$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/F1YojpyGroHDj-V-Sq4BhLxcaUA.roa File: F1YojpyGroHDj-V-Sq4BhLxcaUA.roa (raw, json) Hash identifier: 2x088bxvbb0H1FOh1zs7KjWTwW6M73EQfAEhWHxKNik= Subject key identifier: 17:56:28:8E:9C:86:AE:81:C3:8F:E5:7E:4A:AE:01:84:BC:5C:69:40 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CA5 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/F1YojpyGroHDj-V-Sq4BhLxcaUA.roa Signing time: Thu 02 Jan 2025 13:58:17 +0000 ROA not before: Thu 02 Jan 2025 13:58:17 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 180.184.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7333 (0x1ca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:17 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1756288E9C86AE81C38FE57E4AAE0184BC5C6940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:1b:5f:06:e6:a1:36:e0:1a:b1:5c:c8:f9: 86:2b:26:38:aa:59:ef:21:99:18:f6:c1:b9:e9:29: 5e:ca:71:2b:9b:77:6e:ac:e6:51:18:44:c7:2f:f7: 4b:78:77:10:56:12:8a:91:e1:aa:28:c2:ed:af:30: 42:e0:77:b2:fe:01:ab:ed:34:21:7b:93:a2:40:6b: f0:f9:91:03:ca:69:e3:0e:a2:7d:78:d7:c9:98:46: cf:d8:0d:1f:87:cc:b0:66:32:eb:17:09:47:48:b0: 4b:35:5e:f0:27:f5:ee:af:66:b5:ae:e5:af:06:e6: 47:d5:79:5b:98:00:de:e0:a9:4c:06:13:98:4a:a1: 45:08:5e:87:08:05:b2:ef:9f:a5:77:5e:79:02:71: 13:67:94:fa:e7:19:da:88:eb:ed:e8:7f:ec:05:2b: 22:c8:a7:6e:5c:c5:ab:a7:b5:f1:90:78:ff:98:54: fe:12:e1:fd:11:c0:76:1f:41:ee:cd:3e:dc:1d:38: 33:01:56:5a:6d:1b:e1:4e:7d:fd:2f:f8:81:af:ca: db:af:96:83:f7:6f:1e:db:b9:79:25:99:22:25:61: d4:22:a9:c7:08:11:74:ae:3f:7a:51:41:a9:16:79: d1:65:8c:6a:ac:b7:5c:c5:33:05:aa:68:47:98:2c: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:56:28:8E:9C:86:AE:81:C3:8F:E5:7E:4A:AE:01:84:BC:5C:69:40 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/F1YojpyGroHDj-V-Sq4BhLxcaUA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.24.0/21 Signature Algorithm: sha256WithRSAEncryption 95:4b:a5:e6:fa:d6:1e:f8:79:b0:23:b2:58:68:69:b2:4d:b3: f7:79:34:95:a6:70:c6:1e:18:96:de:83:66:33:6a:cd:32:97: 27:d9:5c:6f:45:d8:ca:fe:71:0f:66:c6:f8:e0:28:a7:c6:5c: 2b:a2:25:94:f1:54:3b:72:68:86:db:3e:93:8c:c5:75:c0:f8: ba:e6:46:a7:7f:97:9d:6a:20:6e:c4:a8:9a:f6:21:f1:84:a8: e1:dd:08:9f:36:4a:83:ab:0a:33:9d:44:7a:2a:82:62:ca:d5: 35:0c:3d:5f:40:a3:62:42:64:e7:8a:05:a8:ca:3a:92:13:fc: 52:41:50:88:f1:6d:90:c5:c4:e7:c3:9b:d1:22:99:36:58:b1: 7a:d7:85:c4:96:9a:f5:a6:88:dc:fd:3c:9a:80:e5:9a:3f:c4: ce:eb:a9:75:a8:a3:23:3f:6b:dc:33:fb:d2:9c:5b:c9:af:c0: 9f:46:58:d9:12:64:95:52:08:52:6a:e0:88:1e:b9:ea:2a:cd: 9d:2a:35:25:f5:7d:df:39:1d:ae:e4:1d:d2:7b:10:87:e0:db: 75:28:b0:0a:a3:55:9b:a7:76:a7:f0:a0:b1:15:71:2e:e3:38: af:7d:07:30:1b:dc:2c:ff:f5:15:25:71:a0:81:2a:f2:e5:30: 50:05:97:a2 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3NTYyODhFOUM4NkFF ODFDMzhGRTU3RTRBQUUwMTg0QkM1QzY5NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLvRtfBuahNuAasVzI+YYrJjiqWe8hmRj2wbnpKV7KcSubd26s 5lEYRMcv90t4dxBWEoqR4aoowu2vMELgd7L+AavtNCF7k6JAa/D5kQPKaeMOon14 18mYRs/YDR+HzLBmMusXCUdIsEs1XvAn9e6vZrWu5a8G5kfVeVuYAN7gqUwGE5hK oUUIXocIBbLvn6V3XnkCcRNnlPrnGdqI6+3of+wFKyLIp25cxauntfGQeP+YVP4S 4f0RwHYfQe7NPtwdODMBVlptG+FOff0v+IGvytuvloP3bx7buXklmSIlYdQiqccI EXSuP3pRQakWedFljGqst1zFMwWqaEeYLEktAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUF1YojpyGroHDj+V+Sq4BhLxcaUAwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvRjFZb2pweUdyb0hE ai1WLVNxNEJoTHhjYVVBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4GDANBgkqhkiG9w0BAQsFAAOCAQEAlUul5vrWHvh5sCOyWGhpsk2z93k0 laZwxh4Ylt6DZjNqzTKXJ9lcb0XYyv5xD2bG+OAop8ZcK6IllPFUO3Johts+k4zF dcD4uuZGp3+XnWogbsSomvYh8YSo4d0InzZKg6sKM51EeiqCYsrVNQw9X0CjYkJk 54oFqMo6khP8UkFQiPFtkMXE58Ob0SKZNlixeteFxJaa9aaI3P08moDlmj/Ezuup daijIz9r3DP70pxbya/An0ZY2RJklVIIUmrgiB656irNnSo1JfV93zkdruQd0nsQ h+DbdSiwCqNVm6d2p/CgsRVxLuM4r30HMBvcLP/1FSVxoIEq8uUwUAWXog== -----END CERTIFICATE-----Generated at Wed Jun 4 00:54:10 2025 by rpki-client