$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa File: tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa (raw, json) Hash identifier: rYdda4Gf8kifpaUGpeMjtLg5sr+o7BCVCLuv5fh2AgM= Subject key identifier: B6:6D:19:23:DB:92:07:6D:F3:2A:26:36:3B:60:14:22:9D:9E:0A:85 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18E5 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa Signing time: Fri 17 Jan 2025 01:25:45 +0000 ROA not before: Fri 17 Jan 2025 01:25:45 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.220.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6373 (0x18e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:45 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B66D1923DB92076DF32A26363B6014229D9E0A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:9d:7b:a6:12:7f:a5:05:12:23:06:77:ad: b9:14:3e:0c:15:45:8e:d2:18:92:d1:2f:40:b9:e3: e0:15:55:60:b6:bf:24:c3:7e:c7:97:64:90:2c:c5: fc:28:0a:af:6e:42:c9:1b:90:e0:cd:27:a4:af:f7: da:30:7b:0c:2b:3d:39:02:d3:47:25:77:3b:be:80: 55:0d:d1:78:b9:78:f3:2e:ee:0c:ef:17:42:f2:fe: 72:3e:85:aa:a7:67:d6:aa:3a:b8:70:f8:5a:43:b7: ee:0a:c8:5b:c8:de:65:37:6e:df:14:d8:c3:bb:40: 9d:28:d9:9c:e8:4f:b4:2e:0b:6d:68:48:b7:d3:69: 1b:2d:cc:6c:9f:9f:54:95:3e:64:81:18:38:1d:dc: de:c0:65:0e:d1:18:d4:5c:36:cb:22:0d:a2:2a:de: 5e:ac:7e:6a:62:1b:7a:57:65:fc:30:6d:bd:fc:f9: 7f:80:bb:2a:71:e2:bd:4b:83:84:9a:e2:67:bb:b3: 25:81:08:e0:0b:b4:4a:52:6b:79:49:a3:1b:08:0f: b1:c0:9e:cd:73:71:03:9f:cd:43:1a:13:e9:6b:88: 68:0a:e1:1a:4a:15:06:9d:cd:22:4c:48:f8:d6:35: 8c:56:83:a5:5f:3e:70:5f:c4:82:1d:b7:68:1b:16: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6D:19:23:DB:92:07:6D:F3:2A:26:36:3B:60:14:22:9D:9E:0A:85 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.248.0/24 Signature Algorithm: sha256WithRSAEncryption d5:b0:a6:a5:af:50:66:e3:67:ad:29:8c:af:ec:c6:37:5a:87: 22:9b:50:f0:a8:aa:b3:2c:e6:a6:5d:90:9c:2a:0f:53:7f:07: 20:51:8c:a5:d9:15:c5:3c:0e:c8:59:c7:64:eb:af:02:2f:5f: 44:44:8f:ce:e1:4f:45:b3:a1:af:19:f9:48:04:23:81:6a:79: 1e:d1:89:e6:08:06:23:04:7b:de:ed:21:17:09:b7:34:18:21: 56:c0:8f:4e:56:90:89:fe:94:dc:62:9f:b1:86:ee:ce:dc:fd: 19:b4:17:4a:b4:2e:bc:54:05:8a:24:29:70:95:bd:c6:97:bb: 90:d4:32:6e:26:6f:81:83:2e:83:19:34:b9:02:d5:a0:61:47: 79:60:e7:61:7c:8c:09:f8:f1:9e:11:96:c2:c6:37:b4:f3:b3: f5:62:c3:f3:e6:30:48:00:fb:dc:41:59:d1:1e:a6:bc:f2:49: 9f:e2:4c:e5:ac:c5:4c:ae:f1:86:a3:94:cd:7a:d6:cb:7e:fc: 73:58:2d:cb:2d:57:9f:45:4e:15:b5:c7:2f:24:ef:d0:de:f7: d2:6f:19:87:fc:1a:d8:6b:89:98:00:fe:d3:0b:e1:00:1c:67: 96:77:4b:61:14:90:d4:4f:03:92:60:63:c3:56:3b:83:9a:70: e5:b5:00:cc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI2NkQxOTIzREI5MjA3 NkRGMzJBMjYzNjNCNjAxNDIyOUQ5RTBBODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuNZ17phJ/pQUSIwZ3rbkUPgwVRY7SGJLRL0C54+AVVWC2vyTD fseXZJAsxfwoCq9uQskbkODNJ6Sv99owewwrPTkC00cldzu+gFUN0Xi5ePMu7gzv F0Ly/nI+haqnZ9aqOrhw+FpDt+4KyFvI3mU3bt8U2MO7QJ0o2ZzoT7QuC21oSLfT aRstzGyfn1SVPmSBGDgd3N7AZQ7RGNRcNssiDaIq3l6sfmpiG3pXZfwwbb38+X+A uypx4r1Lg4Sa4me7syWBCOALtEpSa3lJoxsID7HAns1zcQOfzUMaE+lriGgK4RpK FQadzSJMSPjWNYxWg6VfPnBfxIIdt2gbFjAjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUtm0ZI9uSB23zKiY2O2AUIp2eCoUwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3RtMFpJOXVTQjIzektp WTJPMkFVSXAyZUNvVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3PgwDQYJKoZIhvcNAQELBQADggEBANWwpqWvUGbjZ60pjK/sxjdahyKbUPCo qrMs5qZdkJwqD1N/ByBRjKXZFcU8DshZx2TrrwIvX0REj87hT0Wzoa8Z+UgEI4Fq eR7RieYIBiMEe97tIRcJtzQYIVbAj05WkIn+lNxin7GG7s7c/Rm0F0q0LrxUBYok KXCVvcaXu5DUMm4mb4GDLoMZNLkC1aBhR3lg52F8jAn48Z4RlsLGN7Tzs/Viw/Pm MEgA+9xBWdEeprzySZ/iTOWsxUyu8YajlM161st+/HNYLcstV59FThW1xy8k79De 99JvGYf8GthriZgA/tML4QAcZ5Z3S2EUkNRPA5JgY8NWO4OacOW1AMw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:19 2025 by rpki-client