$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa File: L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa (raw, json) Hash identifier: 3W/BxobxgZC4vP7dwk/CuOEyHKwlcWPXvgS+Vc0fJ0E= Subject key identifier: 2F:86:33:E9:B6:4C:5A:02:9A:AA:A6:2A:07:8C:2D:CB:66:BC:FD:40 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18B4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa Signing time: Fri 17 Jan 2025 01:25:26 +0000 ROA not before: Fri 17 Jan 2025 01:25:26 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6324 (0x18b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:26 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2F8633E9B64C5A029AAAA62A078C2DCB66BCFD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:05:af:4b:d6:8f:a7:75:4a:63:fc:48:95: 08:b7:40:ec:e5:3b:bd:c1:04:0a:0e:9c:84:4c:9c: 3e:de:2e:91:ee:56:7c:78:4b:84:78:ad:42:9d:2d: 6a:ee:8f:3a:c1:f8:13:88:bf:a3:e0:ea:56:f3:b8: 2f:37:60:a8:53:ee:0d:b4:22:65:46:70:5a:87:b6: 19:fc:b2:9e:0d:53:3d:4f:62:ac:81:39:7e:ad:c5: f3:79:4d:67:68:34:00:3b:24:ec:e4:83:2b:de:d2: 38:b7:39:84:5a:b5:fb:92:d1:dd:a2:12:71:3c:82: 83:94:09:b0:e2:bb:ee:e0:31:f2:dc:78:dd:73:db: cd:97:8e:c4:e3:5c:be:74:ce:13:68:7a:73:a8:38: f2:09:b0:f0:61:12:6d:b3:79:d2:29:95:05:7f:7a: 48:90:c1:27:37:86:5e:5e:37:5b:bc:b3:f1:19:6a: 1b:77:4e:09:6c:f7:65:bc:5f:04:92:d0:fa:04:c2: 70:00:ad:60:be:fe:78:09:78:ed:39:a3:40:7c:b1: 2f:92:70:8e:b2:d0:21:26:98:ad:9d:87:f8:f2:3a: e8:fa:a5:fc:56:f4:2f:da:77:6d:a2:4c:54:3b:38: c3:f6:80:e6:cb:bd:95:ad:af:92:c0:c9:46:db:12: 50:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:33:E9:B6:4C:5A:02:9A:AA:A6:2A:07:8C:2D:CB:66:BC:FD:40 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/L4Yz6bZMWgKaqqYqB4wty2a8_UA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.51.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:eb:d6:f6:f0:99:f9:d6:92:1a:2a:bd:79:fa:21:ae:c7:d6: 35:6d:5d:65:00:ea:e5:b3:20:d3:28:10:7b:b4:f0:35:aa:50: c0:f3:2f:f7:5a:46:81:4c:21:ec:00:89:29:f0:32:84:03:d0: fe:09:1e:d6:94:bf:bb:56:b7:51:8d:ac:6a:25:de:ae:48:da: da:e4:b5:32:37:bb:8a:38:5d:0f:a2:39:10:c1:b2:24:55:39: f2:f0:bd:25:8b:6a:68:e2:31:03:5b:41:db:28:26:49:15:ad: c1:67:2d:f8:b2:a6:dd:47:0f:ee:d7:cd:4d:d3:9b:fd:75:f6: 75:96:87:75:e9:06:af:89:c3:cd:84:cf:65:c4:20:a5:13:df: e4:ef:10:a8:a0:75:27:f2:31:1d:1b:e7:85:7f:11:ca:d0:55: 00:9a:0b:63:58:a5:df:42:e2:04:77:05:96:e9:7d:be:56:4d: e2:65:07:1f:c1:d7:45:ff:7e:a0:a5:d0:d7:51:28:1e:4f:d3: b6:62:2b:49:56:ce:2d:23:7e:97:ee:c1:bc:ec:f5:19:66:4d: 8b:02:fd:23:c8:e2:d0:e6:85:7c:48:c4:2b:b4:1b:8c:3c:d7: 7b:c8:b8:fa:5b:dd:90:c1:a4:1a:3a:15:bb:59:44:1b:14:15: e7:bf:b6:ba -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJGODYzM0U5QjY0QzVB MDI5QUFBQTYyQTA3OEMyRENCNjZCQ0ZENDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC83QWvS9aPp3VKY/xIlQi3QOzlO73BBAoOnIRMnD7eLpHuVnx4 S4R4rUKdLWrujzrB+BOIv6Pg6lbzuC83YKhT7g20ImVGcFqHthn8sp4NUz1PYqyB OX6txfN5TWdoNAA7JOzkgyve0ji3OYRatfuS0d2iEnE8goOUCbDiu+7gMfLceN1z 282XjsTjXL50zhNoenOoOPIJsPBhEm2zedIplQV/ekiQwSc3hl5eN1u8s/EZaht3 Tgls92W8XwSS0PoEwnAArWC+/ngJeO05o0B8sS+ScI6y0CEmmK2dh/jyOuj6pfxW 9C/ad22iTFQ7OMP2gObLvZWtr5LAyUbbElB5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUL4Yz6bZMWgKaqqYqB4wty2a8/UAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0w0WXo2YlpNV2dLYXFx WXFCNHd0eTJhOF9VQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3TMwDQYJKoZIhvcNAQELBQADggEBAI7r1vbwmfnWkhoqvXn6Ia7H1jVtXWUA 6uWzINMoEHu08DWqUMDzL/daRoFMIewAiSnwMoQD0P4JHtaUv7tWt1GNrGol3q5I 2trktTI3u4o4XQ+iORDBsiRVOfLwvSWLamjiMQNbQdsoJkkVrcFnLfiypt1HD+7X zU3Tm/119nWWh3XpBq+Jw82Ez2XEIKUT3+TvEKigdSfyMR0b54V/EcrQVQCaC2NY pd9C4gR3BZbpfb5WTeJlBx/B10X/fqCl0NdRKB5P07ZiK0lWzi0jfpfuwbzs9Rlm TYsC/SPI4tDmhXxIxCu0G4w813vIuPpb3ZDBpBo6FbtZRBsUFee/tro= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:07 2025 by rpki-client