$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ns9wScn8kvFTzlA4eC2k95lXnvU.roa File: ns9wScn8kvFTzlA4eC2k95lXnvU.roa (raw, json) Hash identifier: u8uqhchUVeTEY3phLIkm3f10i8O1nybT06HAnif5Qx0= Subject key identifier: 9E:CF:70:49:C9:FC:92:F1:53:CE:50:38:78:2D:A4:F7:99:57:9E:F5 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: 3062 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ns9wScn8kvFTzlA4eC2k95lXnvU.roa Signing time: Sun 30 Mar 2025 19:58:20 +0000 ROA not before: Sun 30 Mar 2025 19:58:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4816 IP address blocks: 103.39.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12386 (0x3062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Mar 30 19:58:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9ECF7049C9FC92F153CE5038782DA4F799579EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:c2:34:31:80:a7:3a:c8:19:7c:b3:91:ee: bc:d6:9b:43:c2:89:22:83:1d:55:a8:7f:64:d6:3d: a9:d4:6a:94:07:ad:bf:8a:cd:6d:23:c9:f4:9a:da: f3:cd:59:1e:2d:90:6d:58:74:bd:98:3d:e2:94:f4: 33:a5:1a:27:17:b3:5e:99:90:8b:0a:a9:9d:5a:0d: 4c:17:4a:d4:6b:9b:a7:6f:8e:f1:6c:7d:c4:03:99: ce:fd:03:d9:74:5b:9b:02:77:49:f3:a4:a8:66:31: 67:84:39:0b:85:12:ed:04:bd:3f:88:af:40:e2:19: 57:dc:b1:ba:0a:a3:db:75:85:d6:cb:c4:5f:77:3e: 77:b4:ff:86:99:90:65:63:66:25:38:3c:1a:85:fc: 3e:d2:40:9e:44:ba:76:23:36:5e:5e:8a:fa:01:61: a3:2b:4d:08:4e:79:97:d8:f6:eb:50:35:cc:17:b7: c8:40:13:bf:55:8c:41:5f:9a:cd:bf:15:c1:03:03: 00:0c:9c:3d:17:ee:f8:42:15:f7:21:55:16:b6:ca: 18:a6:68:72:13:2a:97:a3:e1:7c:39:ed:f2:d9:d5: 36:51:f9:7e:04:bf:b5:85:c9:8a:43:99:af:4a:3c: 64:29:ba:b5:c1:24:7d:20:a4:6c:bd:9a:d9:58:65: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CF:70:49:C9:FC:92:F1:53:CE:50:38:78:2D:A4:F7:99:57:9E:F5 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ns9wScn8kvFTzlA4eC2k95lXnvU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.39.208.0/20 Signature Algorithm: sha256WithRSAEncryption 18:4f:5d:43:0e:66:cf:32:17:db:cd:2b:c0:f0:64:72:1d:a2: 84:a6:2b:42:99:05:4d:91:25:2f:4a:b8:d1:ee:d8:7b:6c:94: eb:56:e6:67:bd:f2:3d:0f:a2:9a:76:6b:33:70:c0:3f:5d:96: 0b:7c:7f:d8:87:70:97:1c:a6:4c:53:70:8d:fa:90:13:fa:12: 07:a6:4a:72:66:37:bf:50:01:37:52:40:12:0e:17:2a:32:da: 9c:d9:a9:02:ac:c3:ba:98:1d:5c:6f:7b:5a:ca:68:29:39:1b: dc:68:a4:37:16:31:dc:ef:c4:05:16:1f:ce:53:17:4b:f4:9d: d3:b0:ed:32:8e:a1:b3:d1:d7:be:d3:a8:0a:70:32:2e:4c:cc: e4:e5:4b:bf:cc:94:48:d0:5f:03:5a:c9:89:66:fc:f6:33:a6: f6:cb:cb:78:8e:25:20:f7:05:5e:e1:6e:e4:22:ea:cd:b9:db: 9a:6f:8f:d1:9e:0c:45:62:1e:3b:59:ed:40:18:c3:7e:7f:73: 6d:6c:9d:94:fc:9d:4b:20:d6:31:60:72:72:0e:88:23:7e:9a: 0e:f2:51:77:6a:1f:1a:15:e4:6b:3b:e4:f4:77:b5:db:d1:e9: f9:be:0a:7a:e9:59:07:08:f3:fe:13:c6:ce:c4:65:c9:33:2b: fc:94:59:5b -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICMGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx OTU4MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlFQ0Y3MDQ5QzlGQzky RjE1M0NFNTAzODc4MkRBNEY3OTk1NzlFRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw1MI0MYCnOsgZfLOR7rzWm0PCiSKDHVWof2TWPanUapQHrb+K zW0jyfSa2vPNWR4tkG1YdL2YPeKU9DOlGicXs16ZkIsKqZ1aDUwXStRrm6dvjvFs fcQDmc79A9l0W5sCd0nzpKhmMWeEOQuFEu0EvT+Ir0DiGVfcsboKo9t1hdbLxF93 Pne0/4aZkGVjZiU4PBqF/D7SQJ5EunYjNl5eivoBYaMrTQhOeZfY9utQNcwXt8hA E79VjEFfms2/FcEDAwAMnD0X7vhCFfchVRa2yhimaHITKpej4Xw57fLZ1TZR+X4E v7WFyYpDma9KPGQpurXBJH0gpGy9mtlYZZrdAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUns9wScn8kvFTzlA4eC2k95lXnvUwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y 5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2 My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvbnM5d1NjbjhrdkZU emxBNGVDMms5NWxYbnZVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBGcn0DANBgkqhkiG9w0BAQsFAAOCAQEAGE9dQw5mzzIX280rwPBkch2ihKYr QpkFTZElL0q40e7Ye2yU61bmZ73yPQ+imnZrM3DAP12WC3x/2IdwlxymTFNwjfqQ E/oSB6ZKcmY3v1ABN1JAEg4XKjLanNmpAqzDupgdXG97WspoKTkb3GikNxYx3O/E BRYfzlMXS/Sd07DtMo6hs9HXvtOoCnAyLkzM5OVLv8yUSNBfA1rJiWb89jOm9svL eI4lIPcFXuFu5CLqzbnbmm+P0Z4MRWIeO1ntQBjDfn9zbWydlPydSyDWMWBycg6I I36aDvJRd2ofGhXkazvk9He129Hp+b4KeulZBwjz/hPGzsRlyTMr/JRZWw== -----END CERTIFICATE-----Generated at Sat May 17 21:25:48 2025 by rpki-client