$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa File: UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa (raw, json) Hash identifier: V5G86OkSnvQncc1PKTMDc9Ostp8wBa38yMq72QsXRvs= Subject key identifier: 51:E5:8C:B5:D2:6F:36:53:A1:62:60:86:ED:AE:A7:64:1B:D1:75:46 Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 14B8 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa Signing time: Fri 17 Jan 2025 01:27:24 +0000 ROA not before: Fri 17 Jan 2025 01:27:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 37963 IP address blocks: 112.127.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5304 (0x14b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jan 17 01:27:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=51E58CB5D26F3653A1626086EDAEA7641BD17546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:8d:7e:da:41:a4:d6:25:06:0a:52:ed:76: 16:a5:c5:ab:58:42:1a:e0:a2:19:cb:32:93:bc:10: 2a:0d:90:58:77:8e:1b:d2:d4:0e:0f:05:f6:81:61: d5:d0:02:03:c4:c4:56:1b:79:65:74:ae:2b:8e:82: 8b:8a:fc:0c:8b:f2:3b:78:c7:f4:2b:81:96:88:f9: 06:77:bc:71:9e:43:28:a9:92:61:76:7c:92:1e:4b: b0:aa:d8:c4:72:11:3f:7b:d8:0c:c1:8a:e0:84:4d: 85:eb:c2:01:3e:16:21:2c:d2:45:aa:a5:3b:07:6d: b7:13:6f:48:1e:04:b6:9a:7d:ba:90:e0:0a:2c:e8: 05:47:f3:b4:4b:10:98:40:3b:fb:ed:82:94:d4:39: 88:17:f9:ad:32:c2:65:cc:19:8c:ea:bc:c2:2b:16: af:1a:11:18:a3:50:17:36:66:4d:fa:5f:39:41:0b: e8:f2:15:28:0c:16:e3:9c:6a:99:af:82:11:a1:85: 03:29:64:00:9c:f8:2a:b2:6a:ae:c2:0d:ff:70:ed: 1b:93:ac:20:ce:52:3f:74:d3:f0:3e:c1:ad:96:bc: b2:dc:68:fc:c3:6d:ec:d3:a9:4b:39:8b:9d:70:a6: d4:4d:70:1c:f3:61:b6:73:69:69:1b:13:80:f6:c7: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E5:8C:B5:D2:6F:36:53:A1:62:60:86:ED:AE:A7:64:1B:D1:75:46 X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/UeWMtdJvNlOhYmCG7a6nZBvRdUY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.127.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:c2:d7:f8:42:c5:5c:7a:85:bc:fd:cd:92:fd:d9:f0:0e:21: aa:a8:a5:34:4c:97:32:7c:54:b1:31:20:fc:a6:3c:d2:f4:65: 03:eb:9d:ae:36:85:3d:2f:79:a6:c2:97:81:84:6a:05:60:b0: 3c:8a:28:d2:d2:8f:ad:41:38:75:08:09:de:58:78:03:ca:61: d5:72:dd:6e:40:21:46:d5:cc:fb:ec:78:2a:22:06:9d:ae:36: 59:6c:c6:33:7f:e5:ca:49:60:b2:57:e7:61:61:61:c0:eb:63: fb:1b:40:79:bb:42:ce:02:2e:31:5c:36:e6:f7:46:8d:32:86: 8f:7b:da:b8:de:c4:0e:3e:13:ee:c1:10:34:09:47:fe:f9:5e: fa:c2:f6:6c:c9:55:05:0a:12:96:16:40:ec:16:5e:99:63:45: 8a:67:32:18:2a:5d:f7:2a:a2:db:19:cc:9a:da:0d:25:6c:db: bd:de:2a:e9:54:32:1a:e4:db:4e:38:e0:6a:31:ce:f0:c6:dc: 68:2d:55:7b:50:02:8f:5a:5b:73:5d:b6:1b:49:9f:f6:06:ef: ec:35:bf:61:15:4a:7b:a2:e5:d1:4a:60:74:43:fc:b4:62:c0: 10:98:3a:ad:83:ef:41:d4:5c:cb:58:1e:ce:5a:52:98:b0:07: cc:ce:0d:72 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTAxMTcw MTI3MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUxRTU4Q0I1RDI2RjM2 NTNBMTYyNjA4NkVEQUVBNzY0MUJEMTc1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAyI1+2kGk1iUGClLtdhalxatYQhrgohnLMpO8ECoNkFh3jhvS 1A4PBfaBYdXQAgPExFYbeWV0riuOgouK/AyL8jt4x/QrgZaI+QZ3vHGeQyipkmF2 fJIeS7Cq2MRyET972AzBiuCETYXrwgE+FiEs0kWqpTsHbbcTb0geBLaafbqQ4Aos 6AVH87RLEJhAO/vtgpTUOYgX+a0ywmXMGYzqvMIrFq8aERijUBc2Zk36XzlBC+jy FSgMFuOcapmvghGhhQMpZACc+Cqyaq7CDf9w7RuTrCDOUj900/A+wa2WvLