$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/Ai_3ZGUyOymZlKBltfpaWRLJljU.roa File: Ai_3ZGUyOymZlKBltfpaWRLJljU.roa (raw, json) Hash identifier: RXJ0qyo/XfiO+M7uEJrRZHaYreFCxlz3slo/TQRRhOc= Subject key identifier: 02:2F:F7:64:65:32:3B:29:99:94:A0:65:B5:FA:5A:59:12:C9:96:35 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 2025 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Ai_3ZGUyOymZlKBltfpaWRLJljU.roa Signing time: Fri 17 Jan 2025 01:24:09 +0000 ROA not before: Fri 17 Jan 2025 01:24:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 212237 IP address blocks: 2403:6380:60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8229 (0x2025) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Jan 17 01:24:09 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=022FF76465323B299994A065B5FA5A5912C99635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:ea:33:d7:5f:33:fe:16:6d:95:8d:3b:dd: 52:0e:ab:2e:de:f4:54:35:51:12:18:88:0a:3b:44: 88:f0:31:3d:93:56:70:0d:7a:20:ba:4f:02:f9:0c: be:55:13:9e:9c:64:fb:66:04:17:22:9a:6c:38:70: cc:68:d7:fb:25:72:36:30:8c:b0:c7:27:6d:b1:da: d6:4c:02:c8:59:e7:94:6d:02:2a:86:dc:ab:28:2c: cd:98:a8:f5:77:a6:b5:2a:ce:99:9b:ed:b0:9d:d7: 3e:33:2d:b0:ff:5c:0a:20:71:40:a1:ec:40:89:7b: e1:e2:06:46:1b:24:08:7c:4b:20:03:bf:0c:75:56: 16:31:2e:d5:38:ee:b8:d1:82:51:11:37:32:b5:ec: 88:4d:61:db:3a:63:52:67:07:a1:1a:42:8a:df:fd: 9c:d8:49:d2:b7:eb:92:01:51:b3:4d:71:a1:3d:92: 80:3c:20:69:b7:51:a6:1f:b0:4a:c3:69:e6:f5:64: 7a:38:89:09:85:9c:a6:dd:d8:20:e9:fb:a4:30:78: 54:b1:9f:56:23:c7:6c:cd:55:52:3a:b4:ee:63:bd: e0:8d:20:7a:40:cc:bc:c4:c4:21:81:87:ab:c0:7e: 23:a9:33:eb:55:9f:c3:c6:53:e2:e6:2d:6f:8e:aa: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2F:F7:64:65:32:3B:29:99:94:A0:65:B5:FA:5A:59:12:C9:96:35 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Ai_3ZGUyOymZlKBltfpaWRLJljU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:6380:60::/44 Signature Algorithm: sha256WithRSAEncryption 04:ed:7d:f6:98:a9:fe:34:e3:7e:40:fd:fb:bd:91:17:5e:61: 7b:c0:d5:15:5a:5c:63:72:6d:d7:04:f8:24:c3:35:c5:81:94: 05:60:b4:7d:b0:6c:cd:92:2d:87:1a:cd:a0:53:6a:d9:7e:9d: df:6d:9e:82:97:e6:6a:cb:94:74:b9:3d:84:fd:ec:a2:44:e8: 86:0c:36:d3:5d:be:3e:6d:39:20:a2:55:1e:b2:7d:20:fc:03: eb:9b:a4:1c:f2:d3:c3:80:93:b5:3f:a2:1a:f6:4e:2a:35:1d: d6:e3:f2:bb:31:95:b0:30:b1:cf:2d:32:77:ff:09:ae:f8:53: 2c:da:df:01:cb:06:88:c4:c7:3a:ea:25:fa:74:ac:11:d5:87: 43:e5:a4:94:a0:1d:1a:3c:9d:0b:de:63:a0:02:00:3a:c7:9b: ad:d4:58:78:96:ba:44:4a:a1:5f:4c:21:57:34:37:04:2f:e6: f7:9c:9f:a4:99:4d:b5:fb:3a:e8:e3:99:76:9b:c9:13:f4:d2: 26:ef:77:1c:a6:51:47:83:e8:f1:f6:e4:1f:f0:e9:42:d9:f5: 00:2a:65:10:f5:3a:77:f9:d5:43:5c:b0:76:15:1b:8b:f6:47: 9c:a8:16:4f:b1:ee:5b:2b:06:98:78:d1:b3:07:30:9b:aa:cf: 89:d9:f3:16 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICICUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw MTI0MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyMkZGNzY0NjUzMjNC Mjk5OTk0QTA2NUI1RkE1QTU5MTJDOTk2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoeOoz118z/hZtlY073VIOqy7e9FQ1URIYiAo7RIjwMT2TVnAN eiC6TwL5DL5VE56cZPtmBBcimmw4cMxo1/slcjYwjLDHJ22x2tZMAshZ55RtAiqG 3KsoLM2YqPV3prUqzpmb7bCd1z4zLbD/XAogcUCh7ECJe+HiBkYbJAh8SyADvwx1 VhYxLtU47rjRglERNzK17IhNYds6Y1JnB6EaQorf/ZzYSdK365IBUbNNcaE9koA8 IGm3UaYfsErDaeb1ZHo4iQmFnKbd2CDp+6QweFSxn1Yjx2zNVVI6tO5jveCNIHpA zLzExCGBh6vAfiOpM+tVn8PGU+LmLW+OqlEDAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUAi/3ZGUyOymZlKBltfpaWRLJljUwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvQWlfM1pHVXlPeW1a bEtCbHRmcGFXUkxKbGpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQDY4AAYDANBgkqhkiG9w0BAQsFAAOCAQEABO199pip/jTjfkD9+72RF15h e8DVFVpcY3Jt1wT4JMM1xYGUBWC0fbBszZIthxrNoFNq2X6d322egpfmasuUdLk9 hP3sokTohgw2012+Pm05IKJVHrJ9IPwD65ukHPLTw4CTtT+iGvZOKjUd1uPyuzGV sDCxzy0yd/8JrvhTLNrfAcsGiMTHOuol+nSsEdWHQ+WklKAdGjydC95joAIAOseb rdRYeJa6REqhX0whVzQ3BC/m95yfpJlNtfs66OOZdpvJE/TSJu93HKZRR4Po8fbk H/DpQtn1ACplEPU6d/nVQ1ywdhUbi/ZHnKgWT7HuWysGmHjRswcwm6rPidnzFg== -----END CERTIFICATE-----Generated at Fri Apr 4 18:43:10 2025 by rpki-client