$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DGyGWSLOupG9XAuCBjzbAYXaOTk.roa File: DGyGWSLOupG9XAuCBjzbAYXaOTk.roa (raw, json) Hash identifier: U9jx0xy9LSl784lfAZcbp04Hcqt54Vc7F+DhJAW2Xx0= Subject key identifier: 0C:6C:86:59:22:CE:BA:91:BD:5C:0B:82:06:3C:DB:01:85:DA:39:39 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 181F Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DGyGWSLOupG9XAuCBjzbAYXaOTk.roa Signing time: Fri 17 Jan 2025 01:24:37 +0000 ROA not before: Fri 17 Jan 2025 01:24:37 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 103.221.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6175 (0x181f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:37 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=0C6C865922CEBA91BD5C0B82063CDB0185DA3939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:b2:8c:84:07:ca:20:02:88:1e:9a:82:9d: 71:21:e6:2a:c4:90:c7:e4:57:91:d9:16:81:a6:c8: d1:e8:32:59:85:34:5e:04:e4:c8:db:1f:d3:1f:ae: a3:90:00:58:bf:5f:17:bf:eb:dc:ea:bd:f6:e8:e1: 55:bc:7c:82:ae:01:47:16:df:25:00:46:d7:2c:01: 68:cc:79:ed:69:31:9c:5c:69:d7:3b:5e:ab:30:e5: 3d:14:45:5a:bc:1c:66:c0:a1:cc:63:28:3d:e7:a7: 1c:83:29:81:ee:00:93:01:58:1e:5c:31:45:b3:f8: b1:b8:3f:be:b6:c5:ca:c6:8c:33:0f:2b:50:e9:c1: 3b:cd:de:7e:f1:8a:bb:53:56:55:83:c0:fc:ba:9b: 2b:46:11:29:e9:aa:75:db:f8:40:19:a1:7e:a8:54: 7f:59:2a:1b:20:c5:91:62:65:e4:28:a6:1f:0c:21: 38:2e:2b:61:06:0e:65:11:15:4c:c4:f6:a5:71:c7: 08:81:22:db:03:34:09:66:bc:15:45:af:8f:b9:03: 59:ed:63:45:7e:f5:00:00:69:af:b4:6d:55:a3:98: b7:b8:11:61:fc:8a:29:77:58:cc:f0:05:0e:0d:18: 25:9d:3d:d1:0b:ae:63:c9:f4:db:58:fc:64:8c:94: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6C:86:59:22:CE:BA:91:BD:5C:0B:82:06:3C:DB:01:85:DA:39:39 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DGyGWSLOupG9XAuCBjzbAYXaOTk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.221.92.0/24 Signature Algorithm: sha256WithRSAEncryption d7:7d:d6:64:6a:06:56:e3:2f:08:d6:9f:7b:02:11:ee:38:a2: bc:39:29:21:09:6e:91:28:1d:22:8d:73:c9:d8:ff:35:44:9d: 15:5d:27:77:48:b6:8f:c9:24:ae:d6:03:97:d9:fc:30:5a:89: 4a:84:91:4d:1f:2b:d3:77:27:c5:a9:2e:1a:cd:f0:66:c6:bc: 47:9c:c4:60:31:b4:17:77:5e:76:f8:df:b5:a0:fc:6d:31:49: d2:10:20:57:61:53:55:0d:47:85:75:ef:e3:8f:78:e6:e2:fc: c0:ef:3e:e0:ba:34:d7:8c:4b:63:f5:9c:33:a3:6e:b5:f5:d3: 1c:09:d2:52:4a:2d:b0:1f:a9:df:15:a8:97:66:82:12:36:f6: 5f:2e:0c:6f:04:f0:68:58:75:cb:e9:c5:ce:7e:1d:2b:a6:ca: 03:45:59:56:89:52:1d:ff:46:d8:04:09:1a:10:ec:4b:b9:78: 47:f4:73:d2:1e:0c:9c:16:07:dc:d6:36:90:fa:9a:a0:09:2d: 15:15:4d:b9:3d:aa:ea:80:58:66:82:5d:7c:75:70:c1:87:77: 9d:59:22:a9:a6:e7:cf:2e:8e:e7:5a:21:9b:4b:d3:97:f2:00: 22:21:e2:78:2f:32:64:bc:ae:b7:c7:c6:e1:70:a3:41:f1:63: 7f:ae:48:69 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBDNkM4NjU5MjJDRUJB OTFCRDVDMEI4MjA2M0NEQjAxODVEQTM5MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc37KMhAfKIAKIHpqCnXEh5irEkMfkV5HZFoGmyNHoMlmFNF4E 5MjbH9MfrqOQAFi/Xxe/69zqvfbo4VW8fIKuAUcW3yUARtcsAWjMee1pMZxcadc7 Xqsw5T0URVq8HGbAocxjKD3npxyDKYHuAJMBWB5cMUWz+LG4P762xcrGjDMPK1Dp wTvN3n7xirtTVlWDwPy6mytGESnpqnXb+EAZoX6oVH9ZKhsgxZFiZeQoph8MITgu K2EGDmURFUzE9qVxxwiBItsDNAlmvBVFr4+5A1ntY0V+9QAAaa+0bVWjmLe4EWH8 iil3WMzwBQ4NGCWdPdELrmPJ9NtY/GSMlOhBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDGyGWSLOupG9XAuCBjzbAYXaOTkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0RHeUdXU0xPdXBHOVhB dUNCanpiQVlYYU9Uay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn3VwwDQYJKoZIhvcNAQELBQADggEBANd91mRqBlbjLwjWn3sCEe44orw5KSEJ bpEoHSKNc8nY/zVEnRVdJ3dIto/JJK7WA5fZ/DBaiUqEkU0fK9N3J8WpLhrN8GbG vEecxGAxtBd3Xnb437Wg/G0xSdIQIFdhU1UNR4V17+OPeObi/MDvPuC6NNeMS2P1 nDOjbrX10xwJ0lJKLbAfqd8VqJdmghI29l8uDG8E8GhYdcvpxc5+HSumygNFWVaJ Uh3/RtgECRoQ7Eu5eEf0c9IeDJwWB9zWNpD6mqAJLRUVTbk9quqAWGaCXXx1cMGH d51ZIqmm588ujudaIZtL05fyACIh4ngvMmS8rrfHxuFwo0HxY3+uSGk= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:29 2025 by rpki-client on console.sobornost.net