$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UzUTsg6Waee_jonteXefZR-XSU0.roa File: UzUTsg6Waee_jonteXefZR-XSU0.roa (raw, json) Hash identifier: e/C7wlfU+tI1x2yI5r4XgEsDeBBJXgeeQp4ykjzZf6U= Subject key identifier: 53:35:13:B2:0E:96:69:E7:BF:8E:89:ED:79:77:9F:65:1F:97:49:4D Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1897 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UzUTsg6Waee_jonteXefZR-XSU0.roa Signing time: Fri 17 Jan 2025 01:25:17 +0000 ROA not before: Fri 17 Jan 2025 01:25:17 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 103.221.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6295 (0x1897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:17 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=533513B20E9669E7BF8E89ED79779F651F97494D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:8f:54:75:c0:70:51:28:9a:1b:1e:19:bf: 8f:70:6a:5e:c2:94:13:1b:a5:d5:17:02:8f:2e:95: 56:f8:c8:29:e3:9c:d7:09:a6:6a:c1:87:35:88:e3: a9:07:b8:c6:6f:c3:f3:e6:cd:3d:f0:ea:31:95:65: de:7a:f4:0c:5b:fd:f1:ed:5c:37:33:f6:ad:90:96: b9:de:3f:34:f0:29:7b:dd:41:a5:ce:2e:cc:3e:7e: 1e:87:ec:10:29:63:9b:97:fd:9c:cc:78:01:4b:61: 3d:23:9f:30:12:2b:dc:5d:f5:59:89:b6:20:c5:79: 02:1c:bb:68:a1:b1:5e:ee:e7:87:63:07:bd:b6:f3: 90:1f:ee:71:bf:95:e9:d9:eb:32:ac:ca:75:86:e1: cf:ed:e9:62:0f:5a:ed:6a:97:ce:c9:2a:03:fd:9f: 52:ad:f0:de:8d:60:61:4a:8d:df:c3:64:40:0b:31: 77:56:4a:5a:c0:7e:0e:47:9d:94:a2:76:7c:18:c0: 26:75:a3:28:0f:54:45:6d:53:86:3c:9b:34:fb:f9: e4:17:24:80:45:fb:37:61:c9:5f:9b:e8:bb:70:88: bc:45:e4:ae:31:94:fd:b0:d5:14:03:af:f7:7f:2e: ca:a5:a7:ff:41:77:85:1e:d2:a8:eb:4b:31:63:2e: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:35:13:B2:0E:96:69:E7:BF:8E:89:ED:79:77:9F:65:1F:97:49:4D X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UzUTsg6Waee_jonteXefZR-XSU0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.5.0/24 Signature Algorithm: sha256WithRSAEncryption c9:1e:e9:3c:b9:fb:77:63:20:8b:2b:e7:a1:e4:f4:34:4f:2c: 15:94:e0:7b:a5:33:45:56:f6:73:60:bb:77:82:5a:4f:2d:0d: 15:0f:9c:0e:e8:ae:12:69:9f:75:ef:ec:42:e3:37:bc:63:9b: f3:76:0d:db:37:4b:2e:bc:82:68:d4:e6:34:b3:cc:43:32:9d: af:19:41:e9:89:25:20:f7:bd:06:41:a8:11:eb:3e:d0:ab:fc: 17:52:c4:22:ab:67:61:57:21:ed:b5:ba:5e:3d:7d:ba:03:66: ce:13:44:57:ea:90:e2:f2:29:7a:b5:4d:34:a0:40:14:04:95: bf:79:15:49:fd:85:88:ad:99:e9:df:60:52:0d:c0:ed:0b:97: 3d:bf:6e:d0:fd:17:06:94:5d:8b:0e:f7:7b:9b:76:63:91:2b: 85:1d:3e:51:1d:7c:af:3c:8e:0f:07:91:53:48:76:3e:30:d7: f5:18:24:8b:db:04:f8:51:4c:6e:ea:f3:85:a8:d8:22:25:8d: 33:7d:e3:20:3a:7c:90:1b:e1:e9:0e:09:0b:f3:11:cd:31:7e: bb:21:41:d5:52:a3:9b:ec:eb:74:7f:cc:3b:bd:c6:05:bb:40: 9b:99:77:0c:fb:af:ea:9b:c8:5e:77:fa:95:5c:af:fe:f7:43: 6a:eb:d2:c3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUzMzUxM0IyMEU5NjY5 RTdCRjhFODlFRDc5Nzc5RjY1MUY5NzQ5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKEo9UdcBwUSiaGx4Zv49wal7ClBMbpdUXAo8ulVb4yCnjnNcJ pmrBhzWI46kHuMZvw/PmzT3w6jGVZd569Axb/fHtXDcz9q2QlrnePzTwKXvdQaXO Lsw+fh6H7BApY5uX/ZzMeAFLYT0jnzASK9xd9VmJtiDFeQIcu2ihsV7u54djB722 85Af7nG/lenZ6zKsynWG4c/t6WIPWu1ql87JKgP9n1Kt8N6NYGFKjd/DZEALMXdW SlrAfg5HnZSidnwYwCZ1oygPVEVtU4Y8mzT7+eQXJIBF+zdhyV+b6LtwiLxF5K4x lP2w1RQDr/d/Lsqlp/9Bd4Ue0qjrSzFjLv+bAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUUzUTsg6Waee/jonteXefZR+XSU0wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1V6VVRzZzZXYWVlX2pv bnRlWGVmWlItWFNVMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3QUwDQYJKoZIhvcNAQELBQADggEBAMke6Ty5+3djIIsr56Hk9DRPLBWU4Hul M0VW9nNgu3eCWk8tDRUPnA7orhJpn3Xv7ELjN7xjm/N2Dds3Sy68gmjU5jSzzEMy na8ZQemJJSD3vQZBqBHrPtCr/BdSxCKrZ2FXIe21ul49fboDZs4TRFfqkOLyKXq1 TTSgQBQElb95FUn9hYitmenfYFINwO0Llz2/btD9FwaUXYsO93ubdmORK4UdPlEd fK88jg8HkVNIdj4w1/UYJIvbBPhRTG7q84Wo2CIljTN94yA6fJAb4ekOCQvzEc0x frshQdVSo5vs63R/zDu9xgW7QJuZdwz7r+qbyF53+pVcr/73Q2rr0sM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:12 2025 by rpki-client