$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/a5-Wj5I5VErLom0wWrhgv_mtkeo.roa File: a5-Wj5I5VErLom0wWrhgv_mtkeo.roa (raw, json) Hash identifier: I2TkRHnUDrdO/PPyUrEFoEYsEfVK7Siv+A+c5NtH1PM= Subject key identifier: 6B:9F:96:8F:92:39:54:4A:CB:A2:6D:30:5A:B8:60:BF:F9:AD:91:EA Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Certificate serial: 21AF Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/a5-Wj5I5VErLom0wWrhgv_mtkeo.roa Signing time: Fri 17 Jan 2025 01:28:34 +0000 ROA not before: Fri 17 Jan 2025 01:28:34 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59067 IP address blocks: 202.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8623 (0x21af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E Validity Not Before: Jan 17 01:28:34 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6B9F968F9239544ACBA26D305AB860BFF9AD91EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:f9:cd:63:80:f1:2e:cb:98:72:e5:ee:f9: 62:12:6d:2f:cd:7d:7f:71:e0:1c:50:b0:f7:59:30: f6:ce:ec:28:74:82:21:2d:29:58:2e:23:2b:04:74: db:04:de:ce:67:06:0a:28:05:0d:2e:1c:81:87:98: 26:b4:5e:ec:f9:a1:2c:0b:47:c1:04:3b:50:4f:74: f1:bf:c5:d1:c8:94:b5:c9:a7:0c:0e:8b:c9:1c:8c: 4c:52:71:3a:14:2a:5c:11:9a:de:16:64:7f:de:17: cc:d3:7f:a5:d6:1e:e0:33:c6:4e:ba:ac:9b:be:70: f5:5b:69:d5:ad:91:5c:03:ee:80:ba:e8:0b:c6:8a: cb:e1:0c:4a:3e:42:13:e8:5a:f5:19:70:28:34:ad: 96:e4:85:bb:4b:80:09:ee:87:d0:4f:53:b5:5c:d2: f2:a0:48:8d:58:27:08:b5:3c:2a:4b:6e:b3:af:d5: 4d:6f:da:83:e8:94:41:b4:1a:be:46:75:a1:18:29: dc:a0:7e:48:fc:4d:8e:f7:c6:a8:24:a8:92:5f:81: 7d:11:bb:cd:17:fe:4a:d6:c9:70:a8:23:15:e0:b0: f5:cb:58:ea:75:d6:b1:60:e1:3d:11:4e:5b:3c:5d: d5:e8:04:80:de:1b:17:ad:5f:d0:c9:ea:99:6a:f0: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9F:96:8F:92:39:54:4A:CB:A2:6D:30:5A:B8:60:BF:F9:AD:91:EA X509v3 Authority Key Identifier: keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/a5-Wj5I5VErLom0wWrhgv_mtkeo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.89.232.0/21 Signature Algorithm: sha256WithRSAEncryption b9:82:17:4c:8e:4d:9e:01:51:0f:5d:1b:f2:ce:fa:8a:28:5f: ec:86:5d:4c:04:fd:17:13:50:15:16:84:be:14:c8:e1:ac:c6: f0:db:c3:7e:92:a2:e1:79:94:8d:ca:f6:34:a2:10:a5:35:06: 42:af:cc:c5:9e:ed:83:95:e1:3f:32:92:8a:86:37:6f:17:3e: 89:2b:9f:8b:bc:2f:47:4f:54:68:9d:0e:52:a1:c5:6f:74:73: 98:10:ee:02:c3:7e:36:9f:55:9d:70:3a:04:33:2a:e5:cf:c5: f4:f4:e9:8b:96:86:53:0f:31:d7:6e:65:2d:60:30:98:47:1b: be:40:15:8b:a1:70:4f:ff:e7:f0:40:3a:f9:0f:0d:ef:15:5c: 2f:a2:e6:8d:4e:68:ca:c5:04:0d:1b:ae:97:60:61:c0:43:6e: 80:03:ea:06:3b:b7:8a:3b:30:2e:b4:ed:aa:74:20:2f:37:8d: 83:5a:1f:4e:b4:b0:69:ba:86:7e:2b:5a:28:2d:6a:4e:0e:fb: f3:e5:ac:d8:0b:92:e4:f4:d1:c2:71:b9:6f:26:a3:09:e0:91: 65:07:84:dd:34:5a:66:fe:20:d4:00:4f:9f:84:b9:05:eb:d2: 5a:80:26:4e:bc:d6:97:b0:17:95:0e:ff:02:83:0b:a7:e5:10: be:b6:50:79 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICIa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTAxMTcw MTI4MzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZCOUY5NjhGOTIzOTU0 NEFDQkEyNkQzMDVBQjg2MEJGRjlBRDkxRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOGfnNY4DxLsuYcuXu+WISbS/NfX9x4BxQsPdZMPbO7Ch0giEt KVguIysEdNsE3s5nBgooBQ0uHIGHmCa0Xuz5oSwLR8EEO1BPdPG/xdHIlLXJpwwO i8kcjExScToUKlwRmt4WZH/eF8zTf6XWHuAzxk66rJu+cPVbadWtkVwD7oC66AvG isvhDEo+QhPoWvUZcCg0rZbkhbtLgAnuh9BPU7Vc0vKgSI1YJwi1PCpLbrOv1U1v 2oPolEG0Gr5GdaEYKdygfkj8TY73xqgkqJJfgX0Ru80X/krWyXCoIxXgsPXLWOp1 1rFg4T0RTls8XdXoBIDeGxetX9DJ6plq8Ge3AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUa5+Wj5I5VErLom0wWrhgv/mtkeowHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa 1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvYTUtV2o1STVWRXJM b20wd1dyaGd2X210a2VvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8pZ6DANBgkqhkiG9w0BAQsFAAOCAQEAuYIXTI5NngFRD10b8s76iihf7IZd TAT9FxNQFRaEvhTI4azG8NvDfpKi4XmUjcr2NKIQpTUGQq/MxZ7tg5XhPzKSioY3 bxc+iSufi7wvR09UaJ0OUqHFb3RzmBDuAsN+Np9VnXA6BDMq5c/F9PTpi5aGUw8x 125lLWAwmEcbvkAVi6FwT//n8EA6+Q8N7xVcL6LmjU5oysUEDRuul2BhwENugAPq Bju3ijswLrTtqnQgLzeNg1ofTrSwabqGfitaKC1qTg778+Ws2AuS5PTRwnG5byaj CeCRZQeE3TRaZv4g1ABPn4S5BevSWoAmTrzWl7AXlQ7/AoMLp+UQvrZQeQ== -----END CERTIFICATE-----Generated at Fri Apr 4 18:41:34 2025 by rpki-client