$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/uNiI8MgxZKuGKgs01FYnoPJrnxE.roa File: uNiI8MgxZKuGKgs01FYnoPJrnxE.roa (raw, json) Hash identifier: pAtNIdvPKCBIjwR60UNWgMZan/eRSxdvvV5Ro1+fMR4= Subject key identifier: B8:D8:88:F0:C8:31:64:AB:86:2A:0B:34:D4:56:27:A0:F2:6B:9F:11 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 185C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/uNiI8MgxZKuGKgs01FYnoPJrnxE.roa Signing time: Fri 17 Jan 2025 01:24:58 +0000 ROA not before: Fri 17 Jan 2025 01:24:58 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6236 (0x185c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:58 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B8D888F0C83164AB862A0B34D45627A0F26B9F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:03:c2:75:85:51:bf:94:46:d0:fa:33:1a: d6:3f:e0:ad:fd:84:65:ac:9a:a8:97:11:80:7a:f9: e0:f3:0f:a4:15:db:19:39:98:58:61:83:10:23:4a: fc:73:53:bb:3e:50:6d:6e:41:67:f1:cc:9b:02:52: 08:53:dc:55:b0:37:fe:7b:63:12:79:54:b0:fb:10: 45:5a:53:37:1f:d1:ec:3a:00:e4:43:47:83:64:09: c8:fb:c5:27:b6:a1:6e:d1:55:f1:9f:28:5b:06:37: 9f:49:c7:6e:0a:4f:24:a1:d4:b4:3f:f3:9f:8e:8b: 31:8e:96:3c:b8:ab:cd:71:d7:07:9d:d0:3b:34:68: be:55:20:22:c6:39:4a:8f:72:07:56:61:9d:c0:2c: 94:df:70:34:47:b5:43:70:e8:ae:b7:41:29:d4:f9: 4e:2d:02:ed:a1:fa:86:13:67:b6:35:10:09:41:58: cc:69:98:a6:2c:55:f7:d4:c0:dd:0f:87:4c:24:a2: 07:90:f2:b9:6c:7e:7c:5c:71:e2:1c:4d:12:47:a7: 41:5a:4f:b5:bc:38:bf:28:42:8c:4a:ab:91:0a:f1: 02:01:a3:14:50:3b:14:d2:d1:0b:67:12:7a:d8:fa: 2b:f0:77:f6:a5:3e:9f:48:ac:3b:f2:3a:19:d4:a0: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:88:F0:C8:31:64:AB:86:2A:0B:34:D4:56:27:A0:F2:6B:9F:11 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/uNiI8MgxZKuGKgs01FYnoPJrnxE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.34.0/24 Signature Algorithm: sha256WithRSAEncryption 07:d7:3d:43:ec:d3:cb:13:7e:d8:ce:79:58:68:42:4f:12:f1: 71:0e:49:90:0d:0d:66:2c:ba:52:c7:d7:53:e1:ab:f1:dd:eb: 51:e8:5f:3e:36:59:f8:13:e4:40:8a:4f:5b:47:0d:2a:47:c1: 8c:6c:2f:97:dc:ac:a9:20:0e:4d:3b:26:ce:ec:88:2c:03:a0: 6b:cb:94:fb:5c:39:20:69:11:8c:50:cf:7c:f0:31:7b:12:89: 98:75:43:72:7f:c8:23:61:2c:d1:1d:8a:1d:17:7e:0e:4a:cd: d7:c9:dc:23:92:e0:fc:fc:64:d5:01:f1:b6:b8:83:61:02:0e: 7d:38:f1:4f:9b:8f:dc:26:cc:25:c0:b7:43:16:0e:11:d7:10: 11:f0:00:c2:28:ed:23:2c:40:7f:a6:46:16:54:e1:06:14:4a: 24:7e:c2:82:3d:0b:f2:9f:5a:b1:54:4a:5a:57:d9:f1:bb:d2: 3a:b5:0b:b7:92:76:fc:a4:6e:f5:14:10:20:57:9e:c2:05:3b: e5:17:82:9b:4f:33:6c:7b:89:1f:68:0c:f0:da:72:9b:a6:c7: eb:70:e0:cb:5e:83:8c:01:c1:f7:6c:e0:75:86:1d:2c:a9:58: d5:eb:4a:c4:4e:cd:44:4a:e8:ab:70:17:14:fb:7c:18:fd:ca: b1:ca:63:90 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI4RDg4OEYwQzgzMTY0 QUI4NjJBMEIzNEQ0NTYyN0EwRjI2QjlGMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDCgPCdYVRv5RG0PozGtY/4K39hGWsmqiXEYB6+eDzD6QV2xk5 mFhhgxAjSvxzU7s+UG1uQWfxzJsCUghT3FWwN/57YxJ5VLD7EEVaUzcf0ew6AORD R4NkCcj7xSe2oW7RVfGfKFsGN59Jx24KTySh1LQ/85+OizGOljy4q81x1wed0Ds0 aL5VICLGOUqPcgdWYZ3ALJTfcDRHtUNw6K63QSnU+U4tAu2h+oYTZ7Y1EAlBWMxp mKYsVffUwN0Ph0wkogeQ8rlsfnxcceIcTRJHp0FaT7W8OL8oQoxKq5EK8QIBoxRQ OxTS0QtnEnrY+ivwd/alPp9IrDvyOhnUoHD5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUuNiI8MgxZKuGKgs01FYnoPJrnxEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3VOaUk4TWd4Wkt1R0tn czAxRllub1BKcm54RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3SIwDQYJKoZIhvcNAQELBQADggEBAAfXPUPs08sTftjOeVhoQk8S8XEOSZAN DWYsulLH11Phq/Hd61HoXz42WfgT5ECKT1tHDSpHwYxsL5fcrKkgDk07Js7siCwD oGvLlPtcOSBpEYxQz3zwMXsSiZh1Q3J/yCNhLNEdih0Xfg5KzdfJ3COS4Pz8ZNUB 8ba4g2ECDn048U+bj9wmzCXAt0MWDhHXEBHwAMIo7SMsQH+mRhZU4QYUSiR+woI9 C/KfWrFUSlpX2fG70jq1C7eSdvykbvUUECBXnsIFO+UXgptPM2x7iR9oDPDacpum x+tw4Mteg4wBwfds4HWGHSypWNXrSsROzURK6KtwFxT7fBj9yrHKY5A= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:19 2025 by rpki-client