$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/3CfhItJuTD6YcZOf4dGRgLCyLnk.roa File: 3CfhItJuTD6YcZOf4dGRgLCyLnk.roa (raw, json) Hash identifier: Yr2TtYz0Jmy9vk96z+H1KPmDNXvxDzY+tBB3ofIrHtI= Subject key identifier: DC:27:E1:22:D2:6E:4C:3E:98:71:93:9F:E1:D1:91:80:B0:B2:2E:79 Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 12B2 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/3CfhItJuTD6YcZOf4dGRgLCyLnk.roa Signing time: Fri 17 Jan 2025 01:26:14 +0000 ROA not before: Fri 17 Jan 2025 01:26:14 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 58593 IP address blocks: 163.228.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4786 (0x12b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Jan 17 01:26:14 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DC27E122D26E4C3E9871939FE1D19180B0B22E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:c5:9e:14:dc:15:b0:0f:0d:04:9e:17:f3: 4f:d6:1c:94:d7:bb:ea:2b:ee:6e:c0:e6:58:bc:13: d9:75:e3:6b:e3:0a:29:17:3d:dc:e1:a5:9d:29:da: 9e:70:be:84:0a:4a:ee:f8:0d:bc:66:e9:91:c7:f7: f8:6e:a7:e9:fb:ea:a4:84:59:82:b7:89:66:63:21: b6:fb:ae:30:8a:93:e3:8b:10:38:2b:b1:c9:af:83: b0:34:29:f4:77:14:28:26:2f:df:ce:db:65:3b:4b: 95:b0:b2:67:6e:02:71:40:12:d7:3a:d9:ad:92:df: fe:86:3b:c1:6c:0b:07:b3:1b:4c:35:cd:aa:f9:ac: e7:29:8f:9c:2c:d9:14:cc:36:da:0a:41:6a:c5:d2: 22:0d:07:3d:a9:4a:9d:39:bf:a8:74:c7:b8:0c:f5: d4:bb:25:59:7e:9f:14:97:ae:eb:c3:6b:80:37:39: 87:a5:49:74:2c:dd:f3:35:52:21:94:15:16:87:db: e4:7d:f3:b0:2f:09:a4:c1:9b:ea:dd:65:fd:5b:40: 97:62:45:53:85:0a:fd:45:8a:00:70:3a:26:1a:6f: 3b:ef:9a:d7:ef:20:0d:29:d7:1d:e2:b1:60:c2:13: 10:6c:7e:9c:b0:a2:fb:cc:2b:b0:c1:0e:d6:c1:4e: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:27:E1:22:D2:6E:4C:3E:98:71:93:9F:E1:D1:91:80:B0:B2:2E:79 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/3CfhItJuTD6YcZOf4dGRgLCyLnk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:c3:e3:6a:29:73:ba:fc:14:96:62:8b:31:f2:1b:fc:8d:93: 72:6d:41:18:52:8a:1b:93:dc:c9:22:34:d5:da:0a:73:98:5e: 86:04:32:db:35:3d:10:3b:a7:8a:c7:8e:e1:66:89:e1:50:a7: 95:e3:51:a3:79:83:71:8c:eb:a5:a8:c5:16:40:b0:fe:d2:11: e4:fb:7b:7f:0e:dc:51:68:59:0d:24:1c:27:d3:3e:8f:fc:98: d6:f2:b7:54:17:21:da:09:8a:12:a8:b4:e1:c2:84:5b:87:63: 48:ba:70:4b:f7:0d:f3:07:e6:a9:10:91:32:90:68:ac:19:23: b0:b9:05:f1:37:fb:0b:ec:8d:af:f8:41:2e:77:e4:b8:88:85: 1c:81:6b:89:85:42:6b:b2:e5:60:b1:44:e5:70:9e:e2:5e:bd: 9e:12:8a:17:62:41:58:1a:60:85:c0:87:7d:24:1c:15:77:ab: 99:ab:5b:b7:24:59:ab:94:2c:d2:d4:1d:ff:c9:f5:62:6a:bb: 10:c9:0c:28:52:77:e0:b2:8f:0f:dd:6f:cd:d9:85:77:71:59: 1c:df:b7:2d:17:5d:f8:51:2b:25:34:64:be:99:be:2e:86:83: cc:59:f8:2b:7f:89:8b:50:fe:b2:bf:7d:b0:b9:82:5b:18:02: 8b:32:c1:12 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICErIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNTAxMTcw MTI2MTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERDMjdFMTIyRDI2RTRD M0U5ODcxOTM5RkUxRDE5MTgwQjBCMjJFNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPJcWeFNwVsA8NBJ4X80/WHJTXu+or7m7A5li8E9l142vjCikX PdzhpZ0p2p5wvoQKSu74Dbxm6ZHH9/hup+n76qSEWYK3iWZjIbb7rjCKk+OLEDgr scmvg7A0KfR3FCgmL9/O22U7S5WwsmduAnFAEtc62a2S3/6GO8FsCwezG0w1zar5 rOcpj5ws2RTMNtoKQWrF0iINBz2pSp05v6h0x7gM9dS7JVl+nxSXruvDa4A3OYel SXQs3fM1UiGUFRaH2+R987AvCaTBm+rdZf1bQJdiRVOFCv1FigBwOiYabzvvmtfv IA0p1x3isWDCExBsfpywovvMK7DBDtbBTtntAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU3CfhItJuTD6YcZOf4dGRgLCyLnkwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvM0NmaEl0SnVURDZZ Y1pPZjRkR1JnTEN5TG5rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAKPkMA0GCSqGSIb3DQEBCwUAA4IBAQARw+NqKXO6/BSWYosx8hv8jZNybUEY Uoobk9zJIjTV2gpzmF6GBDLbNT0QO6eKx47hZonhUKeV41GjeYNxjOulqMUWQLD+ 0hHk+3t/DtxRaFkNJBwn0z6P/JjW8rdUFyHaCYoSqLThwoRbh2NIunBL9w3zB+ap EJEykGisGSOwuQXxN/sL7I2v+EEud+S4iIUcgWuJhUJrsuVgsUTlcJ7iXr2eEooX YkFYGmCFwId9JBwVd6uZq1u3JFmrlCzS1B3/yfViarsQyQwoUnfgso8P3W/N2YV3 cVkc37ctF134USslNGS+mb4uhoPMWfgrf4mLUP6yv32wuYJbGAKLMsES -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:29 2025 by rpki-client