$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3350/V1y3g7_UwsryAJsJ4xMbSLRjKmo.roa File: V1y3g7_UwsryAJsJ4xMbSLRjKmo.roa (raw, json) Hash identifier: 5vapIZiEtMa1uqodBseSnY65f8UTyP+AL9UFNhelV3c= Subject key identifier: 57:5C:B7:83:BF:D4:C2:CA:F2:00:9B:09:E3:13:1B:48:B4:63:2A:6A Certificate issuer: /CN=35D8CC5E1D2F35FFBAA7A909F5520B3DC4C1588C Certificate serial: D9 Authority key identifier: 35:D8:CC:5E:1D:2F:35:FF:BA:A7:A9:09:F5:52:0B:3D:C4:C1:58:8C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NdjMXh0vNf-6p6kJ9VILPcTBWIw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/V1y3g7_UwsryAJsJ4xMbSLRjKmo.roa Signing time: Fri 21 Mar 2025 03:32:19 +0000 ROA not before: Fri 21 Mar 2025 03:32:19 +0000 ROA not after: Fri 06 Feb 2026 03:05:20 +0000 asID: 18464 IP address blocks: 163.61.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/NdjMXh0vNf-6p6kJ9VILPcTBWIw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/NdjMXh0vNf-6p6kJ9VILPcTBWIw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NdjMXh0vNf-6p6kJ9VILPcTBWIw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35D8CC5E1D2F35FFBAA7A909F5520B3DC4C1588C Validity Not Before: Mar 21 03:32:19 2025 GMT Not After : Feb 6 03:05:20 2026 GMT Subject: CN=575CB783BFD4C2CAF2009B09E3131B48B4632A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a4:5e:28:fc:7f:55:07:77:d9:ce:6c:96:aa: c0:6e:a3:50:6f:33:3f:54:56:49:e2:f3:1a:c1:72: af:e2:e5:ff:7b:45:8c:c5:c1:ba:89:3e:dc:8c:e1: ec:76:45:d4:1a:06:04:39:7e:69:dd:a4:6a:33:ad: 48:9b:c1:37:17:65:0b:02:65:45:88:94:84:89:6f: bf:26:34:c1:91:b2:8a:84:5f:fa:be:9c:d5:80:e4: 81:a9:2b:11:4d:ac:ae:c9:f6:f3:64:00:fe:2e:d4: 46:1a:b5:1f:60:6a:68:e9:18:d4:0f:c8:4d:7a:c3: 5d:57:50:a1:33:e7:83:57:3a:e8:c1:e8:ed:96:f7: 3b:fa:0e:29:d0:f9:f6:b8:ea:a1:18:2a:ee:5a:89: bc:fb:99:8b:72:c4:60:d2:64:d7:02:2c:89:73:ed: 60:f3:d4:3f:13:53:50:17:39:34:c1:58:22:c2:f6: 56:5d:af:e1:c1:5b:bb:51:ac:a6:62:f7:11:5e:6a: 4d:31:c9:16:d7:c3:5b:00:e6:83:e6:4c:79:4e:5f: 30:df:31:88:eb:21:e1:7f:e1:93:d3:48:6b:41:6c: 66:bb:ed:17:ae:4b:1a:55:dc:c5:18:84:ca:cd:2b: 5c:27:e3:ff:a4:2b:4d:89:36:6b:d5:b2:8d:12:19: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:B7:83:BF:D4:C2:CA:F2:00:9B:09:E3:13:1B:48:B4:63:2A:6A X509v3 Authority Key Identifier: keyid:35:D8:CC:5E:1D:2F:35:FF:BA:A7:A9:09:F5:52:0B:3D:C4:C1:58:8C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/NdjMXh0vNf-6p6kJ9VILPcTBWIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NdjMXh0vNf-6p6kJ9VILPcTBWIw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/V1y3g7_UwsryAJsJ4xMbSLRjKmo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.62.0/24 