$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/vVR5aS5AnNvHUf4Jru9wF_fAb-4.roa File: vVR5aS5AnNvHUf4Jru9wF_fAb-4.roa (raw, json) Hash identifier: by6p27DFsa5GI6/yaqpWcxX+prir+EPnGatBDOeFKR8= Subject key identifier: BD:54:79:69:2E:40:9C:DB:C7:51:FE:09:AE:EF:70:17:F7:C0:6F:EE Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Certificate serial: 06F2 Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/vVR5aS5AnNvHUf4Jru9wF_fAb-4.roa Signing time: Fri 21 Mar 2025 03:28:21 +0000 ROA not before: Fri 21 Mar 2025 03:28:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 209242 IP address blocks: 157.66.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF Validity Not Before: Mar 21 03:28:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BD5479692E409CDBC751FE09AEEF7017F7C06FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:6d:3e:68:72:ad:42:ac:90:a8:5c:d1:9c: 21:1a:5d:aa:3e:5d:a9:b0:74:5c:45:75:07:11:75: e9:cf:f4:8d:15:62:ed:8b:80:94:d8:27:b6:51:7c: 89:b2:e4:af:f3:27:25:d4:c5:d7:bf:cd:c7:07:c4: 05:87:73:45:62:28:8f:23:51:4d:43:79:1f:a5:43: 8f:72:04:18:4d:f7:1d:22:43:fa:76:09:20:65:5e: ee:ee:33:d2:7e:5f:88:57:36:0e:e4:85:3c:d6:dd: 32:ce:d6:d5:0a:d2:03:a3:35:c0:a6:88:57:d8:e3: 5e:08:db:27:f2:c9:e0:88:b1:2f:05:93:37:27:85: 0b:d8:1f:48:b4:8e:54:26:e7:c0:7e:b9:48:a4:7e: a7:a4:61:c1:42:e9:a6:8e:d6:a5:ce:de:32:61:11: e1:f4:c8:19:74:3b:8c:9c:be:90:74:0c:3c:68:66: 56:3c:24:e5:2b:a3:86:5b:2b:86:57:86:ff:b5:92: fd:75:b2:7d:68:fc:19:22:f3:d0:f8:bd:88:7e:db: eb:20:79:e4:42:6a:4f:96:a6:1e:85:66:06:ed:61: a1:99:64:13:0b:91:49:d0:23:c9:2a:45:5d:cf:dd: b3:4e:ba:80:a4:83:ed:91:6a:60:52:be:3c:d9:6e: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:54:79:69:2E:40:9C:DB:C7:51:FE:09:AE:EF:70:17:F7:C0:6F:EE X509v3 Authority Key Identifier: keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/vVR5aS5AnNvHUf4Jru9wF_fAb-4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:a6:fa:84:a2:29:95:29:ab:e5:42:85:78:bd:26:07:dd:26: 98:c3:a9:1e:18:28:1f:d4:da:11:f7:76:e2:95:fa:36:9f:cd: 44:7b:1e:2c:44:a6:3a:fd:23:89:f0:68:f6:de:24:11:e7:ab: 69:d1:32:aa:33:20:f3:7f:92:f2:90:f0:59:3f:27:45:9d:bc: 74:b9:d6:e1:cb:bd:33:f9:e5:1d:b1:b9:56:7b:e1:95:3f:53: 7c:9c:07:04:48:77:86:f8:36:21:40:2a:ce:7c:cc:47:5c:5a: cd:d8:aa:78:60:f6:ef:19:3c:76:68:8e:d9:69:f3:8f:78:94: 46:83:2f:3a:b2:8c:1d:a9:3f:80:c0:c5:9a:93:62:65:9a:a3: 1b:dc:cc:bb:8f:4d:2f:e4:85:3f:4c:f1:7d:d9:ec:42:67:c2: 69:ef:47:62:7a:d0:6d:62:7f:27:8a:9e:01:a8:b5:61:d0:73: 0c:d0:56:d6:e5:b7:f8:53:97:4d:73:3c:b6:6a:fa:6e:44:9d: 60:80:7a:bf:d8:53:2a:51:31:02:47:bd:95:b0:24:0c:1a:f2: e0:f0:fc:4f:db:99:3a:21:fe:ac:7e:21:29:7d:0d:f7:4d:8e: 71:09:04:65:65:de:31:5d:15:ee:6c:ff:ee:ba:13:1d:82:95: 89:54:72:e4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQz NDFFODQxQzE4Mzc3N0Y4RjkxREY0RkNEQTBCQjlFRkEwNjFCRjAeFw0yNTAzMjEw MzI4MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJENTQ3OTY5MkU0MDlD REJDNzUxRkUwOUFFRUY3MDE3RjdDMDZGRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJnG0+aHKtQqyQqFzRnCEaXao+XamwdFxFdQcRdenP9I0VYu2L gJTYJ7ZRfImy5K/zJyXUxde/zccHxAWHc0ViKI8jUU1DeR+lQ49yBBhN9x0iQ/p2 CSBlXu7uM9J+X4hXNg7khTzW3TLO1tUK0gOjNcCmiFfY414I2yfyyeCIsS8Fkzcn hQvYH0i0jlQm58B+uUikfqekYcFC6aaO1qXO3jJhEeH0yBl0O4ycvpB0DDxoZlY8 JOUro4ZbK4ZXhv+1kv11sn1o/Bki89D4vYh+2+sgeeRCak+Wph6FZgbtYaGZZBML kUnQI8kqRV3P3bNOuoCkg+2RamBSvjzZbixLAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUvVR5aS5AnNvHUf4Jru9wF/fAb+4wHwYDVR0jBBgwFoAU/TQehBwYN3f4+R30 /NoLue+gYb8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 Mi9fVFFlaEJ3WU4zZjQtUjMwX05vTHVlLWdZYjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL19UUWVoQndZTjNmNC1SMzBfTm9MdWUtZ1liOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvdlZSNWFTNUFuTnZI VWY0SnJ1OXdGX2ZBYi00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEAjKb6hKIplSmr5UKFeL0mB90mmMOp HhgoH9TaEfd24pX6Np/NRHseLESmOv0jifBo9t4kEeeradEyqjMg83+S8pDwWT8n RZ28dLnW4cu9M/nlHbG5VnvhlT9TfJwHBEh3hvg2IUAqznzMR1xazdiqeGD27xk8 dmiO2Wnzj3iURoMvOrKMHak/gMDFmpNiZZqjG9zMu49NL+SFP0zxfdnsQmfCae9H YnrQbWJ/J4qeAai1YdBzDNBW1uW3+FOXTXM8tmr6bkSdYIB6v9hTKlExAke9lbAk DBry4PD8T9uZOiH+rH4hKX0N902OcQkEZWXeMV0V7mz/7roTHYKViVRy5A== -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:55 2025 by rpki-client