$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/XyzDu2UB-JXsNDygTO-JOGhCgZA.roa File: XyzDu2UB-JXsNDygTO-JOGhCgZA.roa (raw, json) Hash identifier: J//OPaEKLNaBZyXOXU8oxd89INt9WsMsH258iUTn/tU= Subject key identifier: 5F:2C:C3:BB:65:01:F8:95:EC:34:3C:A0:4C:EF:89:38:68:42:81:90 Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97 Certificate serial: 1020 Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/XyzDu2UB-JXsNDygTO-JOGhCgZA.roa Signing time: Mon 24 Feb 2025 05:03:02 +0000 ROA not before: Mon 24 Feb 2025 05:03:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63701 IP address blocks: 103.125.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4128 (0x1020) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97 Validity Not Before: Feb 24 05:03:02 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5F2CC3BB6501F895EC343CA04CEF893868428190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:e6:17:d8:d9:6f:94:1c:ea:19:23:4e:62: 42:7c:53:22:65:0c:a8:ef:ac:67:5e:d6:57:11:34: a8:6b:d7:bb:f4:3e:d1:f4:94:fa:de:fd:6b:56:05: 8d:72:38:e0:bb:de:86:43:25:36:6a:35:8e:10:15: 29:11:20:c3:0f:bf:f0:24:b2:c9:f5:fc:0d:1e:6c: b1:03:ba:55:22:f9:cc:a5:6f:ba:ae:22:9e:f8:d3: 22:e3:a3:f5:5f:dd:9e:fe:51:f9:43:37:de:f4:42: 6b:94:cc:37:c0:9a:51:b2:ac:15:cb:26:22:d4:b5: 54:16:0f:1f:3e:57:02:07:54:9d:f3:28:aa:29:74: b1:7b:3f:0e:27:0a:57:7a:75:a2:c4:56:48:be:41: fd:4a:3b:f5:d3:de:99:47:4b:61:ab:4a:ab:9c:e7: c0:30:65:03:ef:42:40:94:4c:6f:e0:dd:5a:37:1c: 12:50:5d:f1:e6:81:9e:b1:39:6a:17:85:c4:5d:9d: e4:d6:be:07:e1:a2:78:de:ee:32:ef:f0:04:c4:6f: 3c:26:6f:88:27:67:38:aa:d3:96:b7:9d:f2:0d:e3: c1:fa:9f:d6:fa:9b:e0:33:6c:46:0a:9f:21:30:a2: 9d:32:e7:2a:3b:4e:c1:cf:5c:b8:79:62:55:40:df: 65:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:C3:BB:65:01:F8:95:EC:34:3C:A0:4C:EF:89:38:68:42:81:90 X509v3 Authority Key Identifier: keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/XyzDu2UB-JXsNDygTO-JOGhCgZA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.125.236.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:64:9e:3f:eb:c9:d5:9e:b5:a0:01:05:4a:25:00:15:4b:6f: d0:af:4d:eb:ee:38:35:90:5c:79:c3:99:44:d3:a0:53:87:bd: fd:43:51:8b:80:62:d2:27:64:7f:c3:71:fe:55:bd:e2:05:a3: 89:31:4b:ff:b8:76:4f:f4:1f:fc:df:f7:0b:8c:97:16:cd:4b: 9a:ea:a4:d1:cb:d8:d2:b9:d8:96:7a:fa:93:ca:b2:aa:99:81: 21:b4:cc:a1:93:8a:63:2c:2d:f9:8b:be:26:b4:11:4a:6f:39: d4:be:cd:d9:e4:89:cf:d2:1e:81:2b:b6:be:47:47:a7:98:ec: e3:e0:4f:f2:47:d1:98:68:73:0d:74:70:cd:2b:af:24:f4:dc: 48:a9:ee:59:4a:9a:0f:30:6c:d2:51:29:77:81:42:8c:b1:e9: 49:3c:a7:cb:34:c6:e7:01:41:01:1b:da:cc:91:ef:73:a3:29: 40:2a:60:cd:d1:65:d8:cb:17:12:d5:77:13:b9:44:b1:e1:32: b3:89:27:ba:4d:00:f1:94:c9:4d:32:b3:95:25:09:96:86:ab: fa:d8:cf:6d:45:fe:9c:b5:14:97:89:08:c2:76:5d:60:d5:d1: 57:82:d8:e3:dd:71:6c:41:df:34:b8:08:c9:f8:10:50:19:2a: 6e:fc:59:00 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICECAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTAyMjQw NTAzMDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVGMkNDM0JCNjUwMUY4 OTVFQzM0M0NBMDRDRUY4OTM4Njg0MjgxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0duYX2NlvlBzqGSNOYkJ8UyJlDKjvrGde1lcRNKhr17v0PtH0 lPre/WtWBY1yOOC73oZDJTZqNY4QFSkRIMMPv/Akssn1/A0ebLEDulUi+cylb7qu Ip740yLjo/Vf3Z7+UflDN970QmuUzDfAmlGyrBXLJiLUtVQWDx8+VwIHVJ3zKKop dLF7Pw4nCld6daLEVki+Qf1KO/XT3plHS2GrSquc58AwZQPvQkCUTG/g3Vo3HBJQ XfHmgZ6xOWoXhcRdneTWvgfhonje7jLv8ATEbzwmb4gnZziq05a3nfIN48H6n9b6 m+AzbEYKnyEwop0y5yo7TsHPXLh5YlVA32WLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUXyzDu2UB+JXsNDygTO+JOGhCgZAwHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG 2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvWHl6RHUyVUItSlhz TkR5Z1RPLUpPR2hDZ1pBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmd97DANBgkqhkiG9w0BAQsFAAOCAQEAHGSeP+vJ1Z61oAEFSiUAFUtv0K9N 6+44NZBcecOZRNOgU4e9/UNRi4Bi0idkf8Nx/lW94gWjiTFL/7h2T/Qf/N/3C4yX Fs1Lmuqk0cvY0rnYlnr6k8qyqpmBIbTMoZOKYywt+Yu+JrQRSm851L7N2eSJz9Ie gSu2vkdHp5js4+BP8kfRmGhzDXRwzSuvJPTcSKnuWUqaDzBs0lEpd4FCjLHpSTyn yzTG5wFBARvazJHvc6MpQCpgzdFl2MsXEtV3E7lEseEys4knuk0A8ZTJTTKzlSUJ loar+tjPbUX+nLUUl4kIwnZdYNXRV4LY491xbEHfNLgIyfgQUBkqbvxZAA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:24 2025 by rpki-client on console.sobornost.net