$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/fuCadLFqpfc3ZhXliUOUoU20c4U.roa File: fuCadLFqpfc3ZhXliUOUoU20c4U.roa (raw, json) Hash identifier: bd5RsltFHI16gpSOYLb77UBXTQcc8EW+TNLYgzhCmTo= Subject key identifier: 7E:E0:9A:74:B1:6A:A5:F7:37:66:15:E5:89:43:94:A1:4D:B4:73:85 Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97 Certificate serial: 1021 Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/fuCadLFqpfc3ZhXliUOUoU20c4U.roa Signing time: Mon 24 Feb 2025 05:03:02 +0000 ROA not before: Mon 24 Feb 2025 05:03:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63701 IP address blocks: 103.88.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4129 (0x1021) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97 Validity Not Before: Feb 24 05:03:02 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7EE09A74B16AA5F7376615E5894394A14DB47385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:cf:7a:20:ea:90:f5:de:6e:06:83:ea:3d: a7:70:07:86:54:f4:ab:5c:25:6f:a9:7f:65:0d:50: dd:3f:9f:a0:3b:93:fc:d5:d9:c4:0f:1c:20:6b:b1: 27:25:bd:61:75:2d:d5:7f:31:da:cb:3e:79:f4:8b: a8:1d:67:dd:cb:4c:61:85:e5:d8:7f:73:8c:87:cc: 83:6e:32:11:d3:d0:3c:ab:45:09:5a:cb:4c:18:10: 24:10:fa:d8:c7:16:60:2d:e6:68:77:e7:a4:1a:ed: 81:9e:64:b9:5e:b1:44:dc:7e:e8:bb:9f:f8:3b:89: 39:63:6e:75:7e:eb:d1:af:1d:80:02:83:1f:31:10: 9e:ad:df:27:cd:3a:61:0c:d3:ff:40:9e:ea:d2:b5: 84:9d:a8:0e:b6:d1:d6:72:89:4e:37:e0:25:42:a0: bc:15:b9:0f:8f:dc:09:aa:05:fe:e4:29:35:4c:71: ef:4c:07:b2:db:73:b6:f7:30:57:6e:82:f2:d4:c2: cc:e9:0a:74:d6:35:d5:2f:78:be:3d:ab:d9:cb:d3: e5:29:c0:f4:d4:c7:3f:1a:69:d2:51:f5:5b:c6:85: fd:f0:9e:28:55:e3:83:ca:59:bb:18:a8:c4:cc:fb: 8b:14:a9:79:42:f7:83:32:b2:6a:5e:3f:a1:3c:14: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:9A:74:B1:6A:A5:F7:37:66:15:E5:89:43:94:A1:4D:B4:73:85 X509v3 Authority Key Identifier: keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/fuCadLFqpfc3ZhXliUOUoU20c4U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.88.96.0/22 Signature Algorithm: sha256WithRSAEncryption 70:cd:83:76:43:6b:c3:53:4d:eb:b0:cd:af:96:e2:01:b2:e5: fb:db:b1:c6:96:a7:1d:52:17:13:93:36:8e:82:a8:3f:79:89: 13:cf:2c:fc:45:c4:ff:29:b0:d6:e2:4c:71:0f:5c:89:42:c0: a4:32:ef:a1:26:3d:3a:e8:8a:d8:fa:e1:1b:df:e2:4e:29:9c: fb:78:53:c6:e2:a1:e3:2d:bb:24:84:30:a9:65:73:63:21:a7: 07:2c:ba:93:c1:0f:87:ac:f2:75:b8:21:bb:e6:9a:d2:6d:4a: 1c:29:ee:6a:b4:10:dc:ab:71:6c:4b:93:14:8e:5f:9d:15:d2: 55:bf:57:74:0b:47:94:19:87:90:8b:f1:af:fe:0a:ef:c3:a3: 54:74:6b:3f:5c:b6:9c:29:00:8f:ab:ec:59:ce:01:9f:d6:31: 5f:56:a8:d0:10:ed:05:8f:d3:be:93:d7:05:8a:51:c9:67:09: a9:df:19:d6:ba:8b:5c:4e:6b:54:42:e8:a6:65:70:c0:12:e2: 97:eb:69:5a:25:a2:e3:fc:df:1d:10:6c:4e:b4:e9:aa:cc:77: 9c:d8:a5:b4:23:eb:10:46:88:69:fe:65:57:dd:6e:bf:54:9c: ce:a5:24:cd:c2:ff:e4:5f:ed:1f:a5:77:57:e1:42:a0:a9:12: 51:0a:c4:2d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICECEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTAyMjQw NTAzMDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdFRTA5QTc0QjE2QUE1 RjczNzY2MTVFNTg5NDM5NEExNERCNDczODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYgM96IOqQ9d5uBoPqPadwB4ZU9KtcJW+pf2UNUN0/n6A7k/zV 2cQPHCBrsSclvWF1LdV/MdrLPnn0i6gdZ93LTGGF5dh/c4yHzINuMhHT0DyrRQla y0wYECQQ+tjHFmAt5mh356Qa7YGeZLlesUTcfui7n/g7iTljbnV+69GvHYACgx8x EJ6t3yfNOmEM0/9AnurStYSdqA620dZyiU434CVCoLwVuQ+P3AmqBf7kKTVMce9M B7Lbc7b3MFdugvLUwszpCnTWNdUveL49q9nL0+UpwPTUxz8aadJR9VvGhf3wnihV 44PKWbsYqMTM+4sUqXlC94MysmpeP6E8FITtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfuCadLFqpfc3ZhXliUOUoU20c4UwHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG 2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvZnVDYWRMRnFwZmMz WmhYbGlVT1VvVTIwYzRVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdYYDANBgkqhkiG9w0BAQsFAAOCAQEAcM2DdkNrw1NN67DNr5biAbLl+9ux xpanHVIXE5M2joKoP3mJE88s/EXE/ymw1uJMcQ9ciULApDLvoSY9OuiK2PrhG9/i Timc+3hTxuKh4y27JIQwqWVzYyGnByy6k8EPh6zydbghu+aa0m1KHCnuarQQ3Ktx bEuTFI5fnRXSVb9XdAtHlBmHkIvxr/4K78OjVHRrP1y2nCkAj6vsWc4Bn9YxX1ao 0BDtBY/TvpPXBYpRyWcJqd8Z1rqLXE5rVELopmVwwBLil+tpWiWi4/zfHRBsTrTp qsx3nNiltCPrEEaIaf5lV91uv1SczqUkzcL/5F/tH6V3V+FCoKkSUQrELQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:24 2025 by rpki-client on console.sobornost.net