$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uVgk8t-O2k60XCEaCsMauOlrBAo.roa File: uVgk8t-O2k60XCEaCsMauOlrBAo.roa (raw, json) Hash identifier: owHUj/RmYqUVmV7ohWesDrEdgk+fQY/BCNEPtGgDvC4= Subject key identifier: B9:58:24:F2:DF:8E:DA:4E:B4:5C:21:1A:0A:C3:1A:B8:E9:6B:04:0A Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 5CF1 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uVgk8t-O2k60XCEaCsMauOlrBAo.roa Signing time: Fri 17 Jan 2025 01:26:54 +0000 ROA not before: Fri 17 Jan 2025 01:26:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24426 IP address blocks: 43.239.32.0/20 maxlen: 20 103.35.32.0/20 maxlen: 20 110.44.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23793 (0x5cf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jan 17 01:26:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B95824F2DF8EDA4EB45C211A0AC31AB8E96B040A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:53:83:a8:03:fc:ad:b2:03:45:19:83:1c: cd:08:06:40:fa:d6:c5:3c:9d:36:b6:4a:41:df:9e: 3a:d9:d5:3f:47:3e:86:d2:05:0a:36:8d:c0:2f:35: 1c:a4:ba:aa:22:61:4e:2b:88:56:91:80:8c:41:e6: eb:6d:ad:67:eb:fb:35:ef:bc:bc:4e:5a:f8:8a:6c: 6e:1a:e0:fa:00:44:0e:a6:fa:b0:ef:cb:b6:ae:d0: 9e:f1:73:9f:05:cb:32:24:3a:d3:77:66:65:cf:55: 9c:a2:5b:1b:5f:41:20:3f:d6:04:68:23:fc:93:c5: 20:a9:94:22:e8:d8:c3:ab:5d:df:52:72:60:23:0b: 80:46:3e:54:71:6a:f4:f1:a3:80:f2:9e:95:9b:ac: fe:5e:4b:b2:49:a3:e0:8c:cc:f8:60:ec:02:62:f6: 5b:68:e5:b6:1b:fb:66:e1:4f:52:f2:96:67:2a:2d: fb:89:8c:3b:37:e7:8d:3e:49:82:1e:da:14:b4:0b: cd:5c:29:e3:40:33:b5:6c:65:71:0a:ba:83:46:28: c2:f6:80:58:23:c5:2b:28:a9:7e:e8:91:1c:a7:96: f0:a5:50:63:ff:0b:2a:1b:87:37:82:94:20:e3:cc: 53:a5:0e:f0:5b:ef:81:c0:59:d8:b8:9d:db:7d:c8: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:58:24:F2:DF:8E:DA:4E:B4:5C:21:1A:0A:C3:1A:B8:E9:6B:04:0A X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uVgk8t-O2k60XCEaCsMauOlrBAo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.32.0/20 103.35.32.0/20 110.44.144.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:55:d3:30:58:ae:e3:d1:54:3a:ea:5c:c6:78:f2:fa:e3:91: 07:5b:91:8e:dd:e9:51:c5:a8:fd:4e:5f:d3:f2:41:84:64:a6: 73:99:15:d7:d0:bb:ac:e0:74:a0:20:1f:cd:26:fc:44:33:03: 22:8e:53:e7:0c:48:1b:55:46:53:91:33:41:00:2e:1b:91:38: d6:dd:bf:c5:69:24:96:25:d7:e3:6b:f6:45:99:51:7c:8e:da: 0c:7b:37:48:3b:64:3e:0f:a0:4f:bc:87:28:65:4c:eb:19:a7: 8b:df:37:db:76:ba:cc:43:cc:92:a2:e6:3f:b4:b3:dd:fb:0a: 75:ba:42:8e:23:22:7e:48:4c:87:7c:be:36:ba:e7:82:92:1e: 70:b0:2b:61:09:61:72:0b:2a:c6:fb:46:00:63:56:f1:76:aa: 44:3b:73:c5:3f:1b:20:81:16:8c:5b:35:21:72:d8:9a:55:5f: 51:6d:07:5e:79:85:57:f9:30:80:5d:fb:88:68:e0:9b:d7:0f: 8f:2c:c4:3e:a0:54:7a:d3:1a:3c:94:de:48:f0:e0:ea:06:f8: b0:f9:63:58:7e:d9:55:5b:f6:7d:b1:b8:d7:d6:23:a3:5d:b6: 42:78:46:2e:39:81:b5:90:36:e5:c5:6c:c1:12:cd:cb:c9:f4: 6b:e3:a9:9d -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICXPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTAxMTcw MTI2NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI5NTgyNEYyREY4RURB NEVCNDVDMjExQTBBQzMxQUI4RTk2QjA0MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkRlODqAP8rbIDRRmDHM0IBkD61sU8nTa2SkHfnjrZ1T9HPobS BQo2jcAvNRykuqoiYU4riFaRgIxB5uttrWfr+zXvvLxOWviKbG4a4PoARA6m+rDv y7au0J7xc58FyzIkOtN3ZmXPVZyiWxtfQSA/1gRoI/yTxSCplCLo2MOrXd9ScmAj C4BGPlRxavTxo4DynpWbrP5eS7JJo+CMzPhg7AJi9lto5bYb+2bhT1LylmcqLfuJ jDs3540+SYIe2hS0C81cKeNAM7VsZXEKuoNGKML2gFgjxSsoqX7okRynlvClUGP/ CyobhzeClCDjzFOlDvBb74HAWdi4ndt9yNJJAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUuVgk8t+O2k60XCEaCsMauOlrBAowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3VWZ2s4dC1PMms2MFhD RWFDc01hdU9sckJBby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAQr7yADBARnIyADBARuLJAwDQYJKoZIhvcNAQELBQADggEBAI5V0zBYruPRVDrq XMZ48vrjkQdbkY7d6VHFqP1OX9PyQYRkpnOZFdfQu6zgdKAgH80m/EQzAyKOU+cM SBtVRlORM0EALhuRONbdv8VpJJYl1+Nr9kWZUXyO2gx7N0g7ZD4PoE+8hyhlTOsZ p4vfN9t2usxDzJKi5j+0s937CnW6Qo4jIn5ITId8vja654KSHnCwK2EJYXILKsb7 RgBjVvF2qkQ7c8U/GyCBFoxbNSFy2JpVX1FtB155hVf5MIBd+4ho4JvXD48sxD6g VHrTGjyU3kjw4OoG+LD5Y1h+2VVb9n2xuNfWI6NdtkJ4Ri45gbWQNuXFbMESzcvJ 9GvjqZ0= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:50 2025 by rpki-client