$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/guJT03W_-tMFXlcliKng1B15iJU.roa File: guJT03W_-tMFXlcliKng1B15iJU.roa (raw, json) Hash identifier: QQpqs0hJ8p3B4dOO/H+6AxaU4zUX8J+RfxadTD1UG/4= Subject key identifier: 82:E2:53:D3:75:BF:FA:D3:05:5E:57:25:88:A9:E0:D4:1D:79:88:95 Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 2343 Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/guJT03W_-tMFXlcliKng1B15iJU.roa Signing time: Tue 08 Apr 2025 03:06:31 +0000 ROA not before: Tue 08 Apr 2025 03:06:31 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 59067 IP address blocks: 103.25.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9027 (0x2343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Apr 8 03:06:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=82E253D375BFFAD3055E572588A9E0D41D798895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:49:35:b0:e5:e7:81:79:d6:5f:27:e2:63: 6e:d5:81:3e:28:a2:3c:3d:44:0e:ed:43:94:97:37: a8:0f:27:1f:2c:12:b8:6b:f2:47:9c:38:33:89:b5: ff:7f:d6:d3:8f:07:23:77:1a:d3:59:6b:86:69:e7: ce:3a:2a:51:18:b9:ed:0b:c6:5c:66:03:c2:25:10: 89:69:75:9a:8b:0a:e7:94:bf:cb:e2:70:43:bd:47: bc:d7:3c:5c:57:08:39:b3:ba:97:8f:5f:3f:86:bf: c7:55:2e:12:6d:8c:47:59:3e:20:ce:73:32:b0:74: 4c:49:9e:aa:d1:43:9f:fb:76:73:7a:a1:1a:df:e3: 84:4e:40:39:94:73:13:f0:ba:28:1e:1a:3b:a6:6f: 35:44:4a:e2:72:c0:09:82:dc:80:b9:99:1f:11:26: c0:6e:27:09:d1:bd:76:70:d4:b6:af:3a:b9:5f:6e: 8c:f8:fe:56:0e:f8:1b:dc:a9:56:12:e6:0d:89:cf: d2:7b:f0:0e:7c:c8:f3:38:28:20:35:23:21:63:9b: 73:c9:d9:a9:1b:0c:d8:65:34:e3:2b:70:36:c0:31: f7:37:98:42:95:1c:ae:9d:4f:a7:1c:58:3b:ca:10: ac:07:de:a8:cc:96:99:44:e9:96:16:a4:b4:ff:24: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E2:53:D3:75:BF:FA:D3:05:5E:57:25:88:A9:E0:D4:1D:79:88:95 X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/guJT03W_-tMFXlcliKng1B15iJU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.25.156.0/24 Signature Algorithm: sha256WithRSAEncryption 83:f9:d7:04:d0:c6:b6:ed:ee:a0:ff:69:7f:33:69:32:52:af: 6e:c6:7c:bf:74:c2:46:2b:5a:3d:40:fc:af:51:2e:d1:10:f3: 23:de:d3:94:90:4b:d6:f3:8a:d9:5e:48:b4:a1:75:49:5b:ec: 12:17:21:ab:f6:18:85:97:2b:33:a3:fb:3a:f9:52:3d:09:ca: 1c:34:c3:02:58:8a:5b:08:9a:15:ea:b9:eb:1f:49:30:03:20: 28:10:c2:79:0a:24:66:83:c0:ac:52:3e:f2:ed:ce:cb:7b:20: aa:1a:f3:10:75:ea:50:fd:5a:ac:f5:61:0b:2c:77:3e:a0:28: 30:19:15:9a:74:f3:ea:83:98:18:e5:4d:0e:f2:79:4f:7a:00: 35:8e:cb:5e:be:8b:aa:ac:86:c4:9e:cb:f1:f6:5e:be:c6:8d: 84:9c:c4:af:5e:a3:34:cf:ab:27:39:53:46:60:57:0a:c1:25: c6:6f:f8:78:4f:9d:f2:58:fe:08:cb:1b:8a:77:81:0e:86:6d: 3f:cf:e9:a2:bb:bd:09:16:75:41:e8:b7:58:74:db:7d:a8:e7: ac:74:36:84:78:c4:62:df:92:94:bf:3d:73:78:26:a4:4d:58: 0f:04:59:e8:2f:cc:68:c9:f4:ab:da:7f:a4:b1:31:4e:08:fa: 21:b8:50:f3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICI0MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTA0MDgw MzA2MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDgyRTI1M0QzNzVCRkZB RDMwNTVFNTcyNTg4QTlFMEQ0MUQ3OTg4OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0xUk1sOXngXnWXyfiY27VgT4oojw9RA7tQ5SXN6gPJx8sErhr 8kecODOJtf9/1tOPByN3GtNZa4Zp5846KlEYue0LxlxmA8IlEIlpdZqLCueUv8vi cEO9R7zXPFxXCDmzupePXz+Gv8dVLhJtjEdZPiDOczKwdExJnqrRQ5/7dnN6oRrf 44ROQDmUcxPwuigeGjumbzVESuJywAmC3IC5mR8RJsBuJwnRvXZw1LavOrlfboz4 /lYO+BvcqVYS5g2Jz9J78A58yPM4KCA1IyFjm3PJ2akbDNhlNOMrcDbAMfc3mEKV HK6dT6ccWDvKEKwH3qjMlplE6ZYWpLT/JEyHAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUguJT03W/+tMFXlcliKng1B15iJUwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvZ3VKVDAzV18tdE1G WGxjbGlLbmcxQjE1aUpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcZnDANBgkqhkiG9w0BAQsFAAOCAQEAg/nXBNDGtu3uoP9pfzNpMlKvbsZ8 v3TCRitaPUD8r1Eu0RDzI97TlJBL1vOK2V5ItKF1SVvsEhchq/YYhZcrM6P7OvlS PQnKHDTDAliKWwiaFeq56x9JMAMgKBDCeQokZoPArFI+8u3Oy3sgqhrzEHXqUP1a rPVhCyx3PqAoMBkVmnTz6oOYGOVNDvJ5T3oANY7LXr6LqqyGxJ7L8fZevsaNhJzE r16jNM+rJzlTRmBXCsElxm/4eE+d8lj+CMsbineBDoZtP8/poru9CRZ1Qei3WHTb fajnrHQ2hHjEYt+SlL89c3gmpE1YDwRZ6C/MaMn0q9p/pLExTgj6IbhQ8w== -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:45 2025 by rpki-client