$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/UyCaqegX0-eEEhnSjZvBk6mm-0E.roa File: UyCaqegX0-eEEhnSjZvBk6mm-0E.roa (raw, json) Hash identifier: wOvH8cOq6jMa075cTj4pdqejCseoQGoIaw+as+jKw6I= Subject key identifier: 53:20:9A:A9:E8:17:D3:E7:84:12:19:D2:8D:9B:C1:93:A9:A6:FB:41 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 0184 Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/UyCaqegX0-eEEhnSjZvBk6mm-0E.roa Signing time: Fri 28 Mar 2025 02:40:04 +0000 ROA not before: Fri 28 Mar 2025 02:40:04 +0000 ROA not after: Tue 13 Jan 2026 01:35:26 +0000 asID: 142132 IP address blocks: 114.28.218.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 11:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Mar 28 02:40:04 2025 GMT Not After : Jan 13 01:35:26 2026 GMT Subject: CN=53209AA9E817D3E7841219D28D9BC193A9A6FB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:a9:d3:bd:2a:6e:f5:0d:7e:cd:a4:ac:76: f2:bc:00:d2:2f:7c:0f:4f:d5:37:d6:74:d5:cb:ae: e8:38:09:8e:fa:da:4a:50:ec:76:8c:29:9d:4e:2b: 35:9e:8c:ff:57:da:ef:f6:db:73:7c:1b:30:4f:c5: b6:b2:c4:2b:99:f0:51:75:a3:dd:42:72:e9:d6:de: ec:1c:4d:7b:2a:b2:c6:88:c6:73:ec:f9:56:e4:8c: 63:45:2c:38:4b:4c:f8:ba:b2:3b:1b:3c:4a:45:e1: 22:4e:fe:63:4b:14:8c:ba:bd:05:f5:23:c4:83:f1: 7c:8b:15:b1:14:b7:b3:81:54:94:9c:7f:bb:ca:1e: c7:e9:3f:34:3f:d1:9b:45:70:1f:09:d2:bb:88:a4: 1c:47:c6:0f:1a:50:e7:41:72:36:3c:66:3c:cf:1a: 45:cb:5f:1a:7d:b0:01:00:54:f1:d9:65:2b:87:7f: 4f:47:7b:78:75:08:a8:f1:8a:b5:41:d3:ef:bd:72: 1b:39:1a:8a:61:76:04:4f:a4:cc:97:fd:5b:a4:1d: 30:28:73:66:56:44:c7:32:03:04:b1:0a:f2:34:73: ab:ad:4d:07:07:8b:10:30:64:f2:2c:62:e2:20:0a: 69:c1:a4:a4:63:83:dc:1f:40:3a:aa:08:c4:b7:4e: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:20:9A:A9:E8:17:D3:E7:84:12:19:D2:8D:9B:C1:93:A9:A6:FB:41 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/UyCaqegX0-eEEhnSjZvBk6mm-0E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.218.0/23 Signature Algorithm: sha256WithRSAEncryption c4:46:65:12:c7:86:08:0f:3b:33:52:cc:c3:5c:2d:25:48:ac: db:ad:5d:25:e2:90:b6:44:1a:b1:ee:c7:07:3f:86:11:ab:f7: 33:79:b4:50:53:7d:9f:42:89:cb:0c:58:b9:c9:aa:d2:f1:9e: 6b:64:36:96:32:18:cd:7a:bc:7b:c4:a7:70:d8:37:5a:af:29: a9:0a:8b:75:ec:48:f7:05:e1:f7:b1:83:93:9f:ee:30:68:45: 59:15:f9:29:7c:75:b2:3c:24:84:7f:6a:bb:4a:97:6b:64:b3: d0:06:c9:81:86:7e:2d:fb:a4:4a:f1:03:d1:87:f2:a7:49:b2: e9:c9:2d:8a:37:0a:0a:4c:3a:ab:ab:b4:16:33:39:92:c0:1d: 43:d6:e5:76:4e:31:33:74:a9:d7:89:65:39:88:97:8a:62:26: e1:0e:08:e8:3c:4b:aa:bd:a8:9d:b0:c7:d2:ba:19:6d:6a:d1: b3:94:8f:03:48:59:b7:93:6b:3f:0d:ad:3e:28:96:b5:d7:03: 3c:3c:4c:d5:8d:a0:09:26:92:6a:ca:4d:93:1f:9f:74:98:87: 0d:4a:98:1e:d6:35:08:1d:6a:05:45:c7:ea:49:33:09:4d:79: 22:b2:ab:61:e9:30:f3:d1:ad:49:26:ee:6c:3b:ce:69:bd:43: 45:93:f4:66 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTAzMjgw MjQwMDRaFw0yNjAxMTMwMTM1MjZaMDMxMTAvBgNVBAMTKDUzMjA5QUE5RTgxN0Qz RTc4NDEyMTlEMjhEOUJDMTkzQTlBNkZCNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxJqnTvSpu9Q1+zaSsdvK8ANIvfA9P1TfWdNXLrug4CY762kpQ 7HaMKZ1OKzWejP9X2u/223N8GzBPxbayxCuZ8FF1o91CcunW3uwcTXsqssaIxnPs +VbkjGNFLDhLTPi6sjsbPEpF4SJO/mNLFIy6vQX1I8SD8XyLFbEUt7OBVJScf7vK HsfpPzQ/0ZtFcB8J0ruIpBxHxg8aUOdBcjY8ZjzPGkXLXxp9sAEAVPHZZSuHf09H e3h1CKjxirVB0++9chs5GophdgRPpMyX/VukHTAoc2ZWRMcyAwSxCvI0c6utTQcH ixAwZPIsYuIgCmnBpKRjg9wfQDqqCMS3Tr+VAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUUyCaqegX0+eEEhnSjZvBk6mm+0EwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL1V5Q2FxZWdYMC1lRUVo blNqWnZCazZtbS0wRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFyHNowDQYJKoZIhvcNAQELBQADggEBAMRGZRLHhggPOzNSzMNcLSVIrNutXSXi kLZEGrHuxwc/hhGr9zN5tFBTfZ9CicsMWLnJqtLxnmtkNpYyGM16vHvEp3DYN1qv KakKi3XsSPcF4fexg5Of7jBoRVkV+Sl8dbI8JIR/artKl2tks9AGyYGGfi37pErx A9GH8qdJsunJLYo3CgpMOqurtBYzOZLAHUPW5XZOMTN0qdeJZTmIl4piJuEOCOg8 S6q9qJ2wx9K6GW1q0bOUjwNIWbeTaz8NrT4olrXXAzw8TNWNoAkmkmrKTZMfn3SY hw1KmB7WNQgdagVFx+pJMwlNeSKyq2HpMPPRrUkm7mw7zmm9Q0WT9GY= -----END CERTIFICATE-----Generated at Sat Apr 19 08:02:19 2025 by rpki-client