$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/muwkrrFJGxQ_XIPHHi2BMjnKlHo.roa File: muwkrrFJGxQ_XIPHHi2BMjnKlHo.roa (raw, json) Hash identifier: LYrzTeAjtbVOphgRPHrNqrs4qHRh5bY2kq9gdyxOpQs= Subject key identifier: 9A:EC:24:AE:B1:49:1B:14:3F:5C:83:C7:1E:2D:81:32:39:CA:94:7A Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Certificate serial: 1D95 Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/muwkrrFJGxQ_XIPHHi2BMjnKlHo.roa Signing time: Fri 28 Feb 2025 05:53:28 +0000 ROA not before: Fri 28 Feb 2025 05:53:28 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4134 IP address blocks: 103.236.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 09:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7573 (0x1d95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Validity Not Before: Feb 28 05:53:28 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9AEC24AEB1491B143F5C83C71E2D813239CA947A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:43:96:6d:48:5d:12:36:3f:77:fa:04:f7: a5:d6:40:3a:70:48:06:ce:e3:29:29:e7:23:93:7c: f1:c3:9d:04:9c:98:1c:53:30:5d:0e:27:55:57:51: 38:85:53:95:4b:77:25:3f:00:53:87:2d:eb:65:63: 87:12:04:5e:5d:85:14:77:ca:4c:c0:14:c8:62:27: ca:33:c5:42:e5:ef:1c:93:1d:98:da:fa:5c:e3:34: 4c:b7:e8:79:a8:57:5a:2e:63:3d:a4:1b:33:13:eb: e2:f2:c1:0c:21:55:cd:77:a5:f5:34:67:cf:7f:27: 71:f7:e1:b7:51:09:04:34:fd:0e:0d:04:7c:0f:b5: 0f:d5:c2:39:a4:38:91:6b:76:85:c2:fc:3d:51:79: ca:3f:a9:7b:df:40:40:04:97:54:d4:43:d8:e1:c6: 51:8d:10:49:1d:c7:a2:74:89:a4:91:00:b5:d0:39: d7:00:ed:93:15:1a:32:4d:eb:2b:fe:cf:3c:12:c5: 60:46:3b:7f:19:ed:7d:43:66:8b:2f:bb:e2:a0:bf: e9:cf:a2:99:72:0d:ec:d7:1a:6d:13:29:a5:13:c8: 2a:80:47:66:5a:3d:db:84:db:8f:6e:9f:4e:54:80: 32:68:36:a4:3c:b4:8d:4a:ca:5d:60:f4:06:63:92: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:24:AE:B1:49:1B:14:3F:5C:83:C7:1E:2D:81:32:39:CA:94:7A X509v3 Authority Key Identifier: keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/muwkrrFJGxQ_XIPHHi2BMjnKlHo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.232.0/22 Signature Algorithm: sha256WithRSAEncryption 49:4f:e5:e4:db:dc:69:9c:e8:52:24:a7:8f:ee:16:6d:84:10: ab:57:2b:1f:20:3a:56:46:f0:12:c9:2b:6d:61:33:90:44:06: 70:c1:d3:c4:29:ac:99:1f:4a:64:ce:5f:78:d4:4e:a3:97:c5: 73:49:87:02:2b:72:cd:88:ff:e5:61:3b:93:33:7e:dd:59:1a: 80:0d:31:40:bc:9c:bb:1d:2a:88:c1:08:f6:59:e8:d5:3b:a0: 1c:ff:0e:47:96:1b:2b:96:6c:f6:4c:4b:3e:0b:d2:a9:c1:9b: a4:2d:0d:e2:92:44:e3:12:1d:d4:d2:fa:f9:db:14:d2:48:e5: fe:a8:1a:d4:cb:f0:94:ee:05:20:c2:bc:a1:db:10:b3:4f:f9: 53:24:f4:7d:dc:4a:30:4e:bf:b2:ed:55:cb:04:4c:76:c1:29: 4e:69:38:87:89:13:6a:94:b4:94:a6:b9:39:37:72:f8:18:56: 7a:2d:90:c6:5a:b2:d7:c1:22:5c:91:b4:7d:17:9f:2a:05:16: 76:6f:6e:28:39:38:0b:33:42:c7:cb:bf:26:c6:eb:d0:a2:aa: 23:6e:7b:cb:cb:08:da:33:65:d8:78:ee:6b:f8:80:d1:29:cb: 67:65:f4:79:f9:75:4b:ca:8f:e2:9c:07:76:59:7e:ea:3a:73: c2:07:3e:27 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yNTAyMjgw NTUzMjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlBRUMyNEFFQjE0OTFC MTQzRjVDODNDNzFFMkQ4MTMyMzlDQTk0N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfO0OWbUhdEjY/d/oE96XWQDpwSAbO4ykp5yOTfPHDnQScmBxT MF0OJ1VXUTiFU5VLdyU/AFOHLetlY4cSBF5dhRR3ykzAFMhiJ8ozxULl7xyTHZja +lzjNEy36HmoV1ouYz2kGzMT6+LywQwhVc13pfU0Z89/J3H34bdRCQQ0/Q4NBHwP tQ/VwjmkOJFrdoXC/D1Reco/qXvfQEAEl1TUQ9jhxlGNEEkdx6J0iaSRALXQOdcA 7ZMVGjJN6yv+zzwSxWBGO38Z7X1DZosvu+Kgv+nPoplyDezXGm0TKaUTyCqAR2Za PduE249un05UgDJoNqQ8tI1Kyl1g9AZjkg9pAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmuwkrrFJGxQ/XIPHHi2BMjnKlHowHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL211d2tyckZKR3hRX1hJ UEhIaTJCTWpuS2xIby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7OgwDQYJKoZIhvcNAQELBQADggEBAElP5eTb3Gmc6FIkp4/uFm2EEKtXKx8g OlZG8BLJK21hM5BEBnDB08QprJkfSmTOX3jUTqOXxXNJhwIrcs2I/+VhO5Mzft1Z GoANMUC8nLsdKojBCPZZ6NU7oBz/DkeWGyuWbPZMSz4L0qnBm6QtDeKSROMSHdTS +vnbFNJI5f6oGtTL8JTuBSDCvKHbELNP+VMk9H3cSjBOv7LtVcsETHbBKU5pOIeJ E2qUtJSmuTk3cvgYVnotkMZastfBIlyRtH0XnyoFFnZvbig5OAszQsfLvybG69Ci qiNue8vLCNozZdh47mv4gNEpy2dl9Hn5dUvKj+KcB3ZZfuo6c8IHPic= -----END CERTIFICATE-----Generated at Thu Mar 13 07:06:51 2025 by rpki-client