$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/nupcYpRncbBv3-9dSwkTJgvZMyQ.roa File: nupcYpRncbBv3-9dSwkTJgvZMyQ.roa (raw, json) Hash identifier: 4MbXF1Yx0L8hJq971GxzZ01dBBGTfAi9S+9JFIVKcDg= Subject key identifier: 9E:EA:5C:62:94:67:71:B0:6F:DF:EF:5D:4B:09:13:26:0B:D9:33:24 Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Certificate serial: 1F3A Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nupcYpRncbBv3-9dSwkTJgvZMyQ.roa Signing time: Fri 17 Jan 2025 01:30:06 +0000 ROA not before: Fri 17 Jan 2025 01:30:06 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 58854 IP address blocks: 103.27.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7994 (0x1f3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D Validity Not Before: Jan 17 01:30:06 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9EEA5C62946771B06FDFEF5D4B0913260BD93324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:8b:07:99:2f:79:6f:19:38:ba:56:cd:6a: f4:ac:dd:7e:10:dc:93:84:d4:74:bb:7d:4b:74:28: b5:aa:b8:1d:bb:3b:24:7d:fa:4c:92:92:6e:bc:77: 95:6f:40:8d:9b:d2:0a:82:30:35:8d:51:ce:0e:2e: 31:b7:53:86:33:1d:ff:1e:ab:37:e3:e2:18:41:69: dc:99:8f:08:73:1a:72:79:f1:e6:ed:eb:4f:d3:ef: e6:93:d6:fe:c0:63:c8:68:fd:c0:9f:92:b2:a6:ae: 21:9b:79:5a:e3:34:ce:a9:6b:9b:6b:dd:c7:55:c0: 22:d2:a9:f3:17:97:11:5b:15:f8:ec:59:ad:d6:a4: a6:22:29:c1:3c:64:10:20:52:c5:41:9a:a6:4e:e4: c6:af:90:43:2e:d4:8e:99:de:59:0d:51:36:6c:c7: a7:72:9b:c6:85:ba:4f:7e:91:32:4f:55:8a:59:0d: fe:c2:c2:f3:7a:f0:ad:6e:47:f0:1a:04:67:de:96: a1:4a:9a:0c:cf:42:2d:78:24:15:1b:9c:fb:c3:e9: 5f:b6:30:81:77:d2:2e:ea:c4:6e:65:33:e1:4f:8e: 64:dd:0a:42:9c:e2:27:92:c0:92:6a:67:51:84:c9: d0:a1:23:73:cd:35:f0:f6:7f:32:66:d8:78:0c:eb: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:5C:62:94:67:71:B0:6F:DF:EF:5D:4B:09:13:26:0B:D9:33:24 X509v3 Authority Key Identifier: keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nupcYpRncbBv3-9dSwkTJgvZMyQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.27.4.0/24 Signature Algorithm: sha256WithRSAEncryption 78:07:1c:2f:dc:8c:5a:6d:d7:76:42:f6:e7:63:e9:1c:ce:6c: ea:be:4d:3b:1f:59:fe:e9:17:17:2a:55:45:a5:94:97:30:f3: 13:e5:c9:33:1f:c2:3d:2d:4b:be:3a:12:4a:71:29:04:b1:01: 88:76:e7:3f:80:84:d0:7f:a7:c0:f3:0d:92:55:ad:3d:cb:44: 43:63:32:9c:60:a6:09:b4:44:5f:f1:b9:f4:d2:57:d3:0d:0c: 98:75:f8:f4:09:f7:71:32:54:d5:28:d4:56:fc:79:26:f8:82: bc:10:3d:d8:7d:1e:7c:f7:23:04:40:b5:96:cd:20:53:53:69: 58:64:c7:5f:9b:02:74:0d:e6:a4:7b:29:91:9b:f2:9c:c8:ef: d5:45:bd:50:05:42:f2:ae:c2:8f:7b:58:ed:6c:02:a4:fd:42: cf:29:7f:4a:ee:16:65:14:e3:c2:78:cf:44:f8:f5:c7:26:7d: 1f:16:5f:4f:6b:15:7a:fa:ca:e9:1b:9a:d0:f1:26:fa:56:c5: a6:02:e0:7a:8f:a4:8a:77:e2:5c:89:ac:44:61:22:1e:3c:bb: 81:c1:ed:bb:f1:33:40:7a:f9:c5:b6:35:36:98:b0:bc:4d:45: 17:35:cc:9a:06:05:de:38:4d:af:aa:09:17:b6:8b:93:32:51: 1b:09:c9:8a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTU2 REE0QzI3NUYzQ0NDOTJEMDg2MjAyQTFFREE3NzgzRjBDM0QwRDAeFw0yNTAxMTcw MTMwMDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlFRUE1QzYyOTQ2Nzcx QjA2RkRGRUY1RDRCMDkxMzI2MEJEOTMzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChfIsHmS95bxk4ulbNavSs3X4Q3JOE1HS7fUt0KLWquB27OyR9 +kySkm68d5VvQI2b0gqCMDWNUc4OLjG3U4YzHf8eqzfj4hhBadyZjwhzGnJ58ebt 60/T7+aT1v7AY8ho/cCfkrKmriGbeVrjNM6pa5tr3cdVwCLSqfMXlxFbFfjsWa3W pKYiKcE8ZBAgUsVBmqZO5MavkEMu1I6Z3lkNUTZsx6dym8aFuk9+kTJPVYpZDf7C wvN68K1uR/AaBGfelqFKmgzPQi14JBUbnPvD6V+2MIF30i7qxG5lM+FPjmTdCkKc 4ieSwJJqZ1GEydChI3PNNfD2fzJm2HgM61bFAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnupcYpRncbBv3+9dSwkTJgvZMyQwHwYDVR0jBBgwFoAU5W2kwnXzzMktCGIC oe2neD8MPQ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIx LzVXMmt3blh6ek1rdENHSUNvZTJuZUQ4TVBRMC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNVcya3duWHp6TWt0Q0dJQ29lMm5lRDhNUFEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIxL251cGNZcFJuY2JCdjMt OWRTd2tUSmd2Wk15US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnGwQwDQYJKoZIhvcNAQELBQADggEBAHgHHC/cjFpt13ZC9udj6RzObOq+TTsf Wf7pFxcqVUWllJcw8xPlyTMfwj0tS746EkpxKQSxAYh25z+AhNB/p8DzDZJVrT3L RENjMpxgpgm0RF/xufTSV9MNDJh1+PQJ93EyVNUo1Fb8eSb4grwQPdh9Hnz3IwRA tZbNIFNTaVhkx1+bAnQN5qR7KZGb8pzI79VFvVAFQvKuwo97WO1sAqT9Qs8pf0ru FmUU48J4z0T49ccmfR8WX09rFXr6yukbmtDxJvpWxaYC4HqPpIp34lyJrERhIh48 u4HB7bvxM0B6+cW2NTaYsLxNRRc1zJoGBd44Ta+qCRe2i5MyURsJyYo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:12:41 2025 by rpki-client