$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/z0JtB3hIomD0SUpgfRbmJVKHSvQ.roa File: z0JtB3hIomD0SUpgfRbmJVKHSvQ.roa (raw, json) Hash identifier: 0mt0JKyEivFM5ZlVf/MrIxlg8nbKSsv1/kwvXcOZ9zk= Subject key identifier: CF:42:6D:07:78:48:A2:60:F4:49:4A:60:7D:16:E6:25:52:87:4A:F4 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18BA Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z0JtB3hIomD0SUpgfRbmJVKHSvQ.roa Signing time: Fri 17 Jan 2025 01:25:29 +0000 ROA not before: Fri 17 Jan 2025 01:25:29 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 103.10.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6330 (0x18ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:29 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=CF426D077848A260F4494A607D16E62552874AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:29:70:b3:57:dc:33:61:5f:46:ea:13:86: 91:7f:37:0c:dc:ef:dd:74:91:74:4a:5c:5c:17:40: eb:45:9b:aa:26:c0:c2:02:00:8b:11:68:51:34:dd: c1:5d:2d:34:a6:e5:f6:4e:b2:01:7d:e0:e1:3c:54: f1:04:68:39:74:47:1c:33:e6:52:be:c1:a0:99:2f: 69:75:fc:50:ba:f0:0c:8b:a6:b7:9e:33:17:07:61: ec:34:a2:69:f1:b8:a2:90:33:c1:d6:9b:80:80:12: c7:37:a9:83:be:1a:ad:43:f5:46:0c:ee:c0:bd:42: f7:ee:99:d8:85:89:ca:b5:1b:c7:6c:1d:a4:cf:67: a2:74:32:7c:d3:d5:63:c4:c8:f6:f7:e7:36:b4:a6: f4:1d:22:44:47:fa:77:38:5d:5c:86:a9:59:e3:b3: 6c:2f:da:f5:f9:61:af:cd:4c:ad:61:e3:2e:6c:02: 33:58:35:ee:63:bc:40:6d:50:0b:6e:40:73:2a:7f: 03:6b:ff:cd:26:6c:4b:9c:20:f3:06:81:50:75:2f: 35:43:5a:45:d9:a4:1e:f9:b4:19:97:e1:3a:01:ba: db:50:75:57:1a:d2:61:07:11:70:ee:df:05:c6:5a: 4e:92:5c:ef:33:b0:e5:1e:c4:91:8d:d6:72:02:1a: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:42:6D:07:78:48:A2:60:F4:49:4A:60:7D:16:E6:25:52:87:4A:F4 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z0JtB3hIomD0SUpgfRbmJVKHSvQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.10.0.0/23 Signature Algorithm: sha256WithRSAEncryption 93:9e:f2:44:62:c8:f2:0f:6c:2d:83:59:d9:b4:1f:95:44:3b: f2:df:31:e3:a2:e1:a9:1d:36:bd:2a:56:8e:b7:35:f2:35:f2: 11:c5:66:14:14:3a:d9:89:e7:47:6b:ba:1a:53:df:ef:6d:15: 40:b3:ac:98:69:a7:41:f1:d7:89:0f:88:3a:97:c6:a9:51:07: d6:08:71:8c:d0:6a:d4:82:c6:ef:6d:68:08:1e:86:d2:f0:4e: 0b:ea:ee:a0:02:11:d6:93:c4:fb:97:ae:05:b8:96:59:15:a2: a3:2d:67:ea:99:00:64:eb:65:6f:66:74:8c:9f:80:df:8e:c7: 0f:f5:3a:cd:77:47:bf:b7:42:df:9d:02:c8:61:eb:d1:7f:67: 8c:bb:82:16:62:ed:66:ed:a2:70:7f:7b:60:cc:8d:24:33:34: cc:b9:88:bd:8b:dd:d8:cc:dd:31:e3:d3:91:37:be:ef:ff:c8: 72:ac:7e:3c:1f:09:07:91:c4:4a:33:e5:ed:a7:ed:8b:9b:a2: 4c:0f:39:25:d9:ad:04:59:00:ae:e6:0a:80:5a:cd:3e:4e:e1: 69:a9:5e:5f:b3:7a:0b:54:ab:92:df:01:e8:88:1f:dd:f1:b1: 29:c4:e4:e4:15:c1:dd:25:18:81:6c:2b:ce:b7:fa:4b:b5:bc: 24:77:46:26 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENGNDI2RDA3Nzg0OEEy NjBGNDQ5NEE2MDdEMTZFNjI1NTI4NzRBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJSylws1fcM2FfRuoThpF/Nwzc7910kXRKXFwXQOtFm6omwMIC AIsRaFE03cFdLTSm5fZOsgF94OE8VPEEaDl0Rxwz5lK+waCZL2l1/FC68AyLpree MxcHYew0omnxuKKQM8HWm4CAEsc3qYO+Gq1D9UYM7sC9QvfumdiFicq1G8dsHaTP Z6J0MnzT1WPEyPb35za0pvQdIkRH+nc4XVyGqVnjs2wv2vX5Ya/NTK1h4y5sAjNY Ne5jvEBtUAtuQHMqfwNr/80mbEucIPMGgVB1LzVDWkXZpB75tBmX4ToButtQdVca 0mEHEXDu3wXGWk6SXO8zsOUexJGN1nICGrQTAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUz0JtB3hIomD0SUpgfRbmJVKHSvQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3owSnRCM2hJb21EMFNV cGdmUmJtSlZLSFN2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnCgAwDQYJKoZIhvcNAQELBQADggEBAJOe8kRiyPIPbC2DWdm0H5VEO/LfMeOi 4akdNr0qVo63NfI18hHFZhQUOtmJ50druhpT3+9tFUCzrJhpp0Hx14kPiDqXxqlR B9YIcYzQatSCxu9taAgehtLwTgvq7qACEdaTxPuXrgW4llkVoqMtZ+qZAGTrZW9m dIyfgN+Oxw/1Os13R7+3Qt+dAshh69F/Z4y7ghZi7WbtonB/e2DMjSQzNMy5iL2L 3djM3THj05E3vu//yHKsfjwfCQeRxEoz5e2n7YubokwPOSXZrQRZAK7mCoBazT5O 4WmpXl+zegtUq5LfAeiIH93xsSnE5OQVwd0lGIFsK863+ku1vCR3RiY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:26 2025 by rpki-client