$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/88UWKDoFzQYMKGF0TwNoEpNbRbg.roa File: 88UWKDoFzQYMKGF0TwNoEpNbRbg.roa (raw, json) Hash identifier: AvsmW6AeexZCua22EOu9L0XeyLAUUb2nLCYOsWpQy3Y= Subject key identifier: F3:C5:16:28:3A:05:CD:06:0C:28:61:74:4F:03:68:12:93:5B:45:B8 Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 06DD Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/88UWKDoFzQYMKGF0TwNoEpNbRbg.roa Signing time: Tue 10 Jun 2025 01:40:24 +0000 ROA not before: Tue 10 Jun 2025 01:40:24 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146761 IP address blocks: 103.183.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 17:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Jun 10 01:40:24 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F3C516283A05CD060C2861744F036812935B45B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:71:e0:7a:f0:26:f3:30:df:4d:2c:16:ca: 38:47:1b:6f:f1:1b:67:68:c6:9f:0b:07:91:cd:c9: d2:9b:d2:21:82:4d:6f:74:d4:5b:16:9b:31:23:e8: c8:bb:66:c6:bc:ea:b7:73:df:19:c8:bd:ae:04:1e: cf:0a:bc:cf:08:e2:7e:4d:09:b6:7a:11:6b:a5:e3: cf:39:bd:12:59:70:b1:4f:f8:d9:6b:f5:b9:51:ce: 69:b6:1e:96:78:31:ae:05:83:e5:52:8d:27:07:64: f7:7a:4c:a1:42:1e:5a:8c:fc:2e:f4:48:96:8a:fc: 37:de:23:3c:cb:b3:7a:0e:d2:f5:43:fb:9b:b4:72: 88:ed:76:e0:b2:4d:a4:ff:69:9a:96:70:96:9e:57: e3:32:a2:8c:10:90:8f:e3:29:83:78:23:d1:33:9c: 31:8d:b9:82:bb:7b:d5:c5:b2:24:a3:0c:fe:0f:f0: 19:b1:a3:77:d0:53:fc:98:82:6c:6f:ad:e7:59:0c: 57:1f:dc:12:db:ea:50:66:59:63:29:46:56:c3:c8: 9a:16:5d:dc:5c:ca:cd:9d:db:8a:56:fc:8f:f0:c8: bb:1a:17:1e:d9:9c:88:14:ea:65:f9:57:73:38:ab: d4:91:d5:1a:1e:d8:3e:33:40:54:12:28:fa:a8:b2: d9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C5:16:28:3A:05:CD:06:0C:28:61:74:4F:03:68:12:93:5B:45:B8 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/88UWKDoFzQYMKGF0TwNoEpNbRbg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.183.26.0/23 Signature Algorithm: sha256WithRSAEncryption 17:20:07:c6:8a:da:a8:4e:17:b6:56:11:7e:fe:56:8c:95:71: 82:20:87:dc:54:b3:a4:76:e2:07:76:61:a5:9f:3a:f4:50:f5: a3:2c:9a:f9:67:6b:ee:0d:9b:f7:03:1c:68:f0:bc:40:e5:df: 54:63:39:22:52:c0:06:30:4b:ad:0e:69:5f:13:79:f3:31:34: b5:be:2d:57:df:3b:de:00:e6:4b:5b:d8:6e:8f:62:c8:71:eb: df:a9:ed:07:24:fc:87:ab:15:aa:42:5b:9c:3d:1c:72:b6:fe: 49:e8:a6:0d:06:38:28:5c:c9:a4:2e:81:a1:db:65:58:31:0d: 2d:06:34:18:cc:22:1b:d1:3c:c1:18:70:cb:d9:92:de:12:f6: f4:f9:dd:1b:59:5b:b4:c4:3e:b1:1d:1c:85:d7:26:89:f9:22: 7d:69:0a:ed:32:e5:ac:19:70:04:e2:4a:f7:10:cf:4c:d7:1b: da:85:e1:9b:fb:67:61:ef:a0:2c:80:18:8b:a2:37:28:85:95: f9:51:8a:1f:f9:b3:e8:5b:be:1a:30:2a:cd:fc:be:0a:b1:5a: 8e:d8:74:a4:2c:ec:0e:68:aa:fc:e3:7b:51:10:bb:f2:35:83: 74:33:aa:59:08:19:a8:3c:d9:90:07:b7:2a:9c:53:94:40:28: 81:cc:c6:3b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA2MTAw MTQwMjRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYzQzUxNjI4M0EwNUNE MDYwQzI4NjE3NDRGMDM2ODEyOTM1QjQ1QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCym3HgevAm8zDfTSwWyjhHG2/xG2doxp8LB5HNydKb0iGCTW90 1FsWmzEj6Mi7Zsa86rdz3xnIva4EHs8KvM8I4n5NCbZ6EWul4885vRJZcLFP+Nlr 9blRzmm2HpZ4Ma4Fg+VSjScHZPd6TKFCHlqM/C70SJaK/DfeIzzLs3oO0vVD+5u0 cojtduCyTaT/aZqWcJaeV+MyoowQkI/jKYN4I9EznDGNuYK7e9XFsiSjDP4P8Bmx o3fQU/yYgmxvredZDFcf3BLb6lBmWWMpRlbDyJoWXdxcys2d24pW/I/wyLsaFx7Z nIgU6mX5V3M4q9SR1Roe2D4zQFQSKPqostmlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU88UWKDoFzQYMKGF0TwNoEpNbRbgwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvODhVV0tEb0Z6UVlN S0dGMFR3Tm9FcE5iUmJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWe3GjANBgkqhkiG9w0BAQsFAAOCAQEAFyAHxoraqE4XtlYRfv5WjJVxgiCH 3FSzpHbiB3ZhpZ869FD1oyya+Wdr7g2b9wMcaPC8QOXfVGM5IlLABjBLrQ5pXxN5 8zE0tb4tV9873gDmS1vYbo9iyHHr36ntByT8h6sVqkJbnD0ccrb+SeimDQY4KFzJ pC6BodtlWDENLQY0GMwiG9E8wRhwy9mS3hL29PndG1lbtMQ+sR0chdcmifkifWkK 7TLlrBlwBOJK9xDPTNcb2oXhm/tnYe+gLIAYi6I3KIWV+VGKH/mz6Fu+GjAqzfy+ CrFajth0pCzsDmiq/ON7URC78jWDdDOqWQgZqDzZkAe3KpxTlEAogczGOw== -----END CERTIFICATE-----Generated at Sun Jun 22 16:42:13 2025 by rpki-client