$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/wLav8diVujIwKx1aw07gOQsWsL4.roa File: wLav8diVujIwKx1aw07gOQsWsL4.roa (raw, json) Hash identifier: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo= Subject key identifier: C0:B6:AF:F1:D8:95:BA:32:30:2B:1D:5A:C3:4E:E0:39:0B:16:B0:BE Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 1DF9 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/wLav8diVujIwKx1aw07gOQsWsL4.roa Signing time: Mon 21 Apr 2025 07:54:57 +0000 ROA not before: Mon 21 Apr 2025 07:54:57 +0000 ROA not after: Thu 09 Apr 2026 06:41:08 +0000 asID: 132168 IP address blocks: 103.90.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7673 (0x1df9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Apr 21 07:54:57 2025 GMT Not After : Apr 9 06:41:08 2026 GMT Subject: CN=C0B6AFF1D895BA32302B1D5AC34EE0390B16B0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0f:9d:1f:0d:14:bf:fe:ff:c3:82:ec:9e:27: 6d:fb:59:a9:04:14:f8:13:5d:5e:92:08:b0:bc:9c: d7:03:90:dd:1f:65:64:08:ac:47:57:6d:c7:04:5a: a9:a8:3a:a6:06:f7:c7:55:df:d6:69:54:13:28:71: 51:19:1b:e0:48:d4:72:62:4c:61:2f:af:29:f7:3d: 66:11:2e:63:8d:8e:ae:23:2c:30:40:1f:7b:8e:6a: f8:98:8e:33:20:19:42:b4:3c:3b:1f:3c:28:9d:83: a7:f9:bc:de:9e:65:10:f9:82:5c:a2:ce:54:cc:50: 1b:54:a3:32:a3:c6:36:4e:3f:c0:2a:c6:a4:8d:9e: ed:00:32:05:a9:d3:56:72:a0:33:6c:c8:56:8e:68: b8:5c:cf:7f:23:c1:6d:cb:d9:73:a3:ed:97:82:80: f1:8b:72:7d:53:bd:b5:e4:28:5d:75:88:b4:ac:02: 58:f3:5e:fc:4f:b5:c8:de:3f:24:bd:0f:eb:c8:ce: 03:31:1b:76:7e:db:3c:a3:5c:64:c6:64:ce:a7:2e: 37:d9:c5:b4:b3:cb:e9:b1:b4:93:b4:50:cf:9a:29: 60:93:44:9e:a8:dd:2b:89:74:65:50:06:94:fc:d5: 64:24:fa:ff:c8:15:60:02:8c:3a:35:7e:ce:55:85: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:AF:F1:D8:95:BA:32:30:2B:1D:5A:C3:4E:E0:39:0B:16:B0:BE X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/wLav8diVujIwKx1aw07gOQsWsL4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.90.56.0/23 Signature Algorithm: sha256WithRSAEncryption c1:87:97:40:2f:36:00:96:c4:e0:80:af:bb:21:20:41:e1:51: d8:1a:10:61:39:c0:a5:ec:a3:3e:d3:93:3c:90:c1:be:6b:c0: fd:15:4c:b1:2d:c4:c1:ee:30:99:5a:d5:54:70:d4:3c:4e:d0: 45:94:2c:7d:7e:b2:74:d4:5d:86:bd:64:eb:81:6c:65:8f:74: 41:31:3e:a1:67:ad:5c:6e:6c:45:0c:d7:c1:0d:c1:c3:ac:8e: 76:7f:e9:7d:14:af:8c:43:25:24:e3:11:46:ec:f4:9a:5a:fe: 20:b6:84:18:fb:08:27:bd:c6:a4:c9:d3:e3:b1:15:07:51:9d: bf:30:0f:00:84:6c:15:fb:17:07:77:3b:51:94:fa:94:df:f4: 63:7a:92:a7:33:cb:ea:ea:b3:b9:45:33:ca:04:cf:e5:8f:98: 2b:e8:66:aa:49:8e:4e:e7:d6:97:4f:71:b3:a0:b1:18:05:c9: 79:da:2e:95:cd:63:a6:98:2a:34:8f:09:53:81:bd:1b:e0:f6: 08:da:60:8e:b8:97:9b:22:44:15:43:6e:a1:d1:ad:ad:7a:40: ca:01:36:7b:b2:af:c9:9d:a2:5c:64:24:73:12:73:7e:82:08: 7c:7f:9b:8a:f1:75:90:c8:14:1d:c0:07:54:d7:0f:02:a4:49: 2d:6b:57:07 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTA0MjEw NzU0NTdaFw0yNjA0MDkwNjQxMDhaMDMxMTAvBgNVBAMTKEMwQjZBRkYxRDg5NUJB MzIzMDJCMUQ1QUMzNEVFMDM5MEIxNkIwQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuD50fDRS//v/DguyeJ237WakEFPgTXV6SCLC8nNcDkN0fZWQI rEdXbccEWqmoOqYG98dV39ZpVBMocVEZG+BI1HJiTGEvryn3PWYRLmONjq4jLDBA H3uOaviYjjMgGUK0PDsfPCidg6f5vN6eZRD5glyizlTMUBtUozKjxjZOP8AqxqSN nu0AMgWp01ZyoDNsyFaOaLhcz38jwW3L2XOj7ZeCgPGLcn1TvbXkKF11iLSsAljz XvxPtcjePyS9D+vIzgMxG3Z+2zyjXGTGZM6nLjfZxbSzy+mxtJO0UM+aKWCTRJ6o 3SuJdGVQBpT81WQk+v/IFWACjDo1fs5VhfsnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUwLav8diVujIwKx1aw07gOQsWsL4wHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvd0xhdjhkaVZ1akl3 S3gxYXcwN2dPUXNXc0w0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWdaODANBgkqhkiG9w0BAQsFAAOCAQEAwYeXQC82AJbE4ICvuyEgQeFR2BoQ YTnApeyjPtOTPJDBvmvA/RVMsS3Ewe4wmVrVVHDUPE7QRZQsfX6ydNRdhr1k64Fs ZY90QTE+oWetXG5sRQzXwQ3Bw6yOdn/pfRSvjEMlJOMRRuz0mlr+ILaEGPsIJ73G pMnT47EVB1GdvzAPAIRsFfsXB3c7UZT6lN/0Y3qSpzPL6uqzuUUzygTP5Y+YK+hm qkmOTufWl09xs6CxGAXJedoulc1jppgqNI8JU4G9G+D2CNpgjriXmyJEFUNuodGt rXpAygE2e7KvyZ2iXGQkcxJzfoIIfH+bivF1kMgUHcAHVNcPAqRJLWtXBw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:58 2025 by rpki-client