$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3250/fKIWXPNUZIrsSVUo_-UGUeZQMl4.roa File: fKIWXPNUZIrsSVUo_-UGUeZQMl4.roa (raw, json) Hash identifier: 9ZgUBnLSZaVhgfC2g5LZyob47PQHUN33Uif7UZdDQN8= Subject key identifier: 7C:A2:16:5C:F3:54:64:8A:EC:49:55:28:FF:E5:06:51:E6:50:32:5E Certificate issuer: /CN=8D34D5981D7B6A00127B9F268748A4E1233E138F Certificate serial: 0790 Authority key identifier: 8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/fKIWXPNUZIrsSVUo_-UGUeZQMl4.roa Signing time: Fri 17 Jan 2025 01:26:09 +0000 ROA not before: Fri 17 Jan 2025 01:26:09 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4837 IP address blocks: 36.50.226.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D34D5981D7B6A00127B9F268748A4E1233E138F Validity Not Before: Jan 17 01:26:09 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7CA2165CF354648AEC495528FFE50651E650325E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:c3:50:45:6d:d0:70:41:09:81:bf:1d:d6: 87:b1:c3:af:13:70:ce:ba:79:ff:4b:07:f9:5d:72: 65:79:6f:92:a9:e1:f1:c4:25:5c:ca:0e:a2:dc:45: cd:38:13:2a:51:d2:7a:94:fe:3d:a1:cb:cd:40:e4: c5:de:b2:bc:6a:57:f6:40:3f:fe:fa:20:5e:6f:0f: c2:89:38:b2:36:c1:6a:89:b2:44:22:e3:3a:9e:1f: ab:3c:dd:3c:90:71:9e:ad:79:cb:83:3f:59:45:a9: c2:82:14:89:f4:6a:63:e9:57:22:ea:a0:ec:5c:d5: 0e:a2:dd:23:32:5a:c9:17:c0:8b:b4:8a:8a:e1:15: 89:d1:91:b5:2f:5c:de:2a:17:96:1a:e5:97:a4:dd: 4c:42:7b:74:3c:cf:f5:66:7a:68:47:41:5f:4d:ad: 0c:ab:7d:74:4b:0d:f8:78:0f:e4:d0:c6:ec:82:f2: 2e:9d:aa:60:38:77:08:3c:5c:1d:ef:df:36:a4:28: 85:9d:d1:f9:3a:af:0f:33:47:3b:61:02:05:88:c6: 98:89:cc:7c:11:e1:fc:61:52:f5:ce:28:f2:93:80: eb:36:1e:bc:80:e8:31:bb:ee:3d:bf:fd:db:26:74: 50:ef:d6:ee:7f:9d:94:8b:83:32:47:0e:06:dd:f6: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:16:5C:F3:54:64:8A:EC:49:55:28:FF:E5:06:51:E6:50:32:5E X509v3 Authority Key Identifier: keyid:8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/fKIWXPNUZIrsSVUo_-UGUeZQMl4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.50.226.0/23 Signature Algorithm: sha256WithRSAEncryption 52:0b:44:94:c7:0c:51:dc:c4:b7:57:59:76:6c:5c:35:d2:08: 30:1b:fc:ec:89:68:e7:92:e1:28:ab:e6:10:ab:eb:3c:bc:71: 4b:9b:85:d7:2f:f6:f8:a4:71:4a:09:41:ab:c2:76:b7:bc:9a: 41:8d:37:38:d7:a7:b2:fb:ed:67:99:f8:cb:73:76:ff:1f:42: 59:a9:91:f7:5c:b5:7c:e4:9a:92:8d:24:70:e4:01:6a:12:7e: 10:96:bd:78:fd:66:c9:7e:f0:57:34:39:33:35:a3:74:1d:84: 2c:f6:e8:78:3a:10:be:ee:06:d2:88:f3:23:fc:3c:f3:a2:88: b6:f4:6a:a8:d8:07:58:fa:e2:51:5c:a7:e3:23:fe:f9:5a:8b: 1d:8e:4b:92:e6:6e:88:24:ea:41:33:22:1f:4e:ff:ea:97:f7: 4a:2c:69:06:fd:16:e1:3b:97:4c:9a:ad:68:72:11:c3:44:ab: 5d:29:9f:3f:8b:e6:f8:69:11:02:7e:bc:6e:df:40:7e:35:1c: 9d:87:8f:d7:a8:4b:f4:6a:c1:ba:8e:73:ca:d8:eb:cd:b2:6e: 83:bf:83:d2:ae:07:1a:4a:5a:97:5f:b7:c2:1d:61:ab:a4:f8: 97:d4:45:47:88:2b:7e:7d:39:6a:c1:ce:0f:4e:99:0c:d2:1f: 0c:86:b3:00 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQz NEQ1OTgxRDdCNkEwMDEyN0I5RjI2ODc0OEE0RTEyMzNFMTM4RjAeFw0yNTAxMTcw MTI2MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdDQTIxNjVDRjM1NDY0 OEFFQzQ5NTUyOEZGRTUwNjUxRTY1MDMyNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDLMNQRW3QcEEJgb8d1oexw68TcM66ef9LB/ldcmV5b5Kp4fHE JVzKDqLcRc04EypR0nqU/j2hy81A5MXesrxqV/ZAP/76IF5vD8KJOLI2wWqJskQi 4zqeH6s83TyQcZ6tecuDP1lFqcKCFIn0amPpVyLqoOxc1Q6i3SMyWskXwIu0iorh FYnRkbUvXN4qF5Ya5Zek3UxCe3Q8z/VmemhHQV9NrQyrfXRLDfh4D+TQxuyC8i6d qmA4dwg8XB3v3zakKIWd0fk6rw8zRzthAgWIxpiJzHwR4fxhUvXOKPKTgOs2HryA 6DG77j2//dsmdFDv1u5/nZSLgzJHDgbd9lhXAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUfKIWXPNUZIrsSVUo/+UGUeZQMl4wHwYDVR0jBBgwFoAUjTTVmB17agASe58m h0ik4SM+E48wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 MC9qVFRWbUIxN2FnQVNlNThtaDBpazRTTS1FNDguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pUVFZtQjE3YWdBU2U1OG1oMGlrNFNNLUU0OC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTAvZktJV1hQTlVaSXJz U1ZVb18tVUdVZVpRTWw0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEASQy4jANBgkqhkiG9w0BAQsFAAOCAQEAUgtElMcMUdzEt1dZdmxcNdIIMBv8 7Ilo55LhKKvmEKvrPLxxS5uF1y/2+KRxSglBq8J2t7yaQY03ONensvvtZ5n4y3N2 /x9CWamR91y1fOSako0kcOQBahJ+EJa9eP1myX7wVzQ5MzWjdB2ELPboeDoQvu4G 0ojzI/w886KItvRqqNgHWPriUVyn4yP++VqLHY5LkuZuiCTqQTMiH07/6pf3Sixp Bv0W4TuXTJqtaHIRw0SrXSmfP4vm+GkRAn68bt9AfjUcnYeP16hL9GrBuo5zytjr zbJug7+D0q4HGkpal1+3wh1hq6T4l9RFR4grfn05asHOD06ZDNIfDIazAA== -----END CERTIFICATE-----Generated at Fri Apr 4 18:49:01 2025 by rpki-client