$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa File: rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa (raw, json) Hash identifier: 7dRFJAQsC1LYrWNrBs+PdFLwnKNBBMP7ThvNOr58evU= Subject key identifier: AD:43:52:5D:73:52:91:9F:AC:58:D6:73:2F:92:4B:FB:88:DF:03:94 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1892 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa Signing time: Fri 17 Jan 2025 01:25:16 +0000 ROA not before: Fri 17 Jan 2025 01:25:16 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 103.10.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6290 (0x1892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:16 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=AD43525D7352919FAC58D6732F924BFB88DF0394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:2f:2a:4d:15:80:f2:57:20:5d:da:4b:fd: 0b:86:50:46:e3:9d:5a:52:4e:28:a4:5b:01:42:eb: 3e:e7:a6:7d:6e:5d:50:cf:19:62:ff:6f:6d:23:0c: 33:15:30:44:1a:49:c5:f3:1d:75:39:9d:cb:b9:6a: 75:95:b1:f2:f8:11:82:df:da:8b:5d:56:f3:0e:43: a2:91:7c:12:1a:7b:72:0a:05:cf:b8:24:d8:f1:e8: e0:72:a6:55:7a:e0:c4:77:a1:8e:89:7b:80:0e:fb: b7:94:f4:62:02:f4:b8:be:07:5c:d7:21:1c:ce:38: 88:c7:d3:a3:16:7e:3e:73:57:d1:e6:af:18:f7:f1: 59:26:3a:fe:a1:b7:45:2e:70:4f:9e:ef:58:ae:3d: 68:b8:43:b8:49:ee:0a:c8:2b:93:2b:06:2b:5e:17: e1:c2:1e:7e:68:7c:01:89:07:26:c8:b8:be:fb:9f: 29:9b:bb:f9:7b:90:6c:1f:90:67:21:27:0f:c3:7a: 8e:e3:58:f1:63:91:ad:ed:eb:9e:24:f4:b8:f3:19: 7a:bc:d6:96:09:2d:fe:fd:b7:f6:37:00:47:03:47: e2:2d:41:ea:56:f1:bb:31:7c:03:38:5d:96:ec:64: 3a:e0:73:2f:91:59:e0:8d:b6:73:d6:7e:48:d3:ea: df:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:43:52:5D:73:52:91:9F:AC:58:D6:73:2F:92:4B:FB:88:DF:03:94 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.10.1.0/24 Signature Algorithm: sha256WithRSAEncryption ad:c1:3f:83:ee:ad:d3:38:e3:66:f7:e9:2b:17:0b:34:5f:07: 80:62:0f:b2:f7:67:a5:b4:2f:9a:59:8b:12:87:f2:6f:ed:fe: ad:43:01:b2:eb:46:58:d6:da:3a:3c:4a:1e:c5:45:7b:b0:5c: 5b:31:ed:d3:9b:26:e3:59:c1:34:6c:ce:7c:b7:d7:7d:c2:ff: 3f:51:17:3d:f7:7a:2a:58:44:d2:ec:28:c8:c2:6d:29:64:0d: c6:4e:3f:92:b5:15:b3:c9:e9:47:fc:81:3f:44:62:cb:3f:32: d4:f3:00:97:f4:fb:ed:34:9c:ff:5f:bf:96:ed:d0:b5:30:45: 37:e9:ca:dc:7a:83:8c:22:e8:13:4b:a2:69:93:32:63:30:eb: 89:bc:73:7f:61:d0:34:6f:cf:f7:ac:ec:58:fe:ca:f0:4b:69: c2:79:e7:5e:22:d4:06:c8:ed:94:99:ca:4b:7b:3d:c1:3d:01: b9:19:a5:a6:fb:f6:6f:91:54:4e:24:47:0e:5b:0c:10:ab:16: 53:32:5d:5c:67:8a:8c:a5:d4:c6:c0:71:99:88:77:d1:e2:1c: 52:d9:25:1e:d8:e4:96:0b:73:48:9c:22:d5:38:56:d1:03:74: 17:45:62:9a:19:60:95:df:7c:e2:28:4f:8b:79:c3:a1:ae:e8: de:24:49:f7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFENDM1MjVENzM1Mjkx OUZBQzU4RDY3MzJGOTI0QkZCODhERjAzOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPFy8qTRWA8lcgXdpL/QuGUEbjnVpSTiikWwFC6z7npn1uXVDP GWL/b20jDDMVMEQaScXzHXU5ncu5anWVsfL4EYLf2otdVvMOQ6KRfBIae3IKBc+4 JNjx6OByplV64MR3oY6Je4AO+7eU9GIC9Li+B1zXIRzOOIjH06MWfj5zV9Hmrxj3 8VkmOv6ht0UucE+e71iuPWi4Q7hJ7grIK5MrBiteF+HCHn5ofAGJBybIuL77nymb u/l7kGwfkGchJw/Deo7jWPFjka3t654k9LjzGXq81pYJLf79t/Y3AEcDR+ItQepW 8bsxfAM4XZbsZDrgcy+RWeCNtnPWfkjT6t+jAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUrUNSXXNSkZ+sWNZzL5JL+4jfA5QwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3JVTlNYWE5Ta1otc1dO WnpMNUpMLTRqZkE1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnCgEwDQYJKoZIhvcNAQELBQADggEBAK3BP4PurdM442b36SsXCzRfB4BiD7L3 Z6W0L5pZixKH8m/t/q1DAbLrRljW2jo8Sh7FRXuwXFsx7dObJuNZwTRszny3133C /z9RFz33eipYRNLsKMjCbSlkDcZOP5K1FbPJ6Uf8gT9EYss/MtTzAJf0++00nP9f v5bt0LUwRTfpytx6g4wi6BNLommTMmMw64m8c39h0DRvz/es7Fj+yvBLacJ5514i 1AbI7ZSZykt7PcE9AbkZpab79m+RVE4kRw5bDBCrFlMyXVxnioyl1MbAcZmId9Hi HFLZJR7Y5JYLc0icItU4VtEDdBdFYpoZYJXffOIoT4t5w6Gu6N4kSfc= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:36 2025 by rpki-client