$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/oo1RAhDNLpypJ4DY-FhJaypVYdc.roa File: oo1RAhDNLpypJ4DY-FhJaypVYdc.roa (raw, json) Hash identifier: p20QDfifNmzC/E34EhawcSFaYE4WAwts4xpfIBZiMZk= Subject key identifier: A2:8D:51:02:10:CD:2E:9C:A9:27:80:D8:F8:58:49:6B:2A:55:61:D7 Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A Certificate serial: 9E Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/oo1RAhDNLpypJ4DY-FhJaypVYdc.roa Signing time: Tue 11 Feb 2025 09:39:52 +0000 ROA not before: Tue 11 Feb 2025 09:39:52 +0000 ROA not after: Tue 13 Jan 2026 01:35:26 +0000 asID: 38340 IP address blocks: 114.28.253.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 21:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A Validity Not Before: Feb 11 09:39:52 2025 GMT Not After : Jan 13 01:35:26 2026 GMT Subject: CN=A28D510210CD2E9CA92780D8F858496B2A5561D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:fb:be:3d:7e:6f:3b:1e:ba:70:05:8d:c8: 47:a9:ac:80:9a:c0:16:bd:8f:c2:18:cc:fc:fe:30: 2b:61:a8:ab:db:2c:af:31:2d:3f:42:49:dd:82:12: 79:90:02:e5:41:b5:74:27:3b:15:95:72:57:6a:fc: 9f:81:45:ba:3e:fc:48:6e:7f:61:0e:e9:5a:aa:1f: cb:a7:a5:49:43:b6:d9:be:20:87:a4:b3:f2:34:71: 49:87:c5:c0:eb:a9:af:c4:6c:bf:64:ce:2a:42:61: ff:ad:42:9a:46:c8:4a:f6:ca:24:4a:23:32:1a:72: 71:d6:e2:38:55:bc:27:b7:0a:f6:32:a4:82:57:f7: bf:03:fa:13:26:d4:f9:88:88:a4:58:b3:c7:97:14: 95:34:66:bb:c5:dd:a5:69:74:ab:a4:82:82:33:d2: 59:a3:ef:a2:b0:3d:b2:06:6c:9a:03:b4:64:96:ac: 58:8e:09:72:3c:2d:c2:3d:12:b4:b5:96:f8:b7:44: 3c:20:2a:ac:94:18:ee:5c:c6:76:d3:07:bd:73:a2: 43:7c:74:fc:16:e3:d9:eb:94:c2:79:5e:4e:6f:b8: c9:04:7f:76:f8:fe:d0:02:e1:81:f2:6a:b7:92:43: 48:69:00:9e:21:eb:d8:5a:4d:1a:0f:20:16:de:9f: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8D:51:02:10:CD:2E:9C:A9:27:80:D8:F8:58:49:6B:2A:55:61:D7 X509v3 Authority Key Identifier: keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/oo1RAhDNLpypJ4DY-FhJaypVYdc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.28.253.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:fa:64:b0:0e:5a:1f:15:80:bb:d2:2d:ac:8c:95:de:e1:20: fb:c3:ec:4b:90:e3:ce:94:05:a9:42:94:69:55:e2:eb:67:08: 41:bc:8d:87:05:90:63:88:51:da:0e:1e:a3:b5:3a:01:89:44: 2e:68:ac:94:ba:5e:17:28:f0:88:9f:74:f2:d0:f0:bd:23:10: 91:a5:82:df:67:54:50:b9:de:32:50:aa:5b:aa:93:a5:22:7d: 55:79:b3:47:92:58:b8:d9:0f:62:26:6c:bf:e6:c3:4e:0b:ba: fd:56:a1:98:fd:26:94:64:e5:1a:1a:fb:86:21:07:04:82:11: 76:a2:93:93:76:d3:8c:af:ad:ef:46:9d:9c:f5:c9:8d:fa:cf: ef:67:f8:60:94:9b:d6:b3:ad:1e:39:b2:dc:e5:5f:a5:89:26: 32:2e:ca:24:56:f1:a9:64:fa:7e:c3:00:cc:08:94:25:04:ef: 7c:07:c6:60:74:4c:94:20:90:69:10:1f:e5:48:50:bf:b4:57: 85:3a:da:a4:2b:86:a6:00:3a:94:48:14:68:3e:cf:b7:d3:0e: 04:07:3a:aa:13:6b:c2:12:95:97:4c:dd:60:c2:c2:43:7f:26: 5f:70:f7:79:d6:72:d7:62:76:78:11:d8:5e:1e:81:2f:a3:e1: 00:e8:d9:60 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5 QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTAyMTEw OTM5NTJaFw0yNjAxMTMwMTM1MjZaMDMxMTAvBgNVBAMTKEEyOEQ1MTAyMTBDRDJF OUNBOTI3ODBEOEY4NTg0OTZCMkE1NTYxRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfr/u+PX5vOx66cAWNyEeprICawBa9j8IYzPz+MCthqKvbLK8x LT9CSd2CEnmQAuVBtXQnOxWVcldq/J+BRbo+/Ehuf2EO6VqqH8unpUlDttm+IIek s/I0cUmHxcDrqa/EbL9kzipCYf+tQppGyEr2yiRKIzIacnHW4jhVvCe3CvYypIJX 978D+hMm1PmIiKRYs8eXFJU0ZrvF3aVpdKukgoIz0lmj76KwPbIGbJoDtGSWrFiO CXI8LcI9ErS1lvi3RDwgKqyUGO5cxnbTB71zokN8dPwW49nrlMJ5Xk5vuMkEf3b4 /tAC4YHyareSQ0hpAJ4h69haTRoPIBben3t5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUoo1RAhDNLpypJ4DY+FhJaypVYdcwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL29vMVJBaEROTHB5cEo0 RFktRmhKYXlwVllkYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAByHP0wDQYJKoZIhvcNAQELBQADggEBABv6ZLAOWh8VgLvSLayMld7hIPvD7EuQ 486UBalClGlV4utnCEG8jYcFkGOIUdoOHqO1OgGJRC5orJS6Xhco8IifdPLQ8L0j EJGlgt9nVFC53jJQqluqk6UifVV5s0eSWLjZD2ImbL/mw04Luv1WoZj9JpRk5Roa +4YhBwSCEXaik5N204yvre9GnZz1yY36z+9n+GCUm9azrR45stzlX6WJJjIuyiRW 8alk+n7DAMwIlCUE73wHxmB0TJQgkGkQH+VIUL+0V4U62qQrhqYAOpRIFGg+z7fT DgQHOqoTa8ISlZdM3WDCwkN/Jl9w93nWctdidngR2F4egS+j4QDo2WA= -----END CERTIFICATE-----Generated at Tue Apr 22 18:50:40 2025 by rpki-client