$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/lVatHXgJYHeEv1kpYqyFWkiQNvc.roa File: lVatHXgJYHeEv1kpYqyFWkiQNvc.roa (raw, json) Hash identifier: Ig2uqLibdpo5bXeKVMPoQj35Ki9XftJlKWfFY3dWSaM= Subject key identifier: 95:56:AD:1D:78:09:60:77:84:BF:59:29:62:AC:85:5A:48:90:36:F7 Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Certificate serial: 1322 Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/lVatHXgJYHeEv1kpYqyFWkiQNvc.roa Signing time: Mon 10 Feb 2025 01:29:37 +0000 ROA not before: Mon 10 Feb 2025 01:29:37 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63566 IP address blocks: 122.11.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4898 (0x1322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Validity Not Before: Feb 10 01:29:37 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9556AD1D7809607784BF592962AC855A489036F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:32:58:3f:7d:4d:7a:94:56:25:18:d6:2f: a7:ff:b3:5c:a7:50:9a:35:e1:29:42:6b:9e:12:3c: 14:2c:0b:1f:11:ff:1f:15:71:9f:67:06:ef:c4:ca: a3:b1:1a:27:4a:27:45:44:e3:93:5f:d1:91:b9:8a: 62:d7:75:38:99:24:d7:ac:2e:94:35:b5:cf:e2:ff: 2c:23:a1:41:07:e0:cb:10:95:02:cf:f0:62:83:e4: 1b:59:21:7a:65:86:e3:06:b8:68:41:94:d9:78:3f: cb:84:ce:aa:60:bf:92:36:ae:74:4a:2f:97:bd:3f: 38:65:ef:85:46:f2:d4:1b:29:d3:66:28:1e:b2:a9: b5:78:47:34:11:59:38:cf:7e:7d:e3:e6:2f:19:a7: 57:99:4a:df:6e:52:9b:39:1b:29:ca:7c:91:f0:47: 5a:06:62:79:00:50:36:23:d3:fb:90:fd:4b:05:22: d9:a9:d6:fb:df:be:99:85:fd:7a:c3:08:16:2e:22: d4:42:52:36:7f:d1:89:c9:d5:44:5b:31:00:d4:87: e1:b3:eb:1a:8a:2a:c5:1b:97:fb:aa:b8:70:e6:28: ea:eb:60:0e:cd:91:2b:45:e9:83:69:76:43:a5:f8: 76:de:2a:79:ee:d9:be:9b:40:70:75:d0:1f:7c:31: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:56:AD:1D:78:09:60:77:84:BF:59:29:62:AC:85:5A:48:90:36:F7 X509v3 Authority Key Identifier: keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/lVatHXgJYHeEv1kpYqyFWkiQNvc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.11.0.0/19 Signature Algorithm: sha256WithRSAEncryption 35:cc:48:1a:b0:9d:c3:03:27:18:df:a2:4b:10:75:3d:f0:6a: af:2b:d2:13:19:a3:fa:f6:48:54:ef:67:d0:68:b0:15:f3:9c: 3b:4a:22:f0:e2:04:10:30:f1:b2:32:08:a2:c4:b8:e9:99:17: 22:b4:40:6a:fd:f2:04:f7:17:fd:37:47:fd:18:64:53:34:1d: 1a:04:cf:8d:61:e3:14:65:81:60:b1:03:63:57:12:1d:fb:81: 59:32:3a:16:85:85:d3:84:14:6e:6e:3e:bf:84:ad:c6:97:de: 7c:62:77:e1:e0:fa:52:31:ec:88:f7:fd:5d:12:ba:a1:a9:f9: a0:02:fe:dd:06:a4:f0:db:ce:45:18:b4:0e:d1:fb:c2:11:3d: 29:71:1d:7c:a8:9e:46:ff:7f:f6:54:ed:e5:69:e6:f8:e0:ce: 47:b4:79:8d:82:f9:45:07:e4:2d:29:b4:74:64:ad:28:4c:11: 31:1e:51:c9:7b:30:8d:71:b0:fb:a4:19:ab:82:b6:8e:ad:07: ca:a9:f9:06:bc:66:5b:cc:f4:ee:72:c4:a4:3e:f1:dc:d1:b1: 59:c2:bf:99:ab:64:3b:e0:a2:e2:02:cf:3a:9a:9e:0b:5d:37: 24:cb:b7:5a:bd:87:d1:59:8a:b3:d2:1a:98:43:b2:cb:ba:1d: 72:2b:c7:75 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZE QjBEODg3NDZGRkMwODE0RTU4OUExMzkyNDBGMkY3NDJEMEM1NjAeFw0yNTAyMTAw MTI5MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk1NTZBRDFENzgwOTYw Nzc4NEJGNTkyOTYyQUM4NTVBNDg5MDM2RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp7DJYP31NepRWJRjWL6f/s1ynUJo14SlCa54SPBQsCx8R/x8V cZ9nBu/EyqOxGidKJ0VE45Nf0ZG5imLXdTiZJNesLpQ1tc/i/ywjoUEH4MsQlQLP 8GKD5BtZIXplhuMGuGhBlNl4P8uEzqpgv5I2rnRKL5e9Pzhl74VG8tQbKdNmKB6y qbV4RzQRWTjPfn3j5i8Zp1eZSt9uUps5GynKfJHwR1oGYnkAUDYj0/uQ/UsFItmp 1vvfvpmF/XrDCBYuItRCUjZ/0YnJ1URbMQDUh+Gz6xqKKsUbl/uquHDmKOrrYA7N kStF6YNpdkOl+HbeKnnu2b6bQHB10B98MeM5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUlVatHXgJYHeEv1kpYqyFWkiQNvcwHwYDVR0jBBgwFoAUhtsNiHRv/AgU5Ymh OSQPL3QtDFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc3 Ni9odHNOaUhSdl9BZ1U1WW1oT1NRUEwzUXRERlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2h0c05pSFJ2X0FnVTVZbWhPU1FQTDNRdERGWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NzYvbFZhdEhYZ0pZSGVF djFrcFlxeUZXa2lRTnZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXoLADANBgkqhkiG9w0BAQsFAAOCAQEANcxIGrCdwwMnGN+iSxB1PfBqryvS Exmj+vZIVO9n0GiwFfOcO0oi8OIEEDDxsjIIosS46ZkXIrRAav3yBPcX/TdH/Rhk UzQdGgTPjWHjFGWBYLEDY1cSHfuBWTI6FoWF04QUbm4+v4StxpfefGJ34eD6UjHs iPf9XRK6oan5oAL+3Qak8NvORRi0DtH7whE9KXEdfKieRv9/9lTt5Wnm+ODOR7R5 jYL5RQfkLSm0dGStKEwRMR5RyXswjXGw+6QZq4K2jq0Hyqn5BrxmW8z07nLEpD7x 3NGxWcK/matkO+Ci4gLPOpqeC103JMu3Wr2H0VmKs9IamEOyy7odcivHdQ== -----END CERTIFICATE-----Generated at Fri Apr 4 18:40:43 2025 by rpki-client