$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/UZHfKjNy_777Q9bAPY-TRRLF7JM.roa File: UZHfKjNy_777Q9bAPY-TRRLF7JM.roa (raw, json) Hash identifier: gTXt1ZXlzhAqrXd8fGYX/D/fL64eBW9l+ESGdbQgWzk= Subject key identifier: 51:91:DF:2A:33:72:FF:BE:FB:43:D6:C0:3D:8F:93:45:12:C5:EC:93 Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 1D4E Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/UZHfKjNy_777Q9bAPY-TRRLF7JM.roa Signing time: Wed 26 Mar 2025 02:11:18 +0000 ROA not before: Wed 26 Mar 2025 02:11:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4515 IP address blocks: 123.49.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7502 (0x1d4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Mar 26 02:11:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5191DF2A3372FFBEFB43D6C03D8F934512C5EC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:85:9b:5a:a7:f4:81:35:88:4f:1c:0f:20: bf:cd:b2:c0:a2:87:ae:1a:ae:88:27:5f:19:00:7a: 28:8d:e7:1a:c0:22:a5:d0:6b:2a:54:28:8c:ec:d9: 0f:a7:90:12:9c:9d:8f:eb:04:78:ca:ee:7e:51:18: 77:a5:68:52:d6:eb:ba:8b:df:14:eb:c0:1b:03:5d: 17:52:99:8c:cf:22:a9:67:83:ad:a2:68:9c:68:f8: a0:f6:0b:26:38:0a:fa:74:68:e3:84:a3:39:26:26: 20:4d:80:bf:8b:91:d0:32:58:26:55:b8:90:3d:65: d7:58:1f:03:0d:33:ce:2b:77:0a:17:6e:c5:89:25: aa:76:db:d8:76:71:93:65:a7:50:67:20:b7:3a:94: 74:e6:1d:f0:15:76:2f:01:24:d8:a4:bf:be:45:43: 92:0f:f5:79:cf:03:6e:50:e8:60:03:bc:e5:e5:f2: 87:f4:b2:c7:00:f5:65:6b:d2:4b:6c:8b:3c:10:ad: 89:1b:02:ba:ef:d3:71:b0:40:d7:54:b8:e4:25:d5: 13:ab:9d:ac:5c:12:95:5f:93:b4:a2:d1:aa:63:78: 89:54:8e:7a:9f:84:54:06:13:62:fc:be:40:a3:c3: 7f:18:38:4a:e6:29:cc:a7:b6:21:65:17:29:9f:38: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:91:DF:2A:33:72:FF:BE:FB:43:D6:C0:3D:8F:93:45:12:C5:EC:93 X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/UZHfKjNy_777Q9bAPY-TRRLF7JM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.242.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b2:dc:f2:75:91:6f:7c:14:8f:84:ff:7d:59:8b:38:f7:48: aa:4a:46:b9:ad:c9:81:b9:61:56:37:e6:29:9a:ea:7f:cd:a4: e0:c5:23:b3:f2:2c:b7:b2:87:ae:9b:de:bf:d4:4f:4e:82:7b: d2:47:e5:2d:7a:38:12:7f:52:2f:c5:d3:88:e4:13:52:6f:0f: 67:77:1c:ec:f2:88:68:da:0b:97:b2:c3:3b:34:cf:44:15:59: 38:98:cd:70:d4:3f:21:29:9e:cb:14:85:e5:92:4a:51:ed:43: be:d5:5a:83:1a:7a:03:fb:ee:86:30:d5:a1:1c:34:c0:da:75: 89:07:37:e4:d6:d9:a4:1a:ce:38:7f:0a:bd:8e:65:dd:ea:b0: cd:a6:8d:f3:9f:9a:74:0a:f0:c4:a3:d6:e2:b0:c3:e9:91:9f: b9:ac:67:0a:8a:34:ac:17:8d:29:4c:b0:23:07:da:c7:19:26: 0c:02:28:7f:1d:35:5a:01:f1:96:40:37:5e:3b:7f:20:cc:16: 3d:15:55:c7:92:ad:ca:88:3d:98:b4:aa:48:77:3f:4f:ef:11: 2c:6e:ea:a1:b0:69:2b:5b:65:10:22:74:ab:89:53:1f:47:2f: 80:16:b2:34:94:1e:e1:74:6d:11:28:76:c6:00:e7:95:a2:05: 61:eb:70:04 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTAzMjYw MjExMThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUxOTFERjJBMzM3MkZG QkVGQjQzRDZDMDNEOEY5MzQ1MTJDNUVDOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpIYWbWqf0gTWITxwPIL/NssCih64arognXxkAeiiN5xrAIqXQ aypUKIzs2Q+nkBKcnY/rBHjK7n5RGHelaFLW67qL3xTrwBsDXRdSmYzPIqlng62i aJxo+KD2CyY4Cvp0aOOEozkmJiBNgL+LkdAyWCZVuJA9ZddYHwMNM84rdwoXbsWJ Jap229h2cZNlp1BnILc6lHTmHfAVdi8BJNikv75FQ5IP9XnPA25Q6GADvOXl8of0 sscA9WVr0ktsizwQrYkbArrv03GwQNdUuOQl1ROrnaxcEpVfk7Si0apjeIlUjnqf hFQGE2L8vkCjw38YOErmKcyntiFlFymfOJC3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUUZHfKjNy/777Q9bAPY+TRRLF7JMwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvVVpIZktqTnlfNzc3 UTliQVBZLVRSUkxGN0pNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx8jANBgkqhkiG9w0BAQsFAAOCAQEATbLc8nWRb3wUj4T/fVmLOPdIqkpG ua3JgblhVjfmKZrqf82k4MUjs/Ist7KHrpvev9RPToJ70kflLXo4En9SL8XTiOQT Um8PZ3cc7PKIaNoLl7LDOzTPRBVZOJjNcNQ/ISmeyxSF5ZJKUe1DvtVagxp6A/vu hjDVoRw0wNp1iQc35NbZpBrOOH8KvY5l3eqwzaaN85+adArwxKPW4rDD6ZGfuaxn Coo0rBeNKUywIwfaxxkmDAIofx01WgHxlkA3Xjt/IMwWPRVVx5Ktyog9mLSqSHc/ T+8RLG7qobBpK1tlECJ0q4lTH0cvgBayNJQe4XRtESh2xgDnlaIFYetwBA== -----END CERTIFICATE-----Generated at Wed Jun 4 00:53:46 2025 by rpki-client