$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/G67fVSUA4NhTInZ885whmQEAABY.roa File: G67fVSUA4NhTInZ885whmQEAABY.roa (raw, json) Hash identifier: 2roDn4OZsfgqBuTEvLxPP8NsYwhdykP59HVOCwJ7J/g= Subject key identifier: 1B:AE:DF:55:25:00:E0:D8:53:22:76:7C:F3:9C:21:99:01:00:00:16 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CBE Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/G67fVSUA4NhTInZ885whmQEAABY.roa Signing time: Thu 02 Jan 2025 13:58:24 +0000 ROA not before: Thu 02 Jan 2025 13:58:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 115.190.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 01:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7358 (0x1cbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=1BAEDF552500E0D85322767CF39C219901000016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:e1:81:dd:32:84:19:8f:d8:d5:1d:7d:ac: fb:f2:a8:9b:0f:a0:6f:00:95:4d:31:ae:bd:77:cb: f1:0b:33:5d:de:38:a7:c4:53:5e:88:dd:92:73:00: 2b:b5:5a:4e:f5:9e:85:83:25:7c:b0:06:e0:3f:11: 77:7e:1e:a5:45:e7:bb:03:ef:44:6b:a3:a1:d1:9f: e8:e1:01:33:1b:28:d7:ec:aa:5f:3a:c5:e2:b2:ee: 9f:73:9b:82:cd:93:39:29:54:9b:fc:83:03:0c:0b: ee:b8:e1:db:4c:2a:ad:c8:44:7b:73:06:09:ff:3d: d5:f7:62:7b:8e:bb:e6:36:a6:c0:8d:5c:87:e7:23: e0:d2:62:05:d2:81:f7:42:00:c9:12:99:30:17:75: b9:c3:3e:12:13:41:6f:9e:6e:4a:e0:49:d9:b5:43: 9d:9d:97:fd:07:9f:6a:75:e7:8d:10:8a:22:d7:5d: 45:df:20:f9:d8:05:c3:6e:b9:b7:c4:99:c6:03:fa: e7:9d:92:88:a0:c9:31:6c:f7:08:8d:0f:5e:e8:12: d2:fb:f4:07:da:81:90:6d:94:e2:75:f1:5e:54:e4: 52:0a:cd:16:3f:65:f4:3a:c5:67:36:cd:2a:cb:af: 8e:98:8f:4a:ab:2b:d6:23:e5:7c:50:5f:4f:3d:9f: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AE:DF:55:25:00:E0:D8:53:22:76:7C:F3:9C:21:99:01:00:00:16 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/G67fVSUA4NhTInZ885whmQEAABY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.190.0.0/15 Signature Algorithm: sha256WithRSAEncryption 96:bb:32:e4:f4:98:17:d8:f3:96:c0:dd:8a:f2:e1:16:d4:aa: b1:50:5a:eb:30:71:6f:49:61:32:28:33:d7:f6:da:8c:94:47: fe:44:4d:8a:fb:6e:bf:28:1e:d2:d1:f6:79:22:22:54:0f:35: c8:8b:e5:74:e6:12:4a:5d:b2:56:33:54:79:98:48:a4:9d:8a: 17:09:ed:98:11:07:63:23:70:39:90:4b:5a:83:ec:16:4f:67: 05:20:72:64:ca:a4:b5:81:24:28:96:79:77:35:04:eb:4a:99: 1b:ed:e9:6c:5a:0f:c5:99:a8:c4:c4:6b:5b:c3:1f:fc:d7:ce: 4a:f9:75:22:8c:cc:26:c9:fe:70:dd:d7:db:ea:c3:de:3e:8b: 17:57:fa:da:ab:31:c3:36:a4:5a:2f:67:b4:b3:95:e0:f3:08: 66:40:0a:01:03:42:39:53:19:93:04:63:41:44:7f:d6:cd:16: 8f:0c:2c:f2:dd:06:c6:74:44:bc:43:d8:91:c5:30:76:8a:81: e6:70:5e:14:6e:a7:7d:c9:b1:3d:36:0f:ff:8e:e3:87:86:33: 12:02:34:cb:2e:3c:a7:e9:13:8f:50:07:0e:91:87:47:25:c7: 74:4d:5f:08:9d:63:68:34:52:e2:21:62:37:7d:6a:7d:be:fb: cf:09:b4:58 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICHL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFCQUVERjU1MjUwMEUw RDg1MzIyNzY3Q0YzOUMyMTk5MDEwMDAwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDPOGB3TKEGY/Y1R19rPvyqJsPoG8AlU0xrr13y/ELM13eOKfE U16I3ZJzACu1Wk71noWDJXywBuA/EXd+HqVF57sD70Rro6HRn+jhATMbKNfsql86 xeKy7p9zm4LNkzkpVJv8gwMMC+644dtMKq3IRHtzBgn/PdX3YnuOu+Y2psCNXIfn I+DSYgXSgfdCAMkSmTAXdbnDPhITQW+ebkrgSdm1Q52dl/0Hn2p1540QiiLXXUXf IPnYBcNuubfEmcYD+uedkoigyTFs9wiND17oEtL79AfagZBtlOJ18V5U5FIKzRY/ ZfQ6xWc2zSrLr46Yj0qrK9Yj5XxQX089n7bvAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUG67fVSUA4NhTInZ885whmQEAABYwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvRzY3ZlZTVUE0TmhU SW5aODg1d2htUUVBQUJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAXO+MA0GCSqGSIb3DQEBCwUAA4IBAQCWuzLk9JgX2POWwN2K8uEW1KqxUFrr MHFvSWEyKDPX9tqMlEf+RE2K+26/KB7S0fZ5IiJUDzXIi+V05hJKXbJWM1R5mEik nYoXCe2YEQdjI3A5kEtag+wWT2cFIHJkyqS1gSQolnl3NQTrSpkb7elsWg/FmajE xGtbwx/8185K+XUijMwmyf5w3dfb6sPePosXV/raqzHDNqRaL2e0s5Xg8whmQAoB A0I5UxmTBGNBRH/WzRaPDCzy3QbGdES8Q9iRxTB2ioHmcF4Ubqd9ybE9Ng//juOH hjMSAjTLLjyn6ROPUAcOkYdHJcd0TV8InWNoNFLiIWI3fWp9vvvPCbRY -----END CERTIFICATE-----Generated at Sat Apr 5 23:13:28 2025 by rpki-client