78:7c:08:2c:ae:cc:8d:43:9c:30:e0:5b:51:6e:18: 35:f6:2c:7e:1d:b7:66:6c:1f:62:cb:03:a9:04:dd: ce:e2:5b:fa:4c:59:2f:bc:fb:e7:42:29:26:6e:65: 85:63:2d:c1:22:fb:60:46:bc:82:96:58:c7:ea:91: 0c:40:ae:98:ac:94:fd:b6:ee:48:f4:f1:a8:da:fb: f0:37:67:d5:a2:eb:5b:46:9c:de:a4:9a:5a:ba:ec: 96:df:23:38:78:5e:b8:e3:d7:d0:ca:bd:64:9d:b2: 7a:42:d8:57:10:34:5d:70:44:6e:75:ae:84:95:b9: 31:4a:b2:13:4f:eb:db:87:a1:89:5f:95:02:f6:81: 13:4e:6b:e2:aa:9e:e9:17:29:3e:dd:21:7a:5e:3f: 26:0b:57:03:89:d7:34:b7:d3:5c:03:24:65:f0:d5: fd:b2:1e:95:5a:12:61:34:9c:93:0e:2e:04:bd:18: 4d:46:9e:c5:22:9c:0a:12:f3:eb:65:48:86:eb:a4: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DF:A8:AC:69:A8:E0:45:09:D4:85:CB:1D:69:44:98:68:12:A9:0C X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:02:87:39:6e:e6:79:48:b7:fe:74:2d:93:dc:c8:85:60:b2: 1a:a6:66:5a:95:9d:ec:1a:90:75:56:23:04:9f:da:90:cb:b7: be:70:cb:25:15:f9:71:a7:e3:a7:2c:9f:d8:c3:a4:6d:31:6e: 09:88:3d:28:b6:e3:d1:a2:83:85:35:ba:e6:a5:80:77:36:4f: 73:01:16:a2:67:35:88:f6:69:c3:b8:34:51:ea:3c:a7:62:df: de:73:e9:cc:65:38:65:37:73:98:e1:e1:bb:aa:49:58:3f:eb: 45:15:a2:ed:94:c2:19:63:39:b7:65:73:06:7d:b1:54:82:d8: a6:56:85:d7:5c:ed:35:15:98:b2:de:5c:a4:2a:b3:59:d2:fa: 3e:10:6a:87:61:2a:f1:85:88:83:fe:e7:60:0d:27:1c:63:f5: f0:dc:d3:d7:69:11:f8:e7:51:60:70:b6:5d:00:00:53:0f:e0: 7f:69:00:bd:7a:b6:04:ac:9d:1b:8e:f3:80:2d:c2:fb:91:69: 18:7d:c0:07:2d:62:2f:af:fa:03:e2:16:9e:66:d5:44:cb:d2: 51:03:96:ce:e2:ec:75:11:da:81:c3:3f:af:07:24:7f:49:d7: 16:53:ea:09:b9:fe:09:3e:06:3e:77:e6:a2:6a:c1:2a:e9:36: 47:2e:aa:fe -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICHMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI0REZBOEFDNjlBOEUw NDUwOUQ0ODVDQjFENjk0NDk4NjgxMkE5MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCubktqt6qmvElXsSw9B7gO2BEotdDCY7/wV5fvhcL6Y6UoVVKj ldlWXrRjZcAs1w+K8x0hN951AqnwmXh8CCyuzI1DnDDgW1FuGDX2LH4dt2ZsH2LL A6kE3c7iW/pMWS+8++dCKSZuZYVjLcEi+2BGvIKWWMfqkQxArpislP227kj08aja +/A3Z9Wi61tGnN6kmlq67JbfIzh4Xrjj19DKvWSdsnpC2FcQNF1wRG51roSVuTFK shNP69uHoYlflQL2gRNOa+KqnukXKT7dIXpePyYLVwOJ1zS301wDJGXw1f2yHpVa EmE0nJMOLgS9GE1GnsUinAoS8+tlSIbrpNS1AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUJN+orGmo4EUJ1IXLHWlEmGgSqQwwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvSk4tb3JHbW80RVVK MUlYTEhXbEVtR2dTcVF3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAA5nMA0GCSqGSIb3DQEBCwUAA4IBAQAcAoc5buZ5SLf+dC2T3MiFYLIapmZa lZ3sGpB1ViMEn9qQy7e+cMslFflxp+OnLJ/Yw6RtMW4JiD0otuPRooOFNbrmpYB3 Nk9zARaiZzWI9mnDuDRR6jynYt/ec+nMZThlN3OY4eG7qklYP+tFFaLtlMIZYzm3 ZXMGfbFUgtimVoXXXO01FZiy3lykKrNZ0vo+EGqHYSrxhYiD/udgDSccY/Xw3NPX aRH451FgcLZdAABTD+B/aQC9erYErJ0bjvOALcL7kWkYfcAHLWIvr/oD4haeZtVE y9JRA5bO4ux1EdqBwz+vByR/SdcWU+oJuf4JPgY+d+aiasEq6TZHLqr+ -----END CERTIFICATE-----Generated at Sat May 17 16:38:36 2025 by rpki-client