$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3181/dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa File: dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa (raw, json) Hash identifier: acKWSIHX1ZbTm99RSURHM2kfCk/nXcKQCe+6vMB1VMY= Subject key identifier: 75:95:C4:A9:A1:B1:9B:30:33:4B:04:1F:39:2B:A3:E0:65:50:D2:08 Certificate issuer: /CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75 Certificate serial: 098B Authority key identifier: 13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa Signing time: Fri 17 Jan 2025 01:23:54 +0000 ROA not before: Fri 17 Jan 2025 01:23:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 38378 IP address blocks: 103.29.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75 Validity Not Before: Jan 17 01:23:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7595C4A9A1B19B30334B041F392BA3E06550D208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:34:6b:5e:3b:e1:ba:0b:0c:65:cc:b1:9d: 4b:6d:74:6d:a3:9e:b6:b4:04:e6:1f:b8:2c:39:00: df:c4:a1:24:6b:47:d2:a7:fa:46:97:70:fd:34:fe: 41:a6:5d:c5:7b:08:be:74:96:d4:3f:3d:a7:bd:85: 08:d7:96:58:78:98:85:7e:87:78:ac:37:38:c8:6b: 96:79:26:34:8b:8f:20:e8:4d:8d:60:75:8c:ab:b3: 8c:bb:f1:6a:f8:a2:14:19:98:e1:c3:db:b6:04:6f: 03:49:a2:82:62:57:b8:43:62:f8:70:07:5a:7c:76: f8:70:9f:e2:73:0e:9d:5e:6f:88:00:a2:2e:a4:2b: a5:7e:bd:bd:27:a3:f4:f1:39:66:dc:7a:93:f6:24: 3c:f4:04:c6:86:c8:f0:5e:34:2b:db:f8:ce:9d:8a: f6:3c:61:5e:fb:3d:72:a3:06:0a:7b:60:36:19:4b: 15:70:fa:99:65:21:c0:be:94:32:ae:a7:5c:6f:15: ed:5f:d2:ad:5a:a8:d5:3a:2d:84:72:83:a4:ef:98: d7:fe:12:2e:7a:74:af:c8:95:0e:da:1a:af:63:89: b3:98:ac:c0:ef:c7:53:a9:4f:22:db:c8:4c:1f:c9: 72:33:10:9f:bd:12:0c:c4:a3:f8:8e:dc:04:49:63: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:95:C4:A9:A1:B1:9B:30:33:4B:04:1F:39:2B:A3:E0:65:50:D2:08 X509v3 Authority Key Identifier: keyid:13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.29.24.0/23 Signature Algorithm: sha256WithRSAEncryption 83:36:d7:02:8d:fe:72:60:da:27:17:58:cd:e7:fb:a7:f5:e6: fb:da:05:5d:7d:c9:31:d0:87:9b:6c:a6:9c:52:45:dd:41:8f: 7f:9e:3f:98:7f:d2:29:42:f3:b1:aa:82:54:02:34:9e:72:ce: 4a:20:55:d6:df:35:cc:d2:05:13:8a:7b:a5:82:21:04:e1:51: fc:c8:60:58:97:04:5a:9a:f1:a8:db:5c:58:86:b8:29:35:16: d1:2e:cb:75:bf:99:31:c8:03:5a:fd:32:c2:e1:9d:0e:f6:93: 05:72:f0:21:34:74:a9:d8:c2:22:60:19:cc:a2:6b:3d:36:6d: 03:5f:00:15:19:92:7e:ad:2c:d3:73:f9:c6:55:03:43:0c:29: 33:03:f6:66:96:83:85:b8:2d:a9:21:0a:6a:dd:34:0c:51:72: e4:c6:77:c5:66:db:8f:4f:a6:24:34:0a:97:d0:d1:ef:0c:89: 85:6e:02:ad:ad:8d:af:88:fe:bd:5b:d0:16:43:dc:cb:4b:57: 6c:9f:f8:ee:f8:32:51:9c:96:db:b7:7b:18:e2:5d:85:37:08: bc:d6:6b:1c:e6:c4:28:7b:b2:b2:d9:22:3a:2f:0a:33:d7:87: 15:83:1e:1c:6a:9a:20:64:74:a8:f0:83:11:85:ec:4a:e9:3c: 35:c1:bb:f0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTM2 QTM5Qzc2MzBBM0M3NDkxMDUwRDNFOURCRDVCNkY3OTA2RkQ3NTAeFw0yNTAxMTcw MTIzNTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc1OTVDNEE5QTFCMTlC MzAzMzRCMDQxRjM5MkJBM0UwNjU1MEQyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoCDRrXjvhugsMZcyxnUttdG2jnra0BOYfuCw5AN/EoSRrR9Kn +kaXcP00/kGmXcV7CL50ltQ/Pae9hQjXllh4mIV+h3isNzjIa5Z5JjSLjyDoTY1g dYyrs4y78Wr4ohQZmOHD27YEbwNJooJiV7hDYvhwB1p8dvhwn+JzDp1eb4gAoi6k K6V+vb0no/TxOWbcepP2JDz0BMaGyPBeNCvb+M6divY8YV77PXKjBgp7YDYZSxVw +pllIcC+lDKup1xvFe1f0q1aqNU6LYRyg6TvmNf+Ei56dK/IlQ7aGq9jibOYrMDv x1OpTyLbyEwfyXIzEJ+9EgzEo/iO3ARJY9l3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUdZXEqaGxmzAzSwQfOSuj4GVQ0ggwHwYDVR0jBBgwFoAUE2o5x2MKPHSRBQ0+ nb1bb3kG/XUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE4 MS9FMm81eDJNS1BIU1JCUTAtbmIxYmIza0dfWFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0UybzV4Mk1LUEhTUkJRMC1uYjFiYjNrR19YVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxODEvZFpYRXFhR3htekF6 U3dRZk9TdWo0R1ZRMGdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWcdGDANBgkqhkiG9w0BAQsFAAOCAQEAgzbXAo3+cmDaJxdYzef7p/Xm+9oF XX3JMdCHm2ymnFJF3UGPf54/mH/SKULzsaqCVAI0nnLOSiBV1t81zNIFE4p7pYIh BOFR/MhgWJcEWprxqNtcWIa4KTUW0S7Ldb+ZMcgDWv0ywuGdDvaTBXLwITR0qdjC ImAZzKJrPTZtA18AFRmSfq0s03P5xlUDQwwpMwP2ZpaDhbgtqSEKat00DFFy5MZ3 xWbbj0+mJDQKl9DR7wyJhW4Cra2Nr4j+vVvQFkPcy0tXbJ/47vgyUZyW27d7GOJd hTcIvNZrHObEKHuystkiOi8KM9eHFYMeHGqaIGR0qPCDEYXsSuk8NcG78A== -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:49 2025 by rpki-client