$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa File: oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa (raw, json) Hash identifier: Hy+566HgUdo7tAmvKq5D06v1xyoGXDvCRugVB0yhFmw= Subject key identifier: A0:27:D2:D2:12:1A:88:DB:0F:64:3F:7F:07:2A:AE:D4:2A:09:F1:52 Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Certificate serial: 1D54 Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa Signing time: Wed 26 Mar 2025 02:11:19 +0000 ROA not before: Wed 26 Mar 2025 02:11:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63641 IP address blocks: 123.49.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7508 (0x1d54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97 Validity Not Before: Mar 26 02:11:19 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A027D2D2121A88DB0F643F7F072AAED42A09F152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:4b:24:0b:d1:6d:72:7c:a5:a6:a0:56:b4: 02:ba:81:82:7c:f0:4d:82:74:d6:03:b6:2b:d2:12: 47:5b:be:c7:b5:70:29:f2:4d:19:5d:cd:98:03:3c: 9d:7e:22:66:04:86:4a:c8:a8:34:f5:08:5b:29:ea: bf:4b:09:69:c7:a0:85:4f:d3:5b:4d:21:bd:10:93: 7b:00:0c:d1:eb:a3:53:c2:8c:32:81:62:33:13:3d: d3:13:b6:20:74:4d:9b:98:d2:c7:01:75:8b:1f:bc: da:c9:cc:97:e7:bd:60:83:65:87:72:70:84:3a:9c: fb:8c:77:1d:02:b7:a0:61:d1:e1:86:65:ff:a8:3d: 9b:35:12:a6:33:a6:06:f4:76:bd:ec:eb:1e:16:9f: 82:54:9f:29:1b:00:4a:e3:da:ef:aa:ad:4e:d9:f0: 4a:cd:37:f8:97:7d:ab:e3:fd:65:11:80:de:f3:90: 04:ca:fd:64:67:be:62:3c:12:f6:56:d3:a8:f0:03: 0f:c8:5c:b2:ef:77:d5:64:83:48:98:14:29:34:e1: 71:78:26:83:8d:bc:cb:f0:77:9a:f3:7e:86:68:3f: 62:fe:79:ec:43:3c:6c:12:d0:63:20:19:d8:e0:da: 4c:fc:16:3a:42:11:4f:f7:77:e5:c1:9b:27:19:52: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:27:D2:D2:12:1A:88:DB:0F:64:3F:7F:07:2A:AE:D4:2A:09:F1:52 X509v3 Authority Key Identifier: keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/oCfS0hIaiNsPZD9_Byqu1CoJ8VI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.49.245.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:2f:f9:9f:6b:28:f0:0b:54:b6:5f:dd:70:9a:94:7b:57:61: 9e:14:4a:f9:aa:dd:1b:a1:1d:a7:f1:94:5f:4e:59:c4:70:0c: 2e:3d:8f:74:4d:3f:1b:d3:ab:43:8b:d6:6e:5f:4e:46:89:fb: 1c:ec:f2:0d:ad:3d:3d:6c:68:a4:0e:95:81:c9:61:6d:97:5b: 97:78:40:12:ef:28:fc:23:d8:17:70:97:ea:0d:fd:0f:b4:7a: bd:02:ee:ba:79:64:7f:d1:27:2b:54:c7:34:aa:58:06:a1:57: 26:03:c5:37:eb:1c:ee:92:c3:ae:10:24:fa:3a:ab:91:30:ab: 25:e4:97:59:57:74:cf:00:ae:1b:60:99:54:c3:c8:8f:6e:bc: 40:fa:04:93:08:80:2c:5f:04:9c:e2:b4:ed:c1:22:dd:bd:8f: 58:f8:c9:8a:5a:99:5c:4e:86:b7:21:3e:9b:09:d7:b9:c8:57: f5:ff:ae:6a:3b:c1:f7:2d:fc:d5:c8:c3:61:08:1f:f9:9e:23: 92:25:36:e3:6d:97:56:ff:16:5a:98:d4:de:86:f5:e1:9b:3b: 4f:17:90:ea:54:10:fa:26:74:96:2b:57:57:71:01:a2:9a:81: 9e:2b:8c:0f:4c:87:db:5c:a3:2e:d0:e5:86:26:c4:79:5e:3b: bb:bb:ad:49 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4 ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTAzMjYw MjExMTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEEwMjdEMkQyMTIxQTg4 REIwRjY0M0Y3RjA3MkFBRUQ0MkEwOUYxNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtbUskC9FtcnylpqBWtAK6gYJ88E2CdNYDtivSEkdbvse1cCny TRldzZgDPJ1+ImYEhkrIqDT1CFsp6r9LCWnHoIVP01tNIb0Qk3sADNHro1PCjDKB YjMTPdMTtiB0TZuY0scBdYsfvNrJzJfnvWCDZYdycIQ6nPuMdx0Ct6Bh0eGGZf+o PZs1EqYzpgb0dr3s6x4Wn4JUnykbAErj2u+qrU7Z8ErNN/iXfavj/WURgN7zkATK /WRnvmI8EvZW06jwAw/IXLLvd9Vkg0iYFCk04XF4JoONvMvwd5rzfoZoP2L+eexD PGwS0GMgGdjg2kz8FjpCEU/3d+XBmycZUjipAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUoCfS0hIaiNsPZD9/Byqu1CoJ8VIwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvb0NmUzBoSWFpTnNQ WkQ5X0J5cXUxQ29KOFZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHsx9TANBgkqhkiG9w0BAQsFAAOCAQEAPi/5n2so8AtUtl/dcJqUe1dhnhRK +ardG6Edp/GUX05ZxHAMLj2PdE0/G9OrQ4vWbl9ORon7HOzyDa09PWxopA6Vgclh bZdbl3hAEu8o/CPYF3CX6g39D7R6vQLuunlkf9EnK1THNKpYBqFXJgPFN+sc7pLD rhAk+jqrkTCrJeSXWVd0zwCuG2CZVMPIj268QPoEkwiALF8EnOK07cEi3b2PWPjJ ilqZXE6GtyE+mwnXuchX9f+uajvB9y381cjDYQgf+Z4jkiU2422XVv8WWpjU3ob1 4Zs7TxeQ6lQQ+iZ0litXV3EBopqBniuMD0yH21yjLtDlhibEeV47u7utSQ== -----END CERTIFICATE-----Generated at Sun May 18 04:46:33 2025 by rpki-client