$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/snqxTbhGTS8THOr07dDBizPw_e4.roa File: snqxTbhGTS8THOr07dDBizPw_e4.roa (raw, json) Hash identifier: KOBxwK7MLoxz5FUlL+ZP387s61F045vkyPorLhr1u+8= Subject key identifier: B2:7A:B1:4D:B8:46:4D:2F:13:1C:EA:F4:ED:D0:C1:8B:33:F0:FD:EE Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CB3 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/snqxTbhGTS8THOr07dDBizPw_e4.roa Signing time: Thu 02 Jan 2025 13:58:21 +0000 ROA not before: Thu 02 Jan 2025 13:58:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 14.103.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 09:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7347 (0x1cb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B27AB14DB8464D2F131CEAF4EDD0C18B33F0FDEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:88:de:ef:a6:0b:ba:50:ac:46:55:03:7d: 22:e4:d4:7e:8b:72:11:88:08:1b:9a:e9:57:6f:99: 70:c4:76:14:85:16:b7:c3:59:13:30:cf:60:b3:7f: ab:2d:37:88:95:88:2b:46:50:b5:61:ee:d4:e8:fb: f7:e5:96:94:10:9c:69:43:ac:84:d3:95:e2:68:03: 6a:5a:3f:83:04:44:cc:2a:84:b5:ed:0d:15:eb:e7: 7c:b5:26:48:4c:2a:b2:ae:46:c5:3b:54:ad:d8:13: b0:e1:ed:c6:7d:91:9d:64:c2:87:f2:36:26:ed:0f: 52:44:ed:2c:1c:1f:7e:71:8c:79:af:5a:2b:d2:88: 14:b5:70:30:5c:a6:d2:b9:72:db:b2:44:e5:5d:9f: 2e:86:96:d7:2c:bf:6d:ba:9e:93:61:c9:36:3a:22: 78:9d:86:4b:58:91:58:17:21:e9:56:96:c2:bc:68: 6f:9e:b9:a7:73:57:61:6f:78:a7:2b:45:d6:10:89: e3:2a:fc:de:b9:7f:20:bb:4d:fb:d7:ed:8c:75:76: 17:40:e9:df:de:ab:56:c3:31:4d:aa:4b:d5:79:a9: 6d:2d:e8:0d:7e:cb:db:07:5e:2e:f7:c2:11:f6:1f: 6a:dd:80:b9:c9:cc:3c:4f:c3:88:f9:48:bc:e5:c1: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7A:B1:4D:B8:46:4D:2F:13:1C:EA:F4:ED:D0:C1:8B:33:F0:FD:EE X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/snqxTbhGTS8THOr07dDBizPw_e4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 14.103.24.0/21 Signature Algorithm: sha256WithRSAEncryption ac:d8:5c:36:05:75:b1:05:ce:ed:24:ad:45:7c:63:c9:0e:05: 1a:a9:39:cc:c7:a8:2b:b5:75:e9:61:be:69:6e:b7:36:61:27: e9:d8:c9:26:7e:e3:68:4e:74:b9:5f:92:1b:04:50:e3:0d:d9: 35:32:0b:e8:8f:d1:ca:03:d7:42:f7:54:32:d9:64:70:b5:67: 31:08:da:c8:b4:94:cf:97:aa:ca:fd:54:ad:40:d6:e0:b6:7e: 1a:ab:9e:6c:42:d4:58:7b:c6:cc:0c:23:ad:dd:54:8b:79:bc: 7e:49:3f:e2:1a:ef:90:31:0d:75:2c:29:a9:a5:6b:a2:bb:72: e2:34:fb:b6:47:7c:33:bd:51:21:98:d5:40:34:f5:00:43:60: f3:96:95:1f:aa:c9:cd:fd:20:de:dc:47:ca:3a:f0:2a:12:d3: 7a:87:5c:d3:b5:16:f0:7d:91:9d:0b:41:4e:10:24:fa:5b:95: 1c:3c:71:26:12:cb:3a:5e:e1:aa:4e:d8:2c:4d:3a:e9:64:b3: 2d:16:b0:cb:85:0a:4b:f0:6f:f0:cc:66:fd:dd:c4:af:9f:5c: 86:90:b3:08:eb:69:6e:ba:0e:c1:32:1b:66:35:68:3a:17:08: 34:09:06:22:04:b8:18:82:55:ea:ae:b6:61:48:5b:b3:97:cc: c3:72:a0:c8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIyN0FCMTREQjg0NjRE MkYxMzFDRUFGNEVERDBDMThCMzNGMEZERUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuZIje76YLulCsRlUDfSLk1H6LchGICBua6VdvmXDEdhSFFrfD WRMwz2Czf6stN4iViCtGULVh7tTo+/fllpQQnGlDrITTleJoA2paP4MERMwqhLXt DRXr53y1JkhMKrKuRsU7VK3YE7Dh7cZ9kZ1kwofyNibtD1JE7SwcH35xjHmvWivS iBS1cDBcptK5ctuyROVdny6Gltcsv226npNhyTY6InidhktYkVgXIelWlsK8aG+e uadzV2FveKcrRdYQieMq/N65fyC7TfvX7Yx1dhdA6d/eq1bDMU2qS9V5qW0t6A1+ y9sHXi73whH2H2rdgLnJzDxPw4j5SLzlwbd9AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUsnqxTbhGTS8THOr07dDBizPw/e4wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvc25xeFRiaEdUUzhU SE9yMDdkREJpelB3X2U0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw5nGDANBgkqhkiG9w0BAQsFAAOCAQEArNhcNgV1sQXO7SStRXxjyQ4FGqk5 zMeoK7V16WG+aW63NmEn6djJJn7jaE50uV+SGwRQ4w3ZNTIL6I/RygPXQvdUMtlk cLVnMQjayLSUz5eqyv1UrUDW4LZ+GquebELUWHvGzAwjrd1Ui3m8fkk/4hrvkDEN dSwpqaVrorty4jT7tkd8M71RIZjVQDT1AENg85aVH6rJzf0g3txHyjrwKhLTeodc 07UW8H2RnQtBThAk+luVHDxxJhLLOl7hqk7YLE066WSzLRawy4UKS/Bv8Mxm/d3E r59chpCzCOtpbroOwTIbZjVoOhcINAkGIgS4GIJV6q62YUhbs5fMw3KgyA== -----END CERTIFICATE-----Generated at Sat May 17 06:14:08 2025 by rpki-client