$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa File: fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa (raw, json) Hash identifier: R7v2SzSC8eE0bISdTQ+tSXQrKRlK1YDjTwxvTe574Cs= Subject key identifier: 7D:46:9A:FA:7C:D3:FD:BC:D2:68:9E:4E:B3:82:EF:84:79:B9:CF:F1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1816 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa Signing time: Fri 17 Jan 2025 01:24:33 +0000 ROA not before: Fri 17 Jan 2025 01:24:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.220.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6166 (0x1816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7D469AFA7CD3FDBCD2689E4EB382EF8479B9CFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:84:98:db:30:5f:ab:36:32:93:4c:db:0b: fd:40:7c:4b:8d:cd:f2:2c:5e:90:83:b8:73:e2:02: 36:4a:a4:32:ce:43:d2:3b:48:9a:c6:3b:85:ba:80: 2e:af:29:77:21:5c:36:aa:88:c0:f3:4c:07:7b:a5: bc:3d:1b:b1:49:b4:24:ab:54:a7:04:99:33:51:94: db:15:a4:ae:b9:0b:39:e2:ea:db:f0:25:98:36:b6: 53:d3:50:81:5d:c9:b7:0d:83:d8:35:ec:2f:de:2e: 3d:c3:0a:b9:e6:b6:ac:cb:8d:9c:0d:77:d5:37:62: b2:ec:38:41:33:61:13:6a:56:94:fd:3e:97:55:0f: 89:94:ff:5c:5e:39:56:db:35:d4:45:d4:b3:a9:ac: 38:d4:f4:5e:ab:d1:91:40:0d:21:e6:31:cf:ac:2c: 55:da:87:e1:e9:2c:47:69:15:d5:3d:19:96:be:e7: 1b:eb:06:ab:e3:d0:7d:f2:aa:57:c3:96:f9:e2:a8: 3a:d8:c3:58:89:be:37:e0:de:16:3d:4d:9e:f5:82: f7:dd:4f:73:16:16:fe:0f:43:31:8c:37:35:14:a8: 88:3e:e4:c9:06:60:f0:50:6a:25:42:cb:1d:6e:35: 53:ea:00:26:59:77:1b:c6:92:3c:43:db:ad:b3:52: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:46:9A:FA:7C:D3:FD:BC:D2:68:9E:4E:B3:82:EF:84:79:B9:CF:F1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.251.0/24 Signature Algorithm: sha256WithRSAEncryption cc:f7:ea:9f:17:fa:9a:23:47:fd:2b:20:e5:9a:cf:79:f3:82: 91:67:f4:ff:5e:29:84:88:66:48:2a:8f:ad:a8:c2:70:b5:1d: fc:15:6e:2c:08:1f:c2:58:88:40:cc:67:98:05:23:94:64:c8: 41:33:a0:ae:87:d9:b5:21:d4:ea:9c:a8:59:eb:9b:d3:88:6f: 0f:03:1c:e2:4d:42:63:48:cd:09:fc:d7:b9:d9:0a:8d:d6:cc: 7f:22:07:bb:7b:0d:6f:ce:f0:01:80:94:e0:5b:7e:68:d0:b4: 75:52:5a:6e:7d:e1:25:0c:9f:40:7d:a7:13:ed:66:f0:08:84: f7:6e:e7:07:67:33:6d:bb:cc:4e:c7:6d:5b:7c:5e:7b:eb:6b: 66:48:9d:78:8b:67:b9:5f:db:55:24:18:86:2a:55:5c:28:a7: 2e:d4:e2:c9:b5:81:98:dd:7a:54:03:06:d4:d4:a7:50:8c:9c: c9:ce:f2:9b:2a:2e:ed:d7:2f:ef:ae:2c:e8:8d:cc:89:03:ee: dd:72:74:b1:72:85:7f:a0:e6:07:b4:bd:f2:1e:a5:a2:e9:f8: f5:48:25:cd:bb:34:82:b9:b6:e2:57:95:79:30:39:61:1b:1a: 77:fe:22:17:6c:dd:97:8d:70:19:54:e2:a0:d9:c5:94:69:1c: ba:82:a9:f5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdENDY5QUZBN0NEM0ZE QkNEMjY4OUU0RUIzODJFRjg0NzlCOUNGRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtBoSY2zBfqzYyk0zbC/1AfEuNzfIsXpCDuHPiAjZKpDLOQ9I7 SJrGO4W6gC6vKXchXDaqiMDzTAd7pbw9G7FJtCSrVKcEmTNRlNsVpK65Czni6tvw JZg2tlPTUIFdybcNg9g17C/eLj3DCrnmtqzLjZwNd9U3YrLsOEEzYRNqVpT9PpdV D4mU/1xeOVbbNdRF1LOprDjU9F6r0ZFADSHmMc+sLFXah+HpLEdpFdU9GZa+5xvr Bqvj0H3yqlfDlvniqDrYw1iJvjfg3hY9TZ71gvfdT3MWFv4PQzGMNzUUqIg+5MkG YPBQaiVCyx1uNVPqACZZdxvGkjxD262zUgdVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfUaa+nzT/bzSaJ5Os4LvhHm5z/EwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2ZVYWEtbnpUX2J6U2FK NU9zNEx2aEhtNXpfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PswDQYJKoZIhvcNAQELBQADggEBAMz36p8X+pojR/0rIOWaz3nzgpFn9P9e KYSIZkgqj62ownC1HfwVbiwIH8JYiEDMZ5gFI5RkyEEzoK6H2bUh1OqcqFnrm9OI bw8DHOJNQmNIzQn817nZCo3WzH8iB7t7DW/O8AGAlOBbfmjQtHVSWm594SUMn0B9 pxPtZvAIhPdu5wdnM227zE7HbVt8Xnvra2ZInXiLZ7lf21UkGIYqVVwopy7U4sm1 gZjdelQDBtTUp1CMnMnO8psqLu3XL++uLOiNzIkD7t1ydLFyhX+g5ge0vfIepaLp +PVIJc27NIK5tuJXlXkwOWEbGnf+Ihds3ZeNcBlU4qDZxZRpHLqCqfU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:16 2025 by rpki-client