$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/cMzirDskOTT5ePrJEsxyDGNCXb4.roa File: cMzirDskOTT5ePrJEsxyDGNCXb4.roa (raw, json) Hash identifier: waffoFYiR68Q2R0Wnu1wVzSJhplgJZ4kdjj1z5fBsFc= Subject key identifier: 70:CC:E2:AC:3B:24:39:34:F9:78:FA:C9:12:CC:72:0C:63:42:5D:BE Certificate issuer: /CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003 Certificate serial: 207D Authority key identifier: FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/cMzirDskOTT5ePrJEsxyDGNCXb4.roa Signing time: Wed 09 Apr 2025 07:08:29 +0000 ROA not before: Wed 09 Apr 2025 07:08:29 +0000 ROA not after: Thu 09 Apr 2026 06:40:07 +0000 asID: 54994 IP address blocks: 220.243.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8317 (0x207d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003 Validity Not Before: Apr 9 07:08:29 2025 GMT Not After : Apr 9 06:40:07 2026 GMT Subject: CN=70CCE2AC3B243934F978FAC912CC720C63425DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:f7:22:b2:af:75:00:7b:36:e5:c8:f1:62: 41:bd:5d:52:46:69:3a:f7:ab:9d:e5:d7:80:1e:31: bc:01:a3:0f:a6:76:b0:a4:b9:da:08:0e:5f:df:50: b9:9f:b6:e8:38:6d:73:2b:9b:0b:d0:9a:7a:22:4f: 15:c7:17:8e:21:a3:b2:c0:69:f4:34:0c:f4:79:34: 6c:79:34:9b:e9:c1:a7:01:12:0a:34:8f:f9:e2:1a: fc:3b:76:c3:a8:14:d1:53:02:b8:c6:3a:44:be:3a: 85:dc:f3:70:f3:b8:db:39:6f:07:b0:aa:ff:d5:1e: 74:2d:d0:29:d9:87:36:11:1a:ec:86:b6:ce:f4:42: 5e:4b:ae:85:8f:09:df:33:e0:ca:32:7c:5b:3b:bd: be:ce:a6:03:8d:66:0b:b1:3e:5f:62:30:f2:93:d9: 69:0d:55:ed:c0:e4:1b:4c:1c:ff:1b:c9:ae:bd:a5: 6c:9c:34:54:72:3b:0f:b1:d2:aa:ef:ed:49:54:0b: 93:5e:89:00:4b:4e:f7:e6:53:be:dd:f2:73:b0:cf: 05:10:e0:bb:42:fc:94:87:1f:25:69:16:47:0b:55: e5:cf:a2:a5:a9:04:7b:0c:a4:58:7c:2d:1c:19:d0: f0:e6:d9:fa:bf:88:0c:f5:ef:b9:fc:7b:40:c2:dd: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CC:E2:AC:3B:24:39:34:F9:78:FA:C9:12:CC:72:0C:63:42:5D:BE X509v3 Authority Key Identifier: keyid:FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/cMzirDskOTT5ePrJEsxyDGNCXb4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.243.248.0/24 Signature Algorithm: sha256WithRSAEncryption 45:22:94:02:3d:c4:19:a1:41:db:9b:ea:2b:35:ed:7a:0e:57: a7:e5:17:a7:c6:9c:36:6f:2e:75:bb:57:b0:a5:4d:64:70:eb: 25:92:1c:1e:76:49:bb:4a:53:de:b9:57:c6:38:44:97:e0:e6: 21:af:54:48:6b:5e:52:9d:10:ef:ee:8a:85:64:9b:6e:62:a0: dd:ca:ff:24:91:9c:c8:98:6c:f1:21:97:1c:ca:48:49:1d:2a: d0:e7:dd:dc:4c:85:a3:57:1d:02:4d:5a:37:83:86:91:73:73: 1d:1b:70:a4:a9:31:3d:6a:e6:87:95:c7:f4:a1:e5:6f:ff:21: 09:ef:ac:7d:7c:3d:27:5d:ec:37:9c:36:b0:1a:5f:7b:7f:de: 82:b5:13:a2:fc:5b:ef:1a:81:83:2c:42:08:20:b0:0a:7e:61: d0:ed:f6:d7:71:d8:a5:28:3c:22:8d:96:90:76:12:12:99:5e: 6b:1a:3d:48:14:45:1e:7a:a7:08:14:38:3d:32:75:a5:1d:1b: ce:c6:09:08:b4:58:5d:74:08:bf:a4:d6:e6:a3:e0:08:d8:3b: d6:11:bb:3d:87:d0:16:96:e3:e1:e4:67:80:aa:9b:93:4a:ea: 34:3d:10:8b:e7:42:6a:e6:62:ef:9f:3e:84:22:85:be:1d:3e: e3:6f:fa:1c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQy N0VCMzJBOTREQThDQkNCOUQ3RDM0M0ZFNDcxREYzNUM4NTAwMzAeFw0yNTA0MDkw NzA4MjlaFw0yNjA0MDkwNjQwMDdaMDMxMTAvBgNVBAMTKDcwQ0NFMkFDM0IyNDM5 MzRGOTc4RkFDOTEyQ0M3MjBDNjM0MjVEQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGhfcisq91AHs25cjxYkG9XVJGaTr3q53l14AeMbwBow+mdrCk udoIDl/fULmftug4bXMrmwvQmnoiTxXHF44ho7LAafQ0DPR5NGx5NJvpwacBEgo0 j/niGvw7dsOoFNFTArjGOkS+OoXc83DzuNs5bwewqv/VHnQt0CnZhzYRGuyGts70 Ql5LroWPCd8z4MoyfFs7vb7OpgONZguxPl9iMPKT2WkNVe3A5BtMHP8bya69pWyc NFRyOw+x0qrv7UlUC5NeiQBLTvfmU77d8nOwzwUQ4LtC/JSHHyVpFkcLVeXPoqWp BHsMpFh8LRwZ0PDm2fq/iAz177n8e0DC3WwFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUcMzirDskOTT5ePrJEsxyDGNCXb4wHwYDVR0jBBgwFoAU/SfrMqlNqMvLnX00 P+Rx3zXIUAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3 L19TZnJNcWxOcU12TG5YMDBQLVJ4M3pYSVVBTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvX1Nmck1xbE5xTXZMblgwMFAtUngzelhJVUFNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3L2NNemlyRHNrT1RUNWVQ ckpFc3h5REdOQ1hiNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADc8/gwDQYJKoZIhvcNAQELBQADggEBAEUilAI9xBmhQdub6is17XoOV6flF6fG nDZvLnW7V7ClTWRw6yWSHB52SbtKU965V8Y4RJfg5iGvVEhrXlKdEO/uioVkm25i oN3K/ySRnMiYbPEhlxzKSEkdKtDn3dxMhaNXHQJNWjeDhpFzcx0bcKSpMT1q5oeV x/Sh5W//IQnvrH18PSdd7DecNrAaX3t/3oK1E6L8W+8agYMsQgggsAp+YdDt9tdx 2KUoPCKNlpB2EhKZXmsaPUgURR56pwgUOD0ydaUdG87GCQi0WF10CL+k1uaj4AjY O9YRuz2H0BaW4+HkZ4Cqm5NK6jQ9EIvnQmrmYu+fPoQihb4dPuNv+hw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:27:24 2025 by rpki-client