$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/tou57tkArzeegu37p7K21QZeqNI.roa File: tou57tkArzeegu37p7K21QZeqNI.roa (raw, json) Hash identifier: c7KnwcFILTwR2nMiTjzl6YCWDzLXp6oQT5kZn/KHinw= Subject key identifier: B6:8B:B9:EE:D9:00:AF:37:9E:82:ED:FB:A7:B2:B6:D5:06:5E:A8:D2 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 201B Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/tou57tkArzeegu37p7K21QZeqNI.roa Signing time: Fri 17 Jan 2025 01:24:06 +0000 ROA not before: Fri 17 Jan 2025 01:24:06 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 212237 IP address blocks: 2403:6380::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8219 (0x201b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Jan 17 01:24:06 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B68BB9EED900AF379E82EDFBA7B2B6D5065EA8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:4a:73:ed:90:49:3a:52:ee:f4:64:6a:bb: 5b:db:66:36:2c:5c:7c:ce:8c:5a:83:b7:4b:2f:7e: f0:23:9a:f0:c6:e1:82:8c:56:99:b4:d9:0e:d2:e3: 6c:46:a1:d2:8a:75:1e:23:42:1e:90:73:4b:56:93: 16:2d:63:3b:ee:69:24:23:d1:f6:41:fb:be:b6:f1: 08:5c:f4:46:9c:5b:4c:01:52:f1:6d:7a:bf:f3:34: 80:1b:4c:06:7c:a2:db:96:fd:3f:05:b3:0d:9a:c0: 85:e3:05:3f:83:07:f0:47:d5:1c:4a:ae:61:48:64: c1:08:bd:a6:88:39:94:ed:ed:6d:18:76:46:7d:9a: a7:f3:d9:c3:66:e6:92:ad:01:9e:03:8b:a0:15:37: 69:73:3b:9f:47:ea:24:56:5b:63:39:7f:f9:47:89: a5:e6:78:f0:7d:a7:a3:c5:fd:57:44:29:c1:da:22: 43:7d:c3:3f:61:50:31:e4:82:ab:36:d3:b3:4c:6f: e4:20:db:b2:0b:47:b0:14:cc:ca:13:f3:19:80:b2: e1:d5:1b:98:b8:81:5e:8d:15:91:e6:ed:00:13:a6: 1e:a1:7e:36:06:95:72:02:4c:1e:bf:e5:cf:49:3c: 36:02:5d:77:bf:b3:26:81:09:fe:5c:7d:fb:8c:27: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8B:B9:EE:D9:00:AF:37:9E:82:ED:FB:A7:B2:B6:D5:06:5E:A8:D2 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/tou57tkArzeegu37p7K21QZeqNI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:6380::/40 Signature Algorithm: sha256WithRSAEncryption 19:90:5a:ca:ac:95:d9:8d:c9:1a:78:7a:2a:5d:f9:19:d0:65: bf:8c:80:82:d1:ee:11:b6:a0:80:fc:55:80:a1:7f:17:27:dc: 3f:2e:bd:9a:1d:de:01:58:1b:20:d9:c8:19:c8:9e:18:09:eb: a2:fc:2a:64:d8:6b:1b:96:ae:d6:f2:c0:9f:43:c5:77:dd:de: 76:e9:e7:e7:df:a4:a4:d9:ac:ed:99:2e:8a:6c:13:30:ed:29: 16:54:21:6b:8e:46:56:d2:ba:6f:a4:42:05:0d:e6:16:73:45: ad:44:ad:46:a7:de:f3:30:9e:8f:a3:2b:82:b3:a7:f1:83:16: 5d:e3:79:e2:9b:7f:26:f4:c5:72:a7:85:b0:88:14:6b:a6:31: eb:94:71:62:c8:da:48:a1:fd:04:a7:04:5e:41:75:9f:37:c7: e4:84:99:73:02:84:d4:21:e4:0b:a2:b1:b9:43:53:79:a8:1a: e3:fc:bf:71:7a:73:3b:a6:7e:f9:ef:0b:89:ee:ff:21:38:bb: 5f:84:80:44:d1:d3:fa:b8:5f:a3:37:8f:a3:e2:e7:b9:39:79: 66:67:e9:5a:dd:12:04:7c:76:9a:da:c7:a9:aa:f4:1d:0c:00: 38:92:ae:09:96:29:7f:b4:fa:2a:48:f2:c6:c8:07:82:7a:2b: 96:f1:4e:e3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICIBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTAxMTcw MTI0MDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI2OEJCOUVFRDkwMEFG Mzc5RTgyRURGQkE3QjJCNkQ1MDY1RUE4RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+rUpz7ZBJOlLu9GRqu1vbZjYsXHzOjFqDt0svfvAjmvDG4YKM Vpm02Q7S42xGodKKdR4jQh6Qc0tWkxYtYzvuaSQj0fZB+7628Qhc9EacW0wBUvFt er/zNIAbTAZ8otuW/T8Fsw2awIXjBT+DB/BH1RxKrmFIZMEIvaaIOZTt7W0YdkZ9 mqfz2cNm5pKtAZ4Di6AVN2lzO59H6iRWW2M5f/lHiaXmePB9p6PF/VdEKcHaIkN9 wz9hUDHkgqs207NMb+Qg27ILR7AUzMoT8xmAsuHVG5i4gV6NFZHm7QATph6hfjYG lXICTB6/5c9JPDYCXXe/syaBCf5cffuMJ3+JAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUtou57tkArzeegu37p7K21QZeqNIwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvdG91NTd0a0FyemVl Z3UzN3A3SzIxUVplcU5JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGACQDY4AAMA0GCSqGSIb3DQEBCwUAA4IBAQAZkFrKrJXZjckaeHoqXfkZ0GW/ jICC0e4RtqCA/FWAoX8XJ9w/Lr2aHd4BWBsg2cgZyJ4YCeui/Cpk2Gsblq7W8sCf Q8V33d526efn36Sk2aztmS6KbBMw7SkWVCFrjkZW0rpvpEIFDeYWc0WtRK1Gp97z MJ6PoyuCs6fxgxZd43nim38m9MVyp4WwiBRrpjHrlHFiyNpIof0EpwReQXWfN8fk hJlzAoTUIeQLorG5Q1N5qBrj/L9xenM7pn757wuJ7v8hOLtfhIBE0dP6uF+jN4+j 4ue5OXlmZ+la3RIEfHaa2sepqvQdDAA4kq4Jlil/tPoqSPLGyAeCeiuW8U7j -----END CERTIFICATE-----Generated at Wed Jun 4 01:12:36 2025 by rpki-client