$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa File: _YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa (raw, json) Hash identifier: OlKriS0UgPDTDV4pnv5a+oEs9F/lQhVQQLKu/XBwzjc= Subject key identifier: FD:80:BF:65:DB:1B:A6:2A:BE:51:34:F5:84:5A:95:C7:CF:A1:7E:6E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 182B Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa Signing time: Fri 17 Jan 2025 01:24:42 +0000 ROA not before: Fri 17 Jan 2025 01:24:42 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 103.10.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6187 (0x182b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:42 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=FD80BF65DB1BA62ABE5134F5845A95C7CFA17E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:d7:ca:99:b9:6f:af:96:0a:9e:29:5d:0f: bc:c8:6c:91:af:bc:91:99:b2:39:fb:81:a6:16:ff: f7:bf:b8:80:38:e7:82:b6:e0:bb:e8:99:7e:13:b7: c3:7a:83:27:55:ba:40:41:e3:03:19:22:7e:95:2a: ed:27:46:2c:cc:3d:02:0c:21:5c:4e:04:2e:46:fa: 5c:82:92:5b:f4:4b:26:1c:2c:19:3e:d6:28:7e:ca: e6:b6:87:9d:19:77:78:05:ec:22:42:f3:07:48:74: c2:82:c4:c4:4a:90:3e:66:bb:20:62:63:74:15:7e: 0d:83:0a:78:60:92:db:ed:bb:27:5f:66:4c:df:8c: f3:ba:6f:93:c7:24:5d:d7:94:87:63:1b:60:3d:89: 2f:7f:78:25:db:c9:52:d4:be:ce:b7:8c:39:59:cd: 48:c2:cd:5f:fe:0f:49:d2:56:d6:30:5f:7d:6e:0f: 9c:67:53:8d:ca:b4:0f:5b:ac:64:65:19:14:30:19: f0:91:7a:4a:28:ce:89:07:3d:63:79:b3:61:75:f3: 94:97:87:5c:1e:12:e2:f9:b1:db:b6:03:46:53:7e: 13:aa:ec:18:c8:27:43:6e:c6:9a:5d:5a:ef:f9:7c: b0:7b:19:a1:de:83:37:64:b2:ea:6b:58:db:67:89: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:80:BF:65:DB:1B:A6:2A:BE:51:34:F5:84:5A:95:C7:CF:A1:7E:6E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_YC_Zdsbpiq-UTT1hFqVx8-hfm4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.10.3.0/24 Signature Algorithm: sha256WithRSAEncryption 83:4b:03:e3:38:78:8e:fc:09:88:74:13:e9:14:1a:b3:b8:e7: bd:6e:c1:74:49:9d:5f:ac:dd:f6:d3:21:10:7e:6a:2d:97:dd: d6:15:8f:c8:3e:08:f1:da:4d:ab:57:21:90:bd:10:c3:a6:14: fb:bd:3e:51:95:2d:cb:1e:fc:e8:ca:8d:41:bc:7e:95:3f:85: fa:8e:11:4f:6c:82:6a:c2:05:f7:88:61:98:51:b7:31:2c:ac: aa:5e:e9:4e:55:91:27:20:81:0b:45:ed:dc:4c:9c:14:28:26: 7d:ea:f1:c2:c0:b5:9f:6c:43:6f:fc:f9:d7:cb:27:e4:87:62: d6:60:f2:b0:88:e5:88:52:91:24:1f:2b:ab:e0:40:c8:b3:69: 1d:68:88:16:76:c9:0f:af:c9:bc:ed:f4:60:65:7e:fa:c9:2a: 64:2d:2e:a1:35:5c:a1:3f:02:91:f6:37:92:15:13:d5:e7:ae: 6e:f2:b2:4a:10:69:cc:13:bf:62:f2:5f:75:bd:36:84:ea:b7: 68:a9:28:d0:22:cc:0a:b6:9d:1b:1f:6e:ca:d0:0f:a5:7b:31: 6a:a4:f7:bc:08:c4:19:3e:28:6d:72:a3:d5:8f:ab:2a:04:45: db:da:61:31:ed:10:61:59:ad:11:a3:59:26:5a:9a:a3:5d:42: af:57:86:1c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZEODBCRjY1REIxQkE2 MkFCRTUxMzRGNTg0NUE5NUM3Q0ZBMTdFNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2KdfKmblvr5YKnildD7zIbJGvvJGZsjn7gaYW//e/uIA454K2 4LvomX4Tt8N6gydVukBB4wMZIn6VKu0nRizMPQIMIVxOBC5G+lyCklv0SyYcLBk+ 1ih+yua2h50Zd3gF7CJC8wdIdMKCxMRKkD5muyBiY3QVfg2DCnhgktvtuydfZkzf jPO6b5PHJF3XlIdjG2A9iS9/eCXbyVLUvs63jDlZzUjCzV/+D0nSVtYwX31uD5xn U43KtA9brGRlGRQwGfCRekoozokHPWN5s2F185SXh1weEuL5sdu2A0ZTfhOq7BjI J0NuxppdWu/5fLB7GaHegzdksuprWNtnicGRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/YC/Zdsbpiq+UTT1hFqVx8+hfm4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L19ZQ19aZHNicGlxLVVU VDFoRnFWeDgtaGZtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnCgMwDQYJKoZIhvcNAQELBQADggEBAINLA+M4eI78CYh0E+kUGrO4571uwXRJ nV+s3fbTIRB+ai2X3dYVj8g+CPHaTatXIZC9EMOmFPu9PlGVLcse/OjKjUG8fpU/ hfqOEU9sgmrCBfeIYZhRtzEsrKpe6U5VkScggQtF7dxMnBQoJn3q8cLAtZ9sQ2/8 +dfLJ+SHYtZg8rCI5YhSkSQfK6vgQMizaR1oiBZ2yQ+vybzt9GBlfvrJKmQtLqE1 XKE/ApH2N5IVE9Xnrm7yskoQacwTv2LyX3W9NoTqt2ipKNAizAq2nRsfbsrQD6V7 MWqk97wIxBk+KG1yo9WPqyoERdvaYTHtEGFZrRGjWSZamqNdQq9Xhhw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:25 2025 by rpki-client