$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/Y9YxvW3iT58rtGc6ivfvJgmka48.roa File: Y9YxvW3iT58rtGc6ivfvJgmka48.roa (raw, json) Hash identifier: Eh3qcOOmxut46QWkOjUJrfVq1p60qw7crgGaN5mLY6I= Subject key identifier: 63:D6:31:BD:6D:E2:4F:9F:2B:B4:67:3A:8A:F7:EF:26:09:A4:6B:8F Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Certificate serial: 14C3 Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/Y9YxvW3iT58rtGc6ivfvJgmka48.roa Signing time: Sun 27 Apr 2025 09:29:38 +0000 ROA not before: Sun 27 Apr 2025 09:29:38 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 152320 IP address blocks: 103.223.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5315 (0x14c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Validity Not Before: Apr 27 09:29:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=63D631BD6DE24F9F2BB4673A8AF7EF2609A46B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:ed:5d:ec:67:02:7f:63:cd:6d:72:a6:43: fb:90:60:39:57:e6:13:a1:9c:dd:01:45:87:32:14: 7b:c3:13:8d:24:5e:f4:ad:6a:63:dd:fe:2b:ee:be: df:66:24:97:27:b1:3f:c2:91:81:a1:ab:d3:9a:71: 8b:7f:4c:8e:57:16:1f:2b:e3:6e:b6:c4:4c:e3:9d: f3:23:bf:42:54:ce:14:21:81:e7:a3:78:d8:6c:79: e1:e8:75:e2:0d:c0:7d:bc:00:98:cc:0b:03:1a:9f: 0d:12:92:e8:dc:39:1f:bf:69:41:52:1b:0c:6c:0f: 74:69:e8:dd:52:8c:5f:af:45:62:5c:28:20:45:84: b4:b7:a4:df:f3:c4:80:ac:9f:ed:89:86:ca:fa:e7: ec:8e:81:e1:da:01:74:b2:85:35:7d:ad:dc:5a:96: d7:ba:9e:cf:c5:e7:cb:06:06:bf:ce:26:9b:a5:ba: e8:f9:8a:07:77:93:41:6f:ad:f3:c0:f3:16:e0:f5: f1:4e:9e:61:81:69:3a:d6:18:8e:da:6b:15:31:83: db:ba:c4:d7:0d:6d:2e:0c:6d:71:08:1b:9f:89:75: 11:b4:2a:16:1f:41:11:a0:22:5e:ad:80:7b:09:6f: 78:e7:bc:e3:13:eb:59:04:e9:0d:df:cd:70:6f:c3: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D6:31:BD:6D:E2:4F:9F:2B:B4:67:3A:8A:F7:EF:26:09:A4:6B:8F X509v3 Authority Key Identifier: keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/Y9YxvW3iT58rtGc6ivfvJgmka48.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.223.120.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:fc:74:93:65:c2:6b:91:25:1b:24:62:b0:07:56:52:e5:45: 58:aa:2b:fe:e3:ec:ad:c0:c8:ee:21:2a:6c:48:c7:02:3c:ae: a0:db:e3:72:35:00:3a:6f:c4:37:19:80:0f:2c:59:77:cc:75: ad:c7:2c:8d:a2:e6:77:a2:d2:ef:bc:76:68:af:09:7d:a6:dd: 4d:fa:8e:1f:0e:48:86:c6:c5:fe:10:0c:b2:a9:0e:c7:9c:1c: 06:01:c9:08:c3:8a:ed:e4:77:9d:a2:84:7c:9e:6b:67:12:d1: a8:3d:66:63:c1:0f:59:2c:a8:6e:66:12:fe:56:78:f4:18:0a: 82:00:00:d1:da:47:e4:9b:bc:69:15:12:c9:a7:94:8c:75:7c: 93:37:a1:c3:60:df:4c:4d:73:8d:53:c5:d6:d4:2a:03:5e:3b: 81:e5:77:cb:dd:7b:06:06:52:83:32:4b:7d:31:46:13:97:d5: b8:87:46:7b:89:08:41:4e:4f:8a:a3:f4:f5:78:20:67:72:7a: 9d:6e:3a:2b:d0:63:56:dc:9c:17:0a:db:db:5e:e5:fc:fb:60: 3a:96:56:79:f9:0f:e9:f9:e9:88:19:1b:5d:62:cf:41:50:2e: 6c:38:b5:ab:71:f5:e4:d3:0f:8b:9d:71:8e:05:90:96:10:bb: ff:49:9e:4c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNTA0Mjcw OTI5MzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYzRDYzMUJENkRFMjRG OUYyQkI0NjczQThBRjdFRjI2MDlBNDZCOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF6u1d7GcCf2PNbXKmQ/uQYDlX5hOhnN0BRYcyFHvDE40kXvSt amPd/ivuvt9mJJcnsT/CkYGhq9OacYt/TI5XFh8r4262xEzjnfMjv0JUzhQhgeej eNhseeHodeINwH28AJjMCwManw0SkujcOR+/aUFSGwxsD3Rp6N1SjF+vRWJcKCBF hLS3pN/zxICsn+2Jhsr65+yOgeHaAXSyhTV9rdxalte6ns/F58sGBr/OJpuluuj5 igd3k0FvrfPA8xbg9fFOnmGBaTrWGI7aaxUxg9u6xNcNbS4MbXEIG5+JdRG0KhYf QRGgIl6tgHsJb3jnvOMT61kE6Q3fzXBvw+MDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUY9YxvW3iT58rtGc6ivfvJgmka48wHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh 7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYvWTlZeHZXM2lUNThy dEdjNml2ZnZKZ21rYTQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGffeDANBgkqhkiG9w0BAQsFAAOCAQEAD/x0k2XCa5ElGyRisAdWUuVFWKor /uPsrcDI7iEqbEjHAjyuoNvjcjUAOm/ENxmADyxZd8x1rccsjaLmd6LS77x2aK8J fabdTfqOHw5IhsbF/hAMsqkOx5wcBgHJCMOK7eR3naKEfJ5rZxLRqD1mY8EPWSyo bmYS/lZ49BgKggAA0dpH5Ju8aRUSyaeUjHV8kzehw2DfTE1zjVPF1tQqA147geV3 y917BgZSgzJLfTFGE5fVuIdGe4kIQU5PiqP09XggZ3J6nW46K9BjVtycFwrb217l /PtgOpZWefkP6fnpiBkbXWLPQVAubDi1q3H15NMPi51xjgWQlhC7/0meTA== -----END CERTIFICATE-----Generated at Wed Jun 4 01:49:38 2025 by rpki-client