$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/cMsfq1to-m5_Ihf5zGl8vtnR22s.roa File: cMsfq1to-m5_Ihf5zGl8vtnR22s.roa (raw, json) Hash identifier: 7Knm+/4qGVqXxt49fu6q2R3t+sxtZVZJ0XYX7k14wGg= Subject key identifier: 70:CB:1F:AB:5B:68:FA:6E:7F:22:17:F9:CC:69:7C:BE:D9:D1:DB:6B Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Certificate serial: 06F0 Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/cMsfq1to-m5_Ihf5zGl8vtnR22s.roa Signing time: Fri 21 Mar 2025 03:28:20 +0000 ROA not before: Fri 21 Mar 2025 03:28:20 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 211392 IP address blocks: 157.66.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1776 (0x6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Validity Not Before: Mar 21 03:28:20 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=70CB1FAB5B68FA6E7F2217F9CC697CBED9D1DB6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0a:2c:15:c1:1c:cf:00:48:9b:a1:25:e1:73: 4a:2b:9e:07:9c:2d:13:09:ac:eb:72:c0:0c:2d:96: a4:7c:d1:03:09:0d:fe:f2:cb:60:91:c1:c3:ed:c5: 41:66:d4:dd:24:a5:66:ec:9e:c8:dc:c9:03:80:68: a6:a3:bf:26:e6:58:92:b9:2e:7f:37:c5:95:43:d9: ad:4f:25:5b:db:83:99:ed:e4:62:dc:b5:d0:0a:2a: 77:11:4b:82:94:33:1f:b9:66:d2:df:c1:b9:4a:0d: a3:6b:ab:24:2e:52:aa:3e:63:ba:70:94:eb:a8:b3: 80:89:5a:3f:aa:06:54:0f:ca:04:48:93:0a:bb:05: 2d:2f:b2:54:ec:86:13:e2:48:3b:71:2e:8e:cc:7d: 73:16:8f:e8:47:3a:cf:59:fd:59:ec:b9:87:f8:41: de:94:0b:33:dc:1c:0c:4c:76:c9:96:06:64:4a:b6: 52:79:c8:1b:7b:df:19:f9:f2:4f:a5:47:e5:90:5f: 7b:66:ee:c7:98:5c:70:96:87:16:d8:7d:45:0c:0a: 6c:d4:c6:eb:3e:08:a2:4a:50:f7:a6:21:96:72:d0: e1:fe:c0:ad:15:79:5c:b5:db:73:29:65:7e:53:4f: fe:0d:e5:9e:8c:8b:31:aa:1f:87:1b:9f:3d:b6:66: 23:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:1F:AB:5B:68:FA:6E:7F:22:17:F9:CC:69:7C:BE:D9:D1:DB:6B X509v3 Authority Key Identifier: keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/cMsfq1to-m5_Ihf5zGl8vtnR22s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 64:85:78:60:37:8a:c5:55:cb:c3:a8:11:51:01:cc:f1:df:38: 69:c8:b5:4b:22:7c:72:22:e0:70:f0:f3:0f:ad:53:76:4c:3b: eb:65:b1:d5:22:38:85:21:14:96:1b:a1:30:19:cf:fc:84:f7: cd:00:32:73:50:23:51:c9:93:40:f0:d9:d1:09:bd:49:d4:78: 16:0c:4d:fe:d1:20:73:f1:51:20:27:92:30:0e:08:3f:f0:6c: de:b8:e4:17:03:bc:09:e7:60:ad:8a:66:dd:69:a2:64:7e:5a: 16:9f:d1:49:20:fa:29:af:ae:21:df:76:58:0e:61:b7:47:8d: a5:3d:eb:0f:15:61:e4:c5:1c:c9:ac:60:75:2a:90:0a:c8:4a: d5:3d:2a:3f:05:09:99:a5:8f:c7:c2:82:72:8d:a5:a5:bc:9d: bc:5c:6b:4f:87:ab:4e:73:04:d2:7d:a1:9c:b7:51:96:6f:7e: 93:9a:09:9c:12:7b:20:90:ec:98:4a:7c:7e:b6:29:d2:f1:52: d0:9b:ed:08:dd:12:5d:42:23:f3:2a:1a:6c:39:38:f6:e0:3f: a2:f5:ca:91:b4:c7:e6:13:dc:8e:93:b3:11:12:8c:5d:1a:dd: 94:e0:6d:aa:7c:1b:d7:92:76:0b:2a:c2:11:e6:de:86:48:51: 90:ca:46:6f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQz NDFFODQxQzE4Mzc3N0Y4RjkxREY0RkNEQTBCQjlFRkEwNjFCRjAeFw0yNTAzMjEw MzI4MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcwQ0IxRkFCNUI2OEZB NkU3RjIyMTdGOUNDNjk3Q0JFRDlEMURCNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmCiwVwRzPAEiboSXhc0orngecLRMJrOtywAwtlqR80QMJDf7y y2CRwcPtxUFm1N0kpWbsnsjcyQOAaKajvybmWJK5Ln83xZVD2a1PJVvbg5nt5GLc tdAKKncRS4KUMx+5ZtLfwblKDaNrqyQuUqo+Y7pwlOuos4CJWj+qBlQPygRIkwq7 BS0vslTshhPiSDtxLo7MfXMWj+hHOs9Z/VnsuYf4Qd6UCzPcHAxMdsmWBmRKtlJ5 yBt73xn58k+lR+WQX3tm7seYXHCWhxbYfUUMCmzUxus+CKJKUPemIZZy0OH+wK0V eVy123MpZX5TT/4N5Z6MizGqH4cbnz22ZiNnAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUcMsfq1to+m5/Ihf5zGl8vtnR22swHwYDVR0jBBgwFoAU/TQehBwYN3f4+R30 /NoLue+gYb8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Mi9fVFFlaEJ3WU4zZjQtUjMwX05vTHVlLWdZYjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19UUWVoQndZTjNmNC1SMzBfTm9MdWUtZ1liOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvY01zZnExdG8tbTVf SWhmNXpHbDh2dG5SMjJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEAZIV4YDeKxVXLw6gRUQHM8d84aci1 SyJ8ciLgcPDzD61Tdkw762Wx1SI4hSEUlhuhMBnP/IT3zQAyc1AjUcmTQPDZ0Qm9 SdR4FgxN/tEgc/FRICeSMA4IP/Bs3rjkFwO8CedgrYpm3WmiZH5aFp/RSSD6Ka+u Id92WA5ht0eNpT3rDxVh5MUcyaxgdSqQCshK1T0qPwUJmaWPx8KCco2lpbydvFxr T4erTnME0n2hnLdRlm9+k5oJnBJ7IJDsmEp8frYp0vFS0JvtCN0SXUIj8yoabDk4 9uA/ovXKkbTH5hPcjpOzERKMXRrdlOBtqnwb15J2CyrCEebehkhRkMpGbw== -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:16 2025 by rpki-client