$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa File: YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa (raw, json) Hash identifier: OEpMQGVnGi2Yl6RbwUeXnjcKraOUhVGzsG3FaX3gIfE= Subject key identifier: 61:4E:C2:A3:BB:2A:20:3F:58:40:FA:21:0C:DF:51:35:0D:16:82:0E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18EC Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa Signing time: Fri 17 Jan 2025 01:25:48 +0000 ROA not before: Fri 17 Jan 2025 01:25:48 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.220.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6380 (0x18ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:48 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=614EC2A3BB2A203F5840FA210CDF51350D16820E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:21:8b:fb:f7:56:9d:1b:0b:6e:1c:83:c8: 58:3c:e5:b9:64:9e:16:09:71:5f:ac:e9:9a:dc:32: 6e:93:3a:16:cd:b2:6c:c5:dd:cd:ec:17:da:b8:bc: a6:54:8b:ad:2d:27:67:40:e1:22:2d:13:43:08:e5: f8:93:9c:c2:78:06:7e:11:0c:b3:33:34:dd:a0:4e: 87:28:fb:22:4f:cb:9f:00:e2:4c:95:9a:eb:d2:fb: eb:99:d8:dc:c9:c1:83:9f:e5:58:c1:68:92:9c:f4: 5c:51:33:3e:1c:74:80:e1:cc:70:10:e3:70:87:16: d8:3f:a1:7b:8d:31:b1:ca:0f:58:65:aa:5b:3f:17: 6d:1a:6e:97:61:73:bb:e9:30:5f:38:d8:0d:3c:44: 66:1c:fb:6e:4f:fb:f3:5a:1e:0d:25:af:ee:01:5a: ab:c8:b9:3f:10:9b:8f:3b:ca:35:28:4b:ca:e5:26: 74:33:6d:05:88:03:20:a1:83:ec:1b:49:9f:a6:dc: 90:7f:22:25:bc:e5:9f:fd:2d:74:1c:ad:b5:5b:38: 3d:91:a2:a1:16:79:03:23:d0:b6:1d:07:22:34:99: d6:f0:c6:7d:51:b5:56:a3:5a:04:06:ad:75:5c:69: 98:7a:87:74:c5:91:9d:59:d0:13:c9:7a:a9:df:50: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4E:C2:A3:BB:2A:20:3F:58:40:FA:21:0C:DF:51:35:0D:16:82:0E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YU7Co7sqID9YQPohDN9RNQ0Wgg4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.252.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:69:89:4d:ec:f1:c0:46:c5:c3:48:35:b2:96:36:f7:33:85: 99:f9:3f:7d:af:7c:e1:e6:08:6f:61:c8:a7:fa:36:f2:e9:1e: 9c:72:9a:8f:b9:4a:73:05:4f:09:25:01:97:d2:36:71:23:a1: 26:44:c2:8e:ed:ac:63:72:72:30:ea:de:3b:92:d6:42:54:c6: dc:67:06:f0:5f:d2:9f:a2:d3:ac:4d:c3:a7:69:6f:a0:09:d9: a2:f4:db:5b:e5:65:64:f1:cc:7e:1a:db:5d:a1:d2:0f:3b:5a: 4c:7f:dc:1a:cf:80:32:5d:62:6d:ce:66:49:1a:93:c5:f0:7c: 17:2e:c2:5a:30:90:e8:b5:4a:e1:b8:27:a5:57:2b:67:73:47: b0:6d:a2:b3:b2:8a:df:68:25:46:1d:41:d2:53:1f:f4:f1:03: 01:36:3e:4f:ca:0d:45:34:e0:96:5d:6d:b2:6a:18:1c:e7:16: 63:9f:6a:b8:59:74:56:d7:fe:6f:38:53:ef:82:bf:a6:59:a0: 2a:da:b3:80:9b:79:b0:2f:b7:16:fe:12:49:a4:bc:81:26:54: be:e9:64:3f:a8:3a:e0:69:38:35:15:dc:06:6c:3b:41:ea:63: 3b:75:81:2d:45:ad:39:72:c4:a1:75:1d:a4:37:73:40:4e:4c: 37:b6:43:96 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYxNEVDMkEzQkIyQTIw M0Y1ODQwRkEyMTBDREY1MTM1MEQxNjgyMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHxCGL+/dWnRsLbhyDyFg85blknhYJcV+s6ZrcMm6TOhbNsmzF 3c3sF9q4vKZUi60tJ2dA4SItE0MI5fiTnMJ4Bn4RDLMzNN2gToco+yJPy58A4kyV muvS++uZ2NzJwYOf5VjBaJKc9FxRMz4cdIDhzHAQ43CHFtg/oXuNMbHKD1hlqls/ F20abpdhc7vpMF842A08RGYc+25P+/NaHg0lr+4BWqvIuT8Qm487yjUoS8rlJnQz bQWIAyChg+wbSZ+m3JB/IiW85Z/9LXQcrbVbOD2RoqEWeQMj0LYdByI0mdbwxn1R tVajWgQGrXVcaZh6h3TFkZ1Z0BPJeqnfUCUzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYU7Co7sqID9YQPohDN9RNQ0Wgg4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1lVN0NvN3NxSUQ5WVFQ b2hETjlSTlEwV2dnNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PwwDQYJKoZIhvcNAQELBQADggEBAF5piU3s8cBGxcNINbKWNvczhZn5P32v fOHmCG9hyKf6NvLpHpxymo+5SnMFTwklAZfSNnEjoSZEwo7trGNycjDq3juS1kJU xtxnBvBf0p+i06xNw6dpb6AJ2aL021vlZWTxzH4a212h0g87Wkx/3BrPgDJdYm3O Zkkak8XwfBcuwlowkOi1SuG4J6VXK2dzR7BtorOyit9oJUYdQdJTH/TxAwE2Pk/K DUU04JZdbbJqGBznFmOfarhZdFbX/m84U++Cv6ZZoCras4CbebAvtxb+EkmkvIEm VL7pZD+oOuBpODUV3AZsO0HqYzt1gS1FrTlyxKF1HaQ3c0BOTDe2Q5Y= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:25 2025 by rpki-client