$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/6ipJzxKA1U16y6aMGaAa1My3PzY.roa File: 6ipJzxKA1U16y6aMGaAa1My3PzY.roa (raw, json) Hash identifier: 5GlYZG5mQrW32aR4b3Xj7oXd3fuJz4o+MluHBYSQoy0= Subject key identifier: EA:2A:49:CF:12:80:D5:4D:7A:CB:A6:8C:19:A0:1A:D4:CC:B7:3F:36 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CAB Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/6ipJzxKA1U16y6aMGaAa1My3PzY.roa Signing time: Thu 02 Jan 2025 13:58:19 +0000 ROA not before: Thu 02 Jan 2025 13:58:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 14.103.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7339 (0x1cab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:19 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=EA2A49CF1280D54D7ACBA68C19A01AD4CCB73F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:e9:6f:24:73:b8:ff:2a:64:a2:3a:dd:f1: c3:17:9b:77:8c:bf:09:b2:d6:e6:c1:42:54:d1:e6: 95:67:4e:78:d5:d1:98:e1:c8:70:21:4c:47:98:2a: f2:ec:3c:bc:2c:e9:30:ac:8f:ea:6e:4e:59:bb:31: 31:a5:e0:17:da:1d:1f:15:a2:8f:0b:60:90:c3:a6: f7:09:be:f6:b2:87:16:06:0d:49:32:10:35:56:40: f4:0e:84:6b:52:ba:7b:a3:3e:f4:c0:9e:83:14:29: f3:1a:04:31:cb:bc:3b:54:42:d3:f4:91:d1:0c:e5: c6:54:46:b6:94:fc:99:ee:cd:a0:3a:57:53:81:16: 8b:7a:e3:9b:17:15:16:c4:32:57:bc:82:97:98:4d: bf:34:10:2b:36:c3:cf:88:c1:ed:06:f3:9f:90:54: 5c:95:7a:08:aa:50:d2:ce:75:dc:13:50:e6:4e:18: 1d:b4:19:6d:30:9a:06:cc:e4:06:b3:c2:cf:41:46: 4e:39:3a:ee:b1:c9:4b:21:19:b1:89:d5:86:13:13: a5:6e:9b:f6:67:eb:5c:b6:93:b6:55:1a:1f:48:e2: 17:f8:43:03:d3:9c:8e:d7:3b:6c:83:0d:82:d7:31: a2:38:e0:5c:d2:ff:b2:11:bc:77:bc:40:1b:22:3d: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2A:49:CF:12:80:D5:4D:7A:CB:A6:8C:19:A0:1A:D4:CC:B7:3F:36 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/6ipJzxKA1U16y6aMGaAa1My3PzY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.72.0/23 Signature Algorithm: sha256WithRSAEncryption 12:2b:08:52:89:72:4e:56:ef:68:b7:5f:68:75:9b:18:e1:9f: 5d:2c:05:94:8b:56:d3:4a:f7:b0:0c:b7:ae:a1:9c:3f:bd:01: f5:b7:11:bd:3f:4d:c5:fb:fa:e0:8a:a1:dc:ae:96:ec:5e:16: 92:61:c2:be:69:8f:17:10:e9:88:93:78:96:a4:3a:4f:0c:55: af:51:10:f6:49:d6:d9:88:3a:52:90:2b:b3:89:ff:87:c6:08: 06:4f:54:ae:c6:e6:c2:97:eb:1e:8b:2f:ac:24:7f:08:5c:f0: 19:be:4a:a8:39:f4:a0:d2:3f:c0:a0:01:35:fd:f7:0e:51:c2: 14:b7:d1:80:00:a2:02:18:84:1c:b9:8d:cd:e7:14:50:67:f8: e3:95:70:29:a8:97:f0:24:78:1b:db:02:f5:a2:ff:86:bf:33: ca:10:c4:94:eb:5f:a2:24:1e:8a:d3:a6:bb:76:54:37:df:55: bc:6b:69:83:7b:5f:70:d8:3b:e0:f4:24:5b:7c:94:34:d3:81: 8b:a0:29:2c:a9:c3:c9:f0:a3:96:35:05:0b:a7:df:57:e4:b7: b6:03:9d:20:24:8b:30:0c:12:49:1c:b8:67:4f:e1:2d:01:3c: f0:2a:24:0b:1c:ef:58:4f:63:8e:b3:20:5d:45:ea:1a:0b:a4: 65:1f:0d:f5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVBMkE0OUNGMTI4MEQ1 NEQ3QUNCQTY4QzE5QTAxQUQ0Q0NCNzNGMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoJ+lvJHO4/ypkojrd8cMXm3eMvwmy1ubBQlTR5pVnTnjV0Zjh yHAhTEeYKvLsPLws6TCsj+puTlm7MTGl4BfaHR8Voo8LYJDDpvcJvvayhxYGDUky EDVWQPQOhGtSunujPvTAnoMUKfMaBDHLvDtUQtP0kdEM5cZURraU/JnuzaA6V1OB Fot645sXFRbEMle8gpeYTb80ECs2w8+Iwe0G85+QVFyVegiqUNLOddwTUOZOGB20 GW0wmgbM5Aazws9BRk45Ou6xyUshGbGJ1YYTE6Vum/Zn61y2k7ZVGh9I4hf4QwPT nI7XO2yDDYLXMaI44FzS/7IRvHe8QBsiPeNTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU6ipJzxKA1U16y6aMGaAa1My3PzYwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvNmlwSnp4S0ExVTE2 eTZhTUdhQWExTXkzUHpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAQ5nSDANBgkqhkiG9w0BAQsFAAOCAQEAEisIUolyTlbvaLdfaHWbGOGfXSwF lItW00r3sAy3rqGcP70B9bcRvT9Nxfv64Iqh3K6W7F4WkmHCvmmPFxDpiJN4lqQ6 TwxVr1EQ9knW2Yg6UpArs4n/h8YIBk9UrsbmwpfrHosvrCR/CFzwGb5KqDn0oNI/ wKABNf33DlHCFLfRgACiAhiEHLmNzecUUGf445VwKaiX8CR4G9sC9aL/hr8zyhDE lOtfoiQeitOmu3ZUN99VvGtpg3tfcNg74PQkW3yUNNOBi6ApLKnDyfCjljUFC6ff V+S3tgOdICSLMAwSSRy4Z0/hLQE88CokCxzvWE9jjrMgXUXqGgukZR8N9Q== -----END CERTIFICATE-----Generated at Sun May 18 03:06:32 2025 by rpki-client