$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/VGsDB4v3z34fgz6mTQpMiK6jV3E.roa File: VGsDB4v3z34fgz6mTQpMiK6jV3E.roa (raw, json) Hash identifier: ko073jVWr+L3zYWIN4KcfYIWAEUrrOH8DRWanxZK8OE= Subject key identifier: 54:6B:03:07:8B:F7:CF:7E:1F:83:3E:A6:4D:0A:4C:88:AE:A3:57:71 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 21E2 Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/VGsDB4v3z34fgz6mTQpMiK6jV3E.roa Signing time: Fri 17 Jan 2025 01:28:46 +0000 ROA not before: Fri 17 Jan 2025 01:28:46 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4538 IP address blocks: 103.152.186.0/24 maxlen: 24 103.152.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8674 (0x21e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 17 01:28:46 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=546B03078BF7CF7E1F833EA64D0A4C88AEA35771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:22:5d:c0:62:ce:46:82:e9:cf:5b:dc:bc:ab: e4:88:76:fb:1a:eb:17:06:0d:6d:e9:0d:26:86:92: ef:6c:c1:e8:b5:55:28:7d:7f:1f:a4:05:57:c8:ae: 7e:a2:d5:0d:9b:a6:37:eb:af:4e:bd:d3:4c:f9:2d: 94:b1:b1:7d:e0:47:29:93:b9:bc:46:03:87:52:65: f5:83:78:bb:62:be:8e:90:ea:31:a9:b0:b9:cd:7b: 24:f4:9d:a4:42:2e:3d:83:59:ba:db:07:e9:03:98: a1:0c:1a:bd:de:65:fa:7f:2b:d7:df:43:07:e9:b9: fc:d2:9b:0d:90:08:46:a7:6d:c1:68:8b:5b:07:ce: d0:67:74:a4:f1:68:fe:23:c6:17:e2:6c:07:f0:04: 0e:98:ea:c3:c4:88:2a:e3:46:ea:fb:19:5f:7c:f1: c6:55:1e:d8:3f:ea:f3:86:fe:8c:12:96:8f:21:1f: f7:2f:01:ed:64:41:5b:24:7b:d7:cd:48:27:44:35: f4:dd:c0:68:6b:30:1e:52:ab:9a:f2:03:45:8d:9f: aa:5e:69:43:b4:38:b3:64:b5:8a:97:2f:90:41:88: 75:a4:dd:34:61:82:5a:f4:f5:36:af:bd:99:32:7c: 3f:ea:d3:47:0d:56:7c:c5:08:65:0e:bd:a0:14:c9: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:03:07:8B:F7:CF:7E:1F:83:3E:A6:4D:0A:4C:88:AE:A3:57:71 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/VGsDB4v3z34fgz6mTQpMiK6jV3E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/23 Signature Algorithm: sha256WithRSAEncryption 61:e0:40:ae:d8:2f:e8:60:7a:6f:64:fe:c2:3a:f0:2c:3e:1b: f6:2d:09:4d:56:de:2d:a3:f6:b0:f8:9c:d0:a5:df:0f:11:8e: 55:79:8f:24:52:e4:40:11:c9:51:53:af:ca:31:9f:3e:83:38: b6:b9:ed:b2:54:f1:31:d1:1a:98:9a:ec:57:e2:0f:b0:5a:2d: 2b:d8:0f:54:91:ba:40:2f:da:65:13:4e:9b:57:ee:b1:56:57: dc:cd:7c:44:53:40:ba:b5:26:fb:9a:72:ab:25:ec:e9:1f:92: 4d:65:4e:bf:b2:5d:c3:7f:8f:b4:66:23:88:93:1d:0e:a2:55: 88:e3:17:45:c6:30:1f:be:8f:34:8c:e5:f4:52:68:31:87:2d: c2:fa:43:ef:03:8f:01:d9:df:0e:ce:29:cf:7c:67:fe:18:bd: e9:b7:6c:ea:99:69:c6:95:6a:00:c5:00:50:64:fe:83:be:f9: 70:a7:ca:7e:e2:79:de:a1:15:80:2c:a2:7f:4c:86:c1:15:f8: 18:b3:60:04:56:f2:00:62:1d:1e:9b:1b:ba:be:c8:91:f3:75: 10:6d:c6:83:4c:33:56:64:35:6c:ab:6d:dc:4d:4e:fd:1c:59: 2c:88:2a:0c:ca:94:1d:c6:ad:1b:f2:d9:7b:ca:b7:de:71:40: 7e:00:c0:f7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTAxMTcw MTI4NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU0NkIwMzA3OEJGN0NG N0UxRjgzM0VBNjREMEE0Qzg4QUVBMzU3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3Il3AYs5GgunPW9y8q+SIdvsa6xcGDW3pDSaGku9swei1VSh9 fx+kBVfIrn6i1Q2bpjfrr06900z5LZSxsX3gRymTubxGA4dSZfWDeLtivo6Q6jGp sLnNeyT0naRCLj2DWbrbB+kDmKEMGr3eZfp/K9ffQwfpufzSmw2QCEanbcFoi1sH ztBndKTxaP4jxhfibAfwBA6Y6sPEiCrjRur7GV988cZVHtg/6vOG/owSlo8hH/cv Ae1kQVske9fNSCdENfTdwGhrMB5Sq5ryA0WNn6peaUO0OLNktYqXL5BBiHWk3TRh glr09TavvZkyfD/q00cNVnzFCGUOvaAUyZutAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUVGsDB4v3z34fgz6mTQpMiK6jV3EwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvVkdzREI0djN6MzRm Z3o2bVRRcE1pSzZqVjNFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeYujANBgkqhkiG9w0BAQsFAAOCAQEAYeBArtgv6GB6b2T+wjrwLD4b9i0J TVbeLaP2sPic0KXfDxGOVXmPJFLkQBHJUVOvyjGfPoM4trntslTxMdEamJrsV+IP sFotK9gPVJG6QC/aZRNOm1fusVZX3M18RFNAurUm+5pyqyXs6R+STWVOv7Jdw3+P tGYjiJMdDqJViOMXRcYwH76PNIzl9FJoMYctwvpD7wOPAdnfDs4pz3xn/hi96bds 6plpxpVqAMUAUGT+g775cKfKfuJ53qEVgCyif0yGwRX4GLNgBFbyAGIdHpsbur7I kfN1EG3Gg0wzVmQ1bKtt3E1O/RxZLIgqDMqUHcatG/LZe8q33nFAfgDA9w== -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:22 2025 by rpki-client