$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/NfW9ixqx7VgotkkSnHgDKsh9dMY.roa File: NfW9ixqx7VgotkkSnHgDKsh9dMY.roa (raw, json) Hash identifier: Kie2q3O8eSHwiR0YzejrLsyQsmYHNodx8EF7zb/LMb0= Subject key identifier: 35:F5:BD:8B:1A:B1:ED:58:28:B6:49:12:9C:78:03:2A:C8:7D:74:C6 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 1BF6 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/NfW9ixqx7VgotkkSnHgDKsh9dMY.roa Signing time: Fri 17 Jan 2025 01:27:19 +0000 ROA not before: Fri 17 Jan 2025 01:27:19 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 18257 IP address blocks: 2404:6380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7158 (0x1bf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Jan 17 01:27:19 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=35F5BD8B1AB1ED5828B649129C78032AC87D74C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5b:c4:36:2e:27:fb:6b:97:39:44:a5:e8:7f: 85:4d:70:6e:2e:75:62:51:32:bc:d6:71:1c:2a:d8: c4:5d:44:98:57:b4:b4:92:f6:cc:e3:16:78:c8:2e: 41:95:a8:e2:48:b0:4b:bd:31:21:25:f4:5c:17:a0: 9b:ed:3a:70:5d:6c:52:e2:fe:71:93:92:d1:a6:fb: 54:1d:b5:f9:50:51:87:c3:90:08:d7:7d:8c:95:21: 92:44:1e:53:b2:43:18:35:bc:16:30:f9:d2:e6:98: 7d:d6:f0:19:6a:ae:70:82:5a:77:d1:22:7b:7f:2c: f1:d2:ce:e7:24:f9:c5:47:60:fa:f5:be:90:dd:90: 26:ac:a2:8d:04:fc:db:0f:cd:fe:0b:59:4c:6b:f6: 42:3b:7b:de:7d:40:3f:12:f3:cb:a8:b0:c7:c3:06: 74:7f:33:77:e4:e4:40:f3:45:6c:6e:28:e7:81:7e: 17:be:aa:60:c1:dc:82:f5:bb:1e:94:02:2c:c1:4e: bc:0e:40:43:00:00:1a:f2:3c:cf:50:93:18:0c:f0: bc:e3:f7:3a:9a:24:e4:06:b8:f8:7c:ff:75:83:be: a2:17:33:82:a8:01:e0:6a:3d:a3:69:93:bd:a4:f1: bb:63:22:5c:66:bc:23:5f:1b:8f:9e:09:e2:d9:fc: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F5:BD:8B:1A:B1:ED:58:28:B6:49:12:9C:78:03:2A:C8:7D:74:C6 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/NfW9ixqx7VgotkkSnHgDKsh9dMY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:6380::/32 Signature Algorithm: sha256WithRSAEncryption 5a:e2:b9:18:8e:22:77:48:c7:4a:f6:e8:47:68:59:69:e2:07: 85:7c:f5:36:26:44:43:6d:20:11:f1:32:ba:88:cb:4c:b7:f1: c7:8b:a9:d4:27:70:49:f3:04:81:ab:e8:fe:47:85:60:4c:99: 46:1e:83:41:4e:5a:af:14:30:9e:a3:60:55:29:ec:c7:2d:07: fc:34:ca:c3:07:cf:f2:1d:fa:45:a7:69:df:d5:eb:c9:b5:ff: ff:9e:ce:27:60:c9:14:14:c4:f0:44:2d:32:ac:4b:7c:ef:19: 26:ea:f0:59:85:8a:ce:84:a3:89:7d:df:c7:4b:19:72:c7:cf: 97:b6:6f:f1:b0:bd:65:93:12:03:61:cf:cc:55:07:8b:54:ac: 66:05:49:be:ce:50:da:65:7b:99:80:5b:48:fb:ea:ce:72:e6: 27:48:07:c5:b1:98:a6:e9:f7:66:4d:7c:06:67:88:b5:03:69: 1d:8b:b4:73:01:40:40:e1:be:85:2c:9c:89:0f:63:68:94:95: 9f:7b:91:8f:fe:2c:6b:7c:c9:ea:ad:5c:8f:8b:40:ec:8f:b8: ab:a7:b4:11:cb:f4:1c:14:81:24:97:fc:2f:49:9f:4b:92:89: 09:cc:2d:48:55:12:a2:4d:ab:37:b4:88:d7:03:96:bc:c5:d0: be:93:75:b5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICG/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNTAxMTcw MTI3MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM1RjVCRDhCMUFCMUVE NTgyOEI2NDkxMjlDNzgwMzJBQzg3RDc0QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsW8Q2Lif7a5c5RKXof4VNcG4udWJRMrzWcRwq2MRdRJhXtLSS 9szjFnjILkGVqOJIsEu9MSEl9FwXoJvtOnBdbFLi/nGTktGm+1QdtflQUYfDkAjX fYyVIZJEHlOyQxg1vBYw+dLmmH3W8BlqrnCCWnfRInt/LPHSzuck+cVHYPr1vpDd kCasoo0E/NsPzf4LWUxr9kI7e959QD8S88uosMfDBnR/M3fk5EDzRWxuKOeBfhe+ qmDB3IL1ux6UAizBTrwOQEMAABryPM9QkxgM8Lzj9zqaJOQGuPh8/3WDvqIXM4Ko AeBqPaNpk72k8btjIlxmvCNfG4+eCeLZ/OrHAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUNfW9ixqx7VgotkkSnHgDKsh9dMYwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvTmZXOWl4cXg3Vmdv dGtrU25IZ0RLc2g5ZE1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQEY4AwDQYJKoZIhvcNAQELBQADggEBAFriuRiOIndIx0r26EdoWWniB4V8 9TYmRENtIBHxMrqIy0y38ceLqdQncEnzBIGr6P5HhWBMmUYeg0FOWq8UMJ6jYFUp 7MctB/w0ysMHz/Id+kWnad/V68m1//+ezidgyRQUxPBELTKsS3zvGSbq8FmFis6E o4l938dLGXLHz5e2b/GwvWWTEgNhz8xVB4tUrGYFSb7OUNple5mAW0j76s5y5idI B8WxmKbp92ZNfAZniLUDaR2LtHMBQEDhvoUsnIkPY2iUlZ97kY/+LGt8yeqtXI+L QOyPuKuntBHL9BwUgSSX/C9Jn0uSiQnMLUhVEqJNqze0iNcDlrzF0L6TdbU= -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:45 2025 by rpki-client