Signature Algorithm: sha256WithRSAEncryption 98:24:82:c2:a7:86:2f:fb:99:29:a7:a5:9e:8f:b5:8d:39:22: 3d:a1:72:91:e4:45:ec:f8:32:d7:36:6c:11:c2:24:db:79:54: 55:ac:6f:18:15:a0:17:2f:78:93:96:5c:31:41:cd:8c:81:b8: 82:e9:59:63:21:18:34:9a:40:9e:49:96:e5:0d:76:b4:db:e1: f3:18:f2:ad:8f:51:de:9c:29:0e:19:ec:df:e7:48:58:b0:eb: d9:22:5a:52:7b:10:d0:d2:f0:d0:fb:4b:14:b0:c1:96:6f:8c: 1c:69:b7:b4:cd:ec:c4:ae:d3:09:4d:5c:c2:f4:7b:a0:8f:f8: d7:4d:8e:33:a1:06:1a:99:29:d2:08:c4:e1:e3:dc:69:4b:c7: 98:32:0e:98:5c:a5:b5:cf:98:e1:3a:72:97:a1:8a:76:71:5a: 9f:4c:68:86:da:cf:81:d3:11:e6:b1:4c:7e:d6:a3:c7:e2:42: 10:c7:a8:8c:10:b1:e3:2a:a0:3d:9b:71:3d:74:63:34:88:f6: 5b:2c:61:df:a5:b2:c9:0b:9c:96:52:43:b8:a9:b5:d3:96:23: 4d:a3:4c:aa:4c:16:0e:63:b6:88:0c:6c:b0:16:14:af:78:35: 82:df:c7:0a:dc:0f:38:79:d5:b7:69:da:3a:4b:d8:f0:dc:8c: c6:f8:97:47 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICANkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE OENDNUUxRDJGMzVGRkJBQTdBOTA5RjU1MjBCM0RDNEMxNTg4QzAeFw0yNTAzMjEw MzMyMTlaFw0yNjAyMDYwMzA1MjBaMDMxMTAvBgNVBAMTKDU3NUNCNzgzQkZENEMy Q0FGMjAwOUIwOUUzMTMxQjQ4QjQ2MzJBNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDepF4o/H9VB3fZzmyWqsBuo1BvMz9UVkni8xrBcq/i5f97RYzF wbqJPtyM4ex2RdQaBgQ5fmndpGozrUibwTcXZQsCZUWIlISJb78mNMGRsoqEX/q+ nNWA5IGpKxFNrK7J9vNkAP4u1EYatR9gamjpGNQPyE16w11XUKEz54NXOujB6O2W 9zv6DinQ+fa46qEYKu5aibz7mYtyxGDSZNcCLIlz7WDz1D8TU1AXOTTBWCLC9lZd r+HBW7tRrKZi9xFeak0xyRbXw1sA5oPmTHlOXzDfMYjrIeF/4ZPTSGtBbGa77Reu SxpV3MUYhMrNK1wn4/+kK02JNmvVso0SGaN3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUV1y3g7/UwsryAJsJ4xMbSLRjKmowHwYDVR0jBBgwFoAUNdjMXh0vNf+6p6kJ 9VILPcTBWIwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM1 MC9OZGpNWGgwdk5mLTZwNmtKOVZJTFBjVEJXSXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL05kak1YaDB2TmYtNnA2a0o5VklMUGNUQldJdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNTAvVjF5M2c3X1V3c3J5 QUpzSjR4TWJTTFJqS21vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKM9PjANBgkqhkiG9w0BAQsFAAOCAQEAmCSCwqeGL/uZKaelno+1jTkiPaFy keRF7Pgy1zZsEcIk23lUVaxvGBWgFy94k5ZcMUHNjIG4gulZYyEYNJpAnkmW5Q12 tNvh8xjyrY9R3pwpDhns3+dIWLDr2SJaUnsQ0NLw0PtLFLDBlm+MHGm3tM3sxK7T CU1cwvR7oI/4102OM6EGGpkp0gjE4ePcaUvHmDIOmFyltc+Y4Tpyl6GKdnFan0xo htrPgdMR5rFMftajx+JCEMeojBCx4yqgPZtxPXRjNIj2Wyxh36WyyQucllJDuKm1 05YjTaNMqkwWDmO2iAxssBYUr3g1gt/HCtwPOHnVt2naOkvY8NyMxviXRw== -----END CERTIFICATE-----Generated at Fri Apr 4 22:02:22 2025 by rpki-client