$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/zS9jMhcq_y7NphJHgaq4ylvwnw0.roa File: zS9jMhcq_y7NphJHgaq4ylvwnw0.roa (raw, json) Hash identifier: +Djqk/j7VlvTD+v76Muvu9VowWFq2CfUkh4UffnWaoU= Subject key identifier: CD:2F:63:32:17:2A:FF:2E:CD:A6:12:47:81:AA:B8:CA:5B:F0:9F:0D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18AD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zS9jMhcq_y7NphJHgaq4ylvwnw0.roa Signing time: Fri 17 Jan 2025 01:25:24 +0000 ROA not before: Fri 17 Jan 2025 01:25:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.6.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6317 (0x18ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=CD2F6332172AFF2ECDA6124781AAB8CA5BF09F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:bf:9b:eb:43:54:de:77:ec:61:26:7b:7b: cb:ad:60:5b:b7:f1:07:ab:d4:45:31:da:c3:bc:1d: 04:e0:75:46:fc:33:9d:5b:6f:22:99:5d:34:5a:1c: 5e:5e:d2:9a:c0:28:72:12:be:00:f3:6d:33:5f:a9: 44:fe:d3:80:13:69:61:38:eb:be:34:bc:87:44:35: ba:98:46:f3:32:df:d5:89:b0:72:0b:d3:3c:1b:92: b8:cd:ce:32:f2:e9:be:2b:30:db:f2:b3:6f:e1:a4: cf:08:60:76:f2:aa:13:78:56:c3:21:fb:12:fa:c1: 43:5e:86:9f:52:62:29:9d:c0:dd:07:24:ad:c9:d1: b5:9c:b1:a2:13:20:1a:02:0f:9e:59:b2:41:fd:ac: ba:ee:ce:36:28:a6:0e:d2:9a:6b:0c:d4:3e:4c:cc: 95:f2:4f:e1:7b:f6:cd:66:e7:81:41:c8:a1:53:fc: 59:17:ad:45:d1:2a:83:d1:0d:a2:f0:dc:ba:22:78: 31:bb:4e:e0:9c:72:86:f4:99:2a:a7:95:5e:0a:1e: 4b:b5:67:30:0f:7b:29:43:4d:27:da:f8:41:cf:62: 93:ce:72:ce:95:7e:3a:4c:6f:da:b5:24:72:97:4a: 47:4a:36:9a:0c:7e:6b:ab:53:f1:a8:94:be:0b:2e: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2F:63:32:17:2A:FF:2E:CD:A6:12:47:81:AA:B8:CA:5B:F0:9F:0D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zS9jMhcq_y7NphJHgaq4ylvwnw0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.108.0/24 Signature Algorithm: sha256WithRSAEncryption 78:2d:29:6d:e7:81:d5:63:5d:5c:6b:63:d9:42:b5:9a:b3:ff: 9b:8d:9e:e7:5f:20:d0:31:ea:99:a8:60:70:ac:e0:6b:ba:a1: 85:ae:7d:58:c5:aa:a6:0f:15:d5:e8:76:19:2d:e9:0a:c0:84: 91:84:3e:3a:c2:56:3e:a9:12:d2:ce:43:8e:e2:08:94:69:0d: d3:4e:75:95:9e:17:50:87:c7:ad:19:8a:b2:f2:56:3f:cf:f8: 12:dd:4e:27:8f:0d:90:24:f7:a1:ee:70:da:81:c4:1a:c2:0e: c1:75:58:37:b8:02:c4:67:bb:9b:13:56:8c:4c:42:cb:a9:8d: b9:0d:6c:56:a7:d9:b4:aa:7a:b5:14:5a:db:cf:62:59:bd:17: 72:b4:e8:52:06:55:4a:cd:b7:06:08:a8:2e:df:60:38:4b:4a: 3c:e6:fb:04:bf:64:11:77:05:3d:09:b6:77:fe:23:c7:ad:64: fe:05:30:33:44:32:43:fb:7c:b2:fc:60:df:7b:b1:36:c4:13: 2c:a0:8d:08:28:71:5d:76:d1:d9:b8:8e:ff:25:a6:2d:c4:b6: cf:dd:99:ef:60:af:f5:f3:ae:43:bb:e9:07:c2:d7:d5:50:69: 02:59:51:b5:23:49:7b:7f:1f:d1:5b:4a:12:b2:f9:ea:72:54: c1:e1:95:38 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENEMkY2MzMyMTcyQUZG MkVDREE2MTI0NzgxQUFCOENBNUJGMDlGMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeTb+b60NU3nfsYSZ7e8utYFu38Qer1EUx2sO8HQTgdUb8M51b byKZXTRaHF5e0prAKHISvgDzbTNfqUT+04ATaWE46740vIdENbqYRvMy39WJsHIL 0zwbkrjNzjLy6b4rMNvys2/hpM8IYHbyqhN4VsMh+xL6wUNehp9SYimdwN0HJK3J 0bWcsaITIBoCD55ZskH9rLruzjYopg7SmmsM1D5MzJXyT+F79s1m54FByKFT/FkX rUXRKoPRDaLw3LoieDG7TuCccob0mSqnlV4KHku1ZzAPeylDTSfa+EHPYpPOcs6V fjpMb9q1JHKXSkdKNpoMfmurU/GolL4LLqqjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUzS9jMhcq/y7NphJHgaq4ylvwnw0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3pTOWpNaGNxX3k3TnBo SkhnYXE0eWx2d253MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBmwwDQYJKoZIhvcNAQELBQADggEBAHgtKW3ngdVjXVxrY9lCtZqz/5uNnudf INAx6pmoYHCs4Gu6oYWufVjFqqYPFdXodhkt6QrAhJGEPjrCVj6pEtLOQ47iCJRp DdNOdZWeF1CHx60ZirLyVj/P+BLdTiePDZAk96HucNqBxBrCDsF1WDe4AsRnu5sT VoxMQsupjbkNbFan2bSqerUUWtvPYlm9F3K06FIGVUrNtwYIqC7fYDhLSjzm+wS/ ZBF3BT0Jtnf+I8etZP4FMDNEMkP7fLL8YN97sTbEEyygjQgocV120dm4jv8lpi3E ts/dme9gr/XzrkO76QfC19VQaQJZUbUjSXt/H9FbShKy+epyVMHhlTg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:18 2025 by rpki-client