$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/FYuk0Ds0QmHNOkfLN0pvrGgw5Ys.roa File: FYuk0Ds0QmHNOkfLN0pvrGgw5Ys.roa (raw, json) Hash identifier: Mwln78oGjGRfYvKvP2vSDO8/k7xIEIsQaYxjjb4alPs= Subject key identifier: 15:8B:A4:D0:3B:34:42:61:CD:3A:47:CB:37:4A:6F:AC:68:30:E5:8B Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CCF Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/FYuk0Ds0QmHNOkfLN0pvrGgw5Ys.roa Signing time: Thu 02 Jan 2025 13:58:29 +0000 ROA not before: Thu 02 Jan 2025 13:58:29 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 180.184.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 07:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7375 (0x1ccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:29 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=158BA4D03B344261CD3A47CB374A6FAC6830E58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:e7:4e:8a:10:28:05:27:29:80:e3:cc:a6: 41:e1:9b:ee:48:a0:7d:db:32:e9:e0:fb:c2:b1:b4: e9:15:4a:ae:07:40:ac:42:fd:9a:0c:fd:d5:bd:fa: af:c3:99:f9:81:5a:62:71:b5:5e:9d:f3:29:91:bc: d8:a3:0f:94:b4:59:33:40:3a:b9:81:2a:46:cf:c0: 4b:bd:23:fb:2d:c8:73:f6:a1:77:09:be:ae:7f:52: 00:6f:3d:44:ee:9a:b2:ed:a2:e9:8b:f4:c2:93:e7: 02:d0:6a:14:4f:54:cb:da:1c:c6:52:72:4b:2c:ec: 7d:2d:64:b9:04:f9:5a:a6:81:b3:63:47:85:78:ad: e1:71:10:e7:7f:d8:1d:12:a7:ac:d1:b0:2e:f0:c6: 46:60:cf:98:37:88:4f:bc:ec:bf:5d:72:88:c5:cd: 9b:19:1b:79:ec:33:d0:6f:c4:bd:c9:35:c9:b7:94: 2e:da:29:83:ed:01:bf:02:0d:46:30:30:82:68:4a: 2f:ae:de:cd:df:03:02:62:c1:b9:80:00:7c:a7:62: b4:82:f3:cc:0d:e8:c1:bb:3a:65:11:44:e6:29:df: 60:c9:97:51:36:6a:47:57:8a:3f:b8:6b:e7:4b:43: b5:12:d1:79:4e:33:2d:99:19:99:90:59:fe:dc:28: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8B:A4:D0:3B:34:42:61:CD:3A:47:CB:37:4A:6F:AC:68:30:E5:8B X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/FYuk0Ds0QmHNOkfLN0pvrGgw5Ys.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.184.144.0/21 Signature Algorithm: sha256WithRSAEncryption 45:e6:e7:cc:5a:99:36:30:5f:b6:06:3d:08:b3:b7:e7:9f:f2: 85:ab:12:19:d1:01:3c:0e:91:1c:1e:f7:86:99:d6:6f:16:8b: 0e:42:72:0a:7d:f1:90:91:2f:69:6d:a4:df:9f:09:e8:52:ca: e1:52:30:9c:46:ce:5b:d7:52:3d:c1:e4:5c:3d:c5:34:7e:13: 74:c7:d8:e3:50:f5:b3:15:a9:90:96:60:38:dc:50:88:ec:b1: a7:3d:c9:91:f9:b5:fc:a3:b7:14:95:4d:1c:3c:29:a6:9e:b4: 72:a4:c6:ba:df:dc:e2:6b:55:8f:ac:1b:2c:b8:77:c7:41:0b: b8:04:50:c3:5d:ff:96:5d:70:99:86:7b:58:83:0e:40:30:60: c0:84:bb:57:10:21:3d:63:fa:61:2c:06:8a:f2:04:c9:27:c7: 60:47:10:38:d4:e5:a5:35:f3:75:47:0a:4d:73:d1:1c:0d:3a: 6c:f7:0e:89:6d:2e:02:17:eb:f2:fd:59:45:d6:9a:fa:b9:f8: 31:3d:85:3d:74:a8:a0:3d:bc:48:dc:88:cd:6f:5d:63:0f:62: e9:ee:da:a6:e9:66:8c:c6:88:3a:fb:d9:5d:ea:b4:0d:fd:b7: 5a:cf:30:2c:f4:07:80:3a:4f:5e:5d:8f:41:99:d4:07:10:0d: 4c:90:4b:3f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE1OEJBNEQwM0IzNDQy NjFDRDNBNDdDQjM3NEE2RkFDNjgzMEU1OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzqedOihAoBScpgOPMpkHhm+5IoH3bMung+8KxtOkVSq4HQKxC /ZoM/dW9+q/DmfmBWmJxtV6d8ymRvNijD5S0WTNAOrmBKkbPwEu9I/styHP2oXcJ vq5/UgBvPUTumrLtoumL9MKT5wLQahRPVMvaHMZSckss7H0tZLkE+VqmgbNjR4V4 reFxEOd/2B0Sp6zRsC7wxkZgz5g3iE+87L9dcojFzZsZG3nsM9BvxL3JNcm3lC7a KYPtAb8CDUYwMIJoSi+u3s3fAwJiwbmAAHynYrSC88wN6MG7OmURROYp32DJl1E2 akdXij+4a+dLQ7US0XlOMy2ZGZmQWf7cKCaZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUFYuk0Ds0QmHNOkfLN0pvrGgw5YswHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvRll1azBEczBRbUhO T2tmTE4wcHZyR2d3NVlzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7S4kDANBgkqhkiG9w0BAQsFAAOCAQEARebnzFqZNjBftgY9CLO355/yhasS GdEBPA6RHB73hpnWbxaLDkJyCn3xkJEvaW2k358J6FLK4VIwnEbOW9dSPcHkXD3F NH4TdMfY41D1sxWpkJZgONxQiOyxpz3Jkfm1/KO3FJVNHDwppp60cqTGut/c4mtV j6wbLLh3x0ELuARQw13/ll1wmYZ7WIMOQDBgwIS7VxAhPWP6YSwGivIEySfHYEcQ ONTlpTXzdUcKTXPRHA06bPcOiW0uAhfr8v1ZRdaa+rn4MT2FPXSooD28SNyIzW9d Yw9i6e7apulmjMaIOvvZXeq0Df23Ws8wLPQHgDpPXl2PQZnUBxANTJBLPw== -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:49 2025 by rpki-client