$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa File: 1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa (raw, json) Hash identifier: y1yapVOWcFRVM0HkMcu6W1MzSDLeXbZvTAbExv3iZIU= Subject key identifier: D6:1E:07:B9:86:C2:6D:3A:94:6B:FD:ED:FF:10:6A:90:B6:D5:2B:72 Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 04 Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa Signing time: Tue 14 Jan 2025 08:18:19 +0000 ROA not before: Tue 14 Jan 2025 08:18:19 +0000 ROA not after: Wed 14 Jan 2026 07:53:29 +0000 asID: 17969 IP address blocks: 2401:7e00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Jan 14 08:18:19 2025 GMT Not After : Jan 14 07:53:29 2026 GMT Subject: CN=D61E07B986C26D3A946BFDEDFF106A90B6D52B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:4a:01:66:3b:21:c5:b5:00:3f:6c:85:66: 1a:09:1b:c0:68:69:96:9a:93:97:ee:b3:2c:a9:ef: d1:c1:78:3a:45:8d:f5:63:74:65:e0:b8:71:77:4f: 95:60:d6:eb:fc:3b:ff:b1:1a:d5:48:8d:20:38:e8: 9a:ae:a7:c1:1e:11:ea:df:90:ba:db:1f:43:e2:6e: f4:1a:01:69:c7:f1:51:b5:25:ad:31:86:da:ee:c8: c9:76:e6:17:ee:79:28:25:28:af:74:e7:45:ad:b8: e9:29:33:b9:b0:df:e3:26:81:df:22:af:68:00:12: 37:fc:50:8f:38:6d:9c:b7:8d:91:59:3b:76:b6:d0: 0b:de:a0:78:a7:4c:53:f7:87:6a:41:a9:0c:a6:5e: 60:88:ed:74:50:f8:ee:36:aa:dc:82:c1:53:1a:80: ee:7c:d2:37:dc:0d:ce:25:b3:f6:4a:ac:c2:9e:4b: 30:50:22:c7:4d:99:cf:ea:f7:55:1e:9c:fd:4f:bc: c8:cb:9a:f7:60:e5:75:d5:6e:25:18:f4:0a:3a:e4: c7:90:3b:1f:3c:c7:7a:86:48:e1:84:96:23:26:0e: 78:f3:b4:c3:6f:88:25:0c:ae:7b:a3:1b:d3:cf:4d: 21:2f:ad:fd:10:d2:79:63:08:cf:4b:06:9c:2a:29: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1E:07:B9:86:C2:6D:3A:94:6B:FD:ED:FF:10:6A:90:B6:D5:2B:72 X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/1h4HuYbCbTqUa_3t_xBqkLbVK3I.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 6e:0c:9c:12:28:8a:5e:83:60:84:10:14:b4:a4:60:05:71:91: 28:aa:60:cb:2d:65:26:97:ce:e5:0f:6a:cd:ce:33:e7:fd:cb: 0d:13:99:f5:19:fa:8d:24:2e:51:f8:51:aa:8e:a4:18:4a:db: ef:68:3b:49:98:16:5d:2f:b5:3e:bd:05:f1:45:5b:20:99:5e: 6d:ef:a6:fa:56:3b:55:37:ba:43:54:37:60:af:bc:15:15:54: f1:cd:6e:f7:e9:f5:80:0e:c7:df:a3:75:ba:f6:1f:1a:64:95: 4c:e3:3a:a0:56:87:6e:c3:fc:4f:4f:e1:68:e8:d2:50:ce:63: a5:fb:31:04:73:ff:f3:43:bc:d0:f8:26:ec:a9:22:a3:f3:b8: 30:6f:17:06:41:f9:6c:72:42:ff:2c:26:47:fe:e3:b2:3a:a6: c1:e8:99:3a:01:95:a3:ef:25:43:ee:6f:60:a5:34:6a:f5:2a: 05:fa:86:3a:d1:31:bf:c4:76:8a:f6:3b:9e:b5:55:10:4f:16: a0:97:ae:89:99:f1:6b:40:81:51:c8:7f:8a:35:2a:29:39:42: 41:3d:4d:71:10:ed:2f:39:8e:c6:19:e5:bd:97:95:ed:6e:a7: 59:8b:c3:f8:5b:0a:03:ce:06:be:9d:e4:cb:3c:93:f9:6c:96: 93:3d:06:b3 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQ0Iy NzNCMDk3OTk3QzAyQjRGNTJFNUMxQkI0RkVGRTY2Nzk3ODUwMB4XDTI1MDExNDA4 MTgxOVoXDTI2MDExNDA3NTMyOVowMzExMC8GA1UEAxMoRDYxRTA3Qjk4NkMyNkQz QTk0NkJGREVERkYxMDZBOTBCNkQ1MkI3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANuBSgFmOyHFtQA/bIVmGgkbwGhplpqTl+6zLKnv0cF4OkWN9WN0 ZeC4cXdPlWDW6/w7/7Ea1UiNIDjomq6nwR4R6t+QutsfQ+Ju9BoBacfxUbUlrTGG 2u7IyXbmF+55KCUor3TnRa246SkzubDf4yaB3yKvaAASN/xQjzhtnLeNkVk7drbQ C96geKdMU/eHakGpDKZeYIjtdFD47jaq3ILBUxqA7nzSN9wNziWz9kqswp5LMFAi x02Zz+r3VR6c/U+8yMua92DlddVuJRj0Cjrkx5A7HzzHeoZI4YSWIyYOePO0w2+I JQyue6Mb089NIS+t/RDSeWMIz0sGnCopA0kCAwEAAaOCAfAwggHsMB0GA1UdDgQW BBTWHge5hsJtOpRr/e3/EGqQttUrcjAfBgNVHSMEGDAWgBTssnOwl5l8ArT1Llwb tP7+Znl4UDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi83 TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLzdMSnpzSmVaZkFLMDlTNWNHN1QtX21aNWVGQS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIyLzFoNEh1WWJDYlRxVWFfM3Rf eEJxa0xiVkszSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk AX4AMA0GCSqGSIb3DQEBCwUAA4IBAQBuDJwSKIpeg2CEEBS0pGAFcZEoqmDLLWUm l87lD2rNzjPn/csNE5n1GfqNJC5R+FGqjqQYStvvaDtJmBZdL7U+vQXxRVsgmV5t 76b6VjtVN7pDVDdgr7wVFVTxzW736fWADsffo3W69h8aZJVM4zqgVoduw/xPT+Fo 6NJQzmOl+zEEc//zQ7zQ+CbsqSKj87gwbxcGQflsckL/LCZH/uOyOqbB6Jk6AZWj 7yVD7m9gpTRq9SoF+oY60TG/xHaK9juetVUQTxagl66JmfFrQIFRyH+KNSopOUJB PU1xEO0vOY7GGeW9l5XtbqdZi8P4WwoDzga+neTLPJP5bJaTPQaz -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:33 2025 by rpki-client