$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/KUdCzJNcKydU5n0X2WaHL2vqDL0.roa File: KUdCzJNcKydU5n0X2WaHL2vqDL0.roa (raw, json) Hash identifier: gQ2a0RwfQqs6eefFK9cXz0LExmqvMzP1H0q1LtkUW0A= Subject key identifier: 29:47:42:CC:93:5C:2B:27:54:E6:7D:17:D9:66:87:2F:6B:EA:0C:BD Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 183C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/KUdCzJNcKydU5n0X2WaHL2vqDL0.roa Signing time: Fri 17 Jan 2025 01:24:47 +0000 ROA not before: Fri 17 Jan 2025 01:24:47 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 103.5.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6204 (0x183c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:47 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=294742CC935C2B2754E67D17D966872F6BEA0CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:ab:e7:fa:7c:2d:8b:c7:26:2e:82:c4:0a: 4c:69:f2:09:29:40:03:0c:ef:5e:41:34:16:98:81: 7a:52:2b:a0:68:74:8d:64:5d:08:1c:c4:b1:4a:23: 0a:b8:12:04:40:79:52:aa:0f:c6:d0:d9:b0:be:07: c3:dd:42:18:9c:45:00:76:7f:32:36:8f:48:aa:2b: 79:00:ec:bb:c9:cf:e5:b4:fd:12:75:81:d6:c4:5d: cf:5a:6d:75:05:aa:12:cf:64:13:a7:46:4a:14:97: 4e:9c:83:25:d8:e0:0f:42:22:03:15:3f:dd:c5:60: 48:09:9f:c2:d7:00:5e:34:95:2d:4b:22:53:0d:f7: 0c:3a:5d:5f:42:70:1c:81:31:14:f8:65:cf:66:1f: 74:bf:f8:ac:ae:89:01:63:ca:fd:59:3e:30:9e:71: 04:c3:7a:a1:66:d1:65:36:4a:c4:e8:b7:fe:4b:fe: 57:6b:c4:b0:3f:a6:55:9e:9c:87:be:9d:cb:6d:d5: 65:98:c8:ca:3f:17:47:04:0b:44:08:63:51:f7:79: 49:07:56:eb:64:a1:47:57:1f:14:65:95:4b:4b:49: 75:e7:83:4c:62:81:93:0e:5d:14:85:23:29:e4:c6: 33:ad:a2:d5:d7:1f:ce:03:78:e8:08:99:58:d5:3c: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:47:42:CC:93:5C:2B:27:54:E6:7D:17:D9:66:87:2F:6B:EA:0C:BD X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/KUdCzJNcKydU5n0X2WaHL2vqDL0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.192.0/22 Signature Algorithm: sha256WithRSAEncryption 48:f3:1c:65:ed:6c:af:11:e5:5e:dd:86:0f:25:ba:af:b4:1a: 53:b1:d0:bc:6b:6f:29:c2:8d:2c:92:dd:c2:98:ac:df:ec:50: 34:e7:8f:6d:76:6e:59:82:39:57:54:98:69:50:39:dc:4e:8c: 0b:e7:14:40:5c:0b:be:ca:8a:d5:cc:a3:fb:7d:99:5b:f3:c9: e2:ab:ca:55:8a:36:5e:26:d5:f2:de:94:fd:ca:88:0d:a3:5e: a2:d7:96:60:44:21:80:8a:f5:fd:45:cb:fe:3d:37:83:5a:c9: 67:e5:5d:be:15:d6:2f:ee:c4:82:28:9c:a7:d3:0e:51:b9:d9: fb:64:7b:be:c9:70:aa:df:1d:e1:9f:d3:33:4f:5e:2f:22:a8: b9:6b:3e:14:dd:56:c2:94:49:cf:26:aa:ca:84:d3:34:e9:bf: c2:bb:5e:47:af:8b:fe:9e:9b:c4:f3:91:02:df:d0:a8:8d:d4: 1d:3f:71:a4:c0:ca:e7:db:16:60:f4:23:1a:71:16:a9:e3:6a: bd:26:0e:ab:fa:cc:ed:b8:7d:1e:ce:e3:a6:43:cb:86:e6:6d: 16:8b:52:07:ab:6b:99:e6:37:5d:1a:aa:c1:05:53:30:50:73: 56:bb:10:02:ae:75:95:b6:da:d0:9e:ba:eb:b2:e6:0c:42:29: 4a:3c:03:d5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI5NDc0MkNDOTM1QzJC Mjc1NEU2N0QxN0Q5NjY4NzJGNkJFQTBDQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJN6vn+nwti8cmLoLECkxp8gkpQAMM715BNBaYgXpSK6BodI1k XQgcxLFKIwq4EgRAeVKqD8bQ2bC+B8PdQhicRQB2fzI2j0iqK3kA7LvJz+W0/RJ1 gdbEXc9abXUFqhLPZBOnRkoUl06cgyXY4A9CIgMVP93FYEgJn8LXAF40lS1LIlMN 9ww6XV9CcByBMRT4Zc9mH3S/+KyuiQFjyv1ZPjCecQTDeqFm0WU2SsTot/5L/ldr xLA/plWenIe+nctt1WWYyMo/F0cEC0QIY1H3eUkHVutkoUdXHxRllUtLSXXng0xi gZMOXRSFIynkxjOtotXXH84DeOgImVjVPE3JAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUKUdCzJNcKydU5n0X2WaHL2vqDL0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0tVZEN6Sk5jS3lkVTVu MFgyV2FITDJ2cURMMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBcAwDQYJKoZIhvcNAQELBQADggEBAEjzHGXtbK8R5V7dhg8luq+0GlOx0Lxr bynCjSyS3cKYrN/sUDTnj212blmCOVdUmGlQOdxOjAvnFEBcC77KitXMo/t9mVvz yeKrylWKNl4m1fLelP3KiA2jXqLXlmBEIYCK9f1Fy/49N4NayWflXb4V1i/uxIIo nKfTDlG52ftke77JcKrfHeGf0zNPXi8iqLlrPhTdVsKUSc8mqsqE0zTpv8K7Xkev i/6em8TzkQLf0KiN1B0/caTAyufbFmD0IxpxFqnjar0mDqv6zO24fR7O46ZDy4bm bRaLUgera5nmN10aqsEFUzBQc1a7EAKudZW22tCeuuuy5gxCKUo8A9U= -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:54 2025 by rpki-client