$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/rUSEJt21P-SZTDhUlqSLzFTJBk0.roa File: rUSEJt21P-SZTDhUlqSLzFTJBk0.roa (raw, json) Hash identifier: OayZzUQ1Cvz6t+sRSLYRoH1XJsCFaIDQtnghp25qVlo= Subject key identifier: AD:44:84:26:DD:B5:3F:E4:99:4C:38:54:96:A4:8B:CC:54:C9:06:4D Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Certificate serial: 14C8 Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/rUSEJt21P-SZTDhUlqSLzFTJBk0.roa Signing time: Sun 27 Apr 2025 09:29:39 +0000 ROA not before: Sun 27 Apr 2025 09:29:39 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 152320 IP address blocks: 103.223.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 09:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5320 (0x14c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F Validity Not Before: Apr 27 09:29:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AD448426DDB53FE4994C385496A48BCC54C9064D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:5b:a3:f2:20:0a:e7:68:66:f2:58:27:21: ae:c6:00:9a:d5:ec:09:0a:77:a0:5a:b4:15:25:01: a7:60:77:03:35:d6:84:25:4e:07:c8:85:5d:6e:6c: f8:7a:49:bf:31:05:d0:f6:54:3a:1e:87:91:82:81: db:e4:af:9b:b4:3f:37:cd:24:46:9c:c6:36:8f:90: e6:ec:94:86:07:5d:9b:45:71:bd:e2:07:1d:e5:00: e5:02:db:1b:8a:f7:1b:35:67:88:20:69:f7:19:9c: e8:40:99:7c:c1:0d:fa:94:5e:d3:2e:84:f8:6c:87: 36:1f:c4:27:51:bf:5e:93:3c:98:15:1e:5e:d2:1e: 8a:94:c4:c1:a6:b5:ab:f0:de:e3:5b:dc:fb:1a:8d: 2d:c0:a1:dd:22:7e:79:00:96:25:8f:f0:c2:8a:95: 25:ab:64:e8:c9:24:e3:dd:6b:bd:ec:8d:54:c3:01: ec:a5:9d:1b:4a:5d:58:cd:b5:26:56:97:85:d9:b3: f7:a7:d0:a6:f6:2a:a6:ea:9d:37:35:e2:38:0c:ee: 8a:c8:f5:db:a7:e3:ab:f8:ad:6c:5b:26:ce:74:5d: 0d:25:64:a5:15:a9:1c:02:05:b3:cc:29:a1:2b:7b: ee:17:65:24:02:27:80:48:fe:37:a2:7b:83:54:2b: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:44:84:26:DD:B5:3F:E4:99:4C:38:54:96:A4:8B:CC:54:C9:06:4D X509v3 Authority Key Identifier: keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/rUSEJt21P-SZTDhUlqSLzFTJBk0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.223.123.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:8f:98:b5:58:40:96:bd:e0:0d:48:45:45:38:6b:b0:70:0c: 83:28:76:7d:93:83:53:1a:f2:12:f4:2b:f5:11:05:de:0b:9e: a0:23:64:04:80:e7:e6:7d:2f:bc:a8:de:f1:59:c9:9c:85:5a: 84:a2:bd:85:12:98:d6:8c:c5:46:82:2e:e2:1d:96:4f:69:4b: aa:24:71:97:fa:f2:a9:44:2e:22:51:df:80:ef:01:49:34:13: 23:63:b0:55:92:97:e7:da:be:d1:0e:90:e3:d4:f1:80:f8:b7: 35:1e:7c:fb:55:7b:cf:6a:c3:60:87:9b:c1:06:73:1b:b1:94: e2:82:35:4d:75:c1:4c:d7:07:92:17:a1:21:06:72:54:4d:9d: 7d:f2:65:b0:b6:9a:45:5c:f8:c6:21:3b:08:7d:62:cc:7b:a4: ee:19:db:9b:6a:6d:5f:54:0c:c5:ef:47:a3:86:39:47:fd:8a: e7:4c:b2:95:31:9f:0a:40:fb:8a:85:db:04:55:3e:d0:9e:1b: ab:86:d1:2f:66:f2:d8:be:ec:88:47:8a:46:ab:46:bd:f3:47: 74:40:2d:df:ff:10:c5:84:0f:bc:e0:45:94:d8:aa:7e:eb:ac: a7:17:59:42:3f:f2:62:8e:36:33:e5:16:51:94:d1:91:10:db: fc:58:9c:95 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNTA0Mjcw OTI5MzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFENDQ4NDI2RERCNTNG RTQ5OTRDMzg1NDk2QTQ4QkNDNTRDOTA2NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkKluj8iAK52hm8lgnIa7GAJrV7AkKd6BatBUlAadgdwM11oQl TgfIhV1ubPh6Sb8xBdD2VDoeh5GCgdvkr5u0PzfNJEacxjaPkObslIYHXZtFcb3i Bx3lAOUC2xuK9xs1Z4ggafcZnOhAmXzBDfqUXtMuhPhshzYfxCdRv16TPJgVHl7S HoqUxMGmtavw3uNb3PsajS3Aod0ifnkAliWP8MKKlSWrZOjJJOPda73sjVTDAeyl nRtKXVjNtSZWl4XZs/en0Kb2KqbqnTc14jgM7orI9dun46v4rWxbJs50XQ0lZKUV qRwCBbPMKaEre+4XZSQCJ4BI/jeie4NUK1QZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUrUSEJt21P+SZTDhUlqSLzFTJBk0wHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh 7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYvclVTRUp0MjFQLVNa VERoVWxxU0x6RlRKQmswLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGffezANBgkqhkiG9w0BAQsFAAOCAQEAPo+YtVhAlr3gDUhFRThrsHAMgyh2 fZODUxryEvQr9REF3gueoCNkBIDn5n0vvKje8VnJnIVahKK9hRKY1ozFRoIu4h2W T2lLqiRxl/ryqUQuIlHfgO8BSTQTI2OwVZKX59q+0Q6Q49TxgPi3NR58+1V7z2rD YIebwQZzG7GU4oI1TXXBTNcHkhehIQZyVE2dffJlsLaaRVz4xiE7CH1izHuk7hnb m2ptX1QMxe9Ho4Y5R/2K50yylTGfCkD7ioXbBFU+0J4bq4bRL2by2L7siEeKRqtG vfNHdEAt3/8QxYQPvOBFlNiqfuuspxdZQj/yYo42M+UWUZTRkRDb/FiclQ== -----END CERTIFICATE-----Generated at Sun May 18 07:34:12 2025 by rpki-client