$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/Q1rsKoujdiHNqktENqeOXuHVNnM.roa File: Q1rsKoujdiHNqktENqeOXuHVNnM.roa (raw, json) Hash identifier: 4D+MNZUweKH7/QuFOGyZbROpGIVNhE+FjniWK0U1Vq4= Subject key identifier: 43:5A:EC:2A:8B:A3:76:21:CD:AA:4B:44:36:A7:8E:5E:E1:D5:36:73 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1D21 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Q1rsKoujdiHNqktENqeOXuHVNnM.roa Signing time: Fri 17 Jan 2025 01:29:54 +0000 ROA not before: Fri 17 Jan 2025 01:29:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 2406:d440:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 07:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7457 (0x1d21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 17 01:29:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=435AEC2A8BA37621CDAA4B4436A78E5EE1D53673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:ca:12:f4:a7:ba:28:83:b8:b5:14:09:b6: f1:a2:ed:53:99:f0:1b:85:f3:b2:0f:f5:30:69:65: 3c:a8:d2:62:44:c4:b1:9f:f5:44:3b:8d:30:b6:f1: 54:34:98:d2:dc:a1:98:80:0d:15:d5:fb:64:33:1f: 7f:df:7b:d9:cf:62:9a:df:19:77:1c:0f:04:bd:c6: 01:18:2f:ab:9b:1e:68:f3:6a:7f:b7:ca:c0:f5:0b: e9:fd:bf:64:03:58:f0:a4:3a:85:2f:01:84:af:e6: 23:0c:bd:48:20:6b:43:66:4b:f7:82:f5:a5:93:63: b5:b6:d3:a5:2d:23:91:02:04:fc:72:b3:02:0a:0b: c6:a7:d4:e1:6c:ff:07:a2:4f:fc:65:92:87:d9:00: 7a:6a:c5:0e:e4:fe:7b:32:88:bd:2c:84:6e:bb:0c: d4:eb:f8:b4:0f:05:4e:06:3d:50:21:b6:b0:62:53: 0a:0e:67:b0:09:d0:ee:72:32:93:6a:2f:5a:62:d3: 80:8b:34:13:76:5e:97:31:06:b1:79:18:bd:03:26: 84:69:f9:60:39:39:e2:80:bc:f3:5d:71:ea:cb:dd: b2:b1:f9:b2:88:15:c4:fb:c8:67:76:0d:b0:aa:fe: 33:2a:fb:ba:bb:c8:09:0f:93:33:77:f8:c2:7a:18: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5A:EC:2A:8B:A3:76:21:CD:AA:4B:44:36:A7:8E:5E:E1:D5:36:73 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/Q1rsKoujdiHNqktENqeOXuHVNnM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d440:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 47:1a:26:5d:39:96:8f:d6:00:9c:26:34:cd:d7:e9:55:14:bb: 57:3d:48:ad:15:4d:47:c7:6a:f0:21:24:42:6b:a4:91:c9:c3: e6:be:b3:47:70:bc:6b:74:fc:d4:cd:4b:c0:b9:63:3c:f2:a8: cd:47:70:09:68:81:cd:d2:db:05:07:5d:d8:11:0b:e3:59:08: 98:b3:8f:84:d1:36:14:7f:91:57:8f:2b:2a:76:88:2a:15:35: 8d:c4:ed:c6:96:47:7b:e5:9d:c5:68:25:4b:d6:36:9b:31:83: df:e7:06:d0:97:92:95:8c:d3:61:13:0c:5e:6b:f5:ae:28:f3: 29:32:c1:96:4a:d1:76:55:87:f0:3d:74:9b:21:9f:38:bf:38: 06:a3:cb:38:3e:9b:e5:33:ee:1e:5b:45:a2:1d:08:51:cc:00: a1:b3:c6:bc:24:f3:4c:21:a8:f2:ca:7d:80:d0:f1:fb:02:ee: 23:90:f0:95:b4:be:92:e9:1a:7d:19:8c:2c:55:f1:40:a4:aa: bb:da:d5:6f:cd:07:fe:93:33:ea:3a:d8:27:7f:88:83:03:21: 9d:7a:bf:77:b5:43:9f:1a:9e:e4:15:2e:ed:89:50:f1:b7:93: 7e:9a:0e:3f:6d:e4:8b:a9:ae:49:d0:db:c9:63:3f:d0:75:3f: f2:27:61:77 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICHSEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMTcw MTI5NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQzNUFFQzJBOEJBMzc2 MjFDREFBNEI0NDM2QTc4RTVFRTFENTM2NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUgcoS9Ke6KIO4tRQJtvGi7VOZ8BuF87IP9TBpZTyo0mJExLGf 9UQ7jTC28VQ0mNLcoZiADRXV+2QzH3/fe9nPYprfGXccDwS9xgEYL6ubHmjzan+3 ysD1C+n9v2QDWPCkOoUvAYSv5iMMvUgga0NmS/eC9aWTY7W206UtI5ECBPxyswIK C8an1OFs/weiT/xlkofZAHpqxQ7k/nsyiL0shG67DNTr+LQPBU4GPVAhtrBiUwoO Z7AJ0O5yMpNqL1pi04CLNBN2XpcxBrF5GL0DJoRp+WA5OeKAvPNdcerL3bKx+bKI FcT7yGd2DbCq/jMq+7q7yAkPkzN3+MJ6GPJLAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUQ1rsKoujdiHNqktENqeOXuHVNnMwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvUTFyc0tvdWpkaUhO cWt0RU5xZU9YdUhWTm5NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQG1ED/ADANBgkqhkiG9w0BAQsFAAOCAQEARxomXTmWj9YAnCY0zdfpVRS7 Vz1IrRVNR8dq8CEkQmukkcnD5r6zR3C8a3T81M1LwLljPPKozUdwCWiBzdLbBQdd 2BEL41kImLOPhNE2FH+RV48rKnaIKhU1jcTtxpZHe+WdxWglS9Y2mzGD3+cG0JeS lYzTYRMMXmv1rijzKTLBlkrRdlWH8D10myGfOL84BqPLOD6b5TPuHltFoh0IUcwA obPGvCTzTCGo8sp9gNDx+wLuI5DwlbS+kukafRmMLFXxQKSqu9rVb80H/pMz6jrY J3+IgwMhnXq/d7VDnxqe5BUu7YlQ8beTfpoOP23ki6muSdDbyWM/0HU/8idhdw== -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:48 2025 by rpki-client