$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/0uhzZLPlueLHEpVGyhhCt8EQOU0.roa File: 0uhzZLPlueLHEpVGyhhCt8EQOU0.roa (raw, json) Hash identifier: UyCG3+fHxjCUE4q3szLnf9gOyyyvDjc4ld9Qd6tIhz4= Subject key identifier: D2:E8:73:64:B3:E5:B9:E2:C7:12:95:46:CA:18:42:B7:C1:10:39:4D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1CC0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0uhzZLPlueLHEpVGyhhCt8EQOU0.roa Signing time: Thu 17 Jul 2025 03:55:33 +0000 ROA not before: Thu 17 Jul 2025 03:55:33 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.221.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 18:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7360 (0x1cc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:55:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D2E87364B3E5B9E2C7129546CA1842B7C110394D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c0:75:c4:64:c5:23:89:42:f9:aa:f4:28:10: db:d2:9e:46:02:87:b0:4c:47:d5:72:0e:5b:40:a9: df:58:74:c6:fc:78:f3:17:8f:a2:63:85:49:aa:f4: 7c:db:8f:80:30:8e:e8:36:1b:ee:1a:bc:6a:86:02: 49:15:ae:68:b2:b7:dd:6b:95:fd:45:68:61:e9:d4: f7:30:63:4d:1d:e6:52:47:dc:e9:4c:e5:54:ec:b5: f1:b6:8d:cd:ce:bf:19:db:4f:c2:c9:8c:2e:51:c0: cd:35:46:bd:f5:a9:fa:78:57:59:77:82:93:6d:20: 30:c5:1b:45:c6:b5:31:a8:63:39:a2:34:dc:a5:16: 87:84:9d:c8:5c:ec:d3:0a:75:c6:45:91:a9:6c:43: 1d:ac:56:39:d2:54:78:0b:a5:22:ee:01:ec:e4:1f: 98:c2:79:be:76:e1:34:64:f1:d3:9f:87:be:09:86: 6a:d3:16:0c:54:48:a6:e6:a3:d0:36:09:9b:4e:af: 6c:a0:09:7b:2a:cd:b5:67:dd:ac:5f:aa:4e:fa:1e: 56:95:79:f7:a8:6c:01:f8:28:5a:2f:f1:17:12:39: 41:fe:57:1a:a1:6c:1d:c1:e2:23:2a:ec:0d:e8:f1: a4:42:a0:1f:8a:29:7c:ae:2e:d9:38:84:89:d5:bc: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E8:73:64:B3:E5:B9:E2:C7:12:95:46:CA:18:42:B7:C1:10:39:4D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/0uhzZLPlueLHEpVGyhhCt8EQOU0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.40.0/22 Signature Algorithm: sha256WithRSAEncryption a7:23:04:fd:0c:d5:0e:f7:2e:13:48:50:5b:4f:ee:7e:ed:97: bb:e9:06:9e:43:22:b4:d1:b2:bc:96:a6:32:99:5d:97:a5:7d: 8f:d5:c9:d3:7f:59:73:4a:3d:5d:58:7f:5c:90:39:be:64:13: 55:34:a3:0d:3e:b9:e2:04:7c:24:8b:98:b7:fb:92:c8:06:8e: 46:76:1f:18:a1:45:a3:a7:64:0d:c5:83:13:d2:7e:ca:5d:1f: 3a:a3:55:2a:8f:8e:59:fa:f6:88:7d:64:40:56:a1:d1:1a:77: a4:7a:d7:e4:b7:d8:30:b4:da:81:11:3a:e6:d1:4b:4b:a1:ba: 6f:59:05:4b:b9:50:83:fb:17:ac:f9:8d:47:50:2d:69:1a:cf: c1:43:b1:74:a4:d3:0d:91:11:51:e5:4f:64:13:52:b3:53:fc: c7:f9:88:9c:b9:e7:a7:df:46:df:e1:a1:14:07:79:4e:4a:da: 79:40:e4:a2:74:31:8b:29:f1:fb:5e:24:45:ca:6d:b3:40:e4: 0a:75:8d:d9:67:2a:e9:f8:d2:e6:6d:ac:a5:58:90:7b:bb:62: 68:32:a3:87:eb:d6:e8:5c:20:dc:19:01:65:57:b1:8f:b8:9d: 10:ba:28:ec:ab:f9:60:35:46:03:f1:d7:80:b1:55:4c:da:84: 8e:e7:29:2d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzU1MzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQyRTg3MzY0QjNFNUI5 RTJDNzEyOTU0NkNBMTg0MkI3QzExMDM5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5wHXEZMUjiUL5qvQoENvSnkYCh7BMR9VyDltAqd9YdMb8ePMX j6JjhUmq9Hzbj4Awjug2G+4avGqGAkkVrmiyt91rlf1FaGHp1PcwY00d5lJH3OlM 5VTstfG2jc3OvxnbT8LJjC5RwM01Rr31qfp4V1l3gpNtIDDFG0XGtTGoYzmiNNyl FoeEnchc7NMKdcZFkalsQx2sVjnSVHgLpSLuAezkH5jCeb524TRk8dOfh74JhmrT FgxUSKbmo9A2CZtOr2ygCXsqzbVn3axfqk76HlaVefeobAH4KFov8RcSOUH+Vxqh bB3B4iMq7A3o8aRCoB+KKXyuLtk4hInVvIGjAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0uhzZLPlueLHEpVGyhhCt8EQOU0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzB1aHpaTFBsdWVMSEVw Vkd5aGhDdDhFUU9VMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3SgwDQYJKoZIhvcNAQELBQADggEBAKcjBP0M1Q73LhNIUFtP7n7tl7vpBp5D IrTRsryWpjKZXZelfY/VydN/WXNKPV1Yf1yQOb5kE1U0ow0+ueIEfCSLmLf7ksgG jkZ2HxihRaOnZA3FgxPSfspdHzqjVSqPjln69oh9ZEBWodEad6R61+S32DC02oER OubRS0uhum9ZBUu5UIP7F6z5jUdQLWkaz8FDsXSk0w2REVHlT2QTUrNT/Mf5iJy5 56ffRt/hoRQHeU5K2nlA5KJ0MYsp8fteJEXKbbNA5Ap1jdlnKun40uZtrKVYkHu7 Ymgyo4fr1uhcINwZAWVXsY+4nRC6KOyr+WA1RgPx14CxVUzahI7nKS0= -----END CERTIFICATE-----Generated at Mon Jul 21 13:48:34 2025 by rpki-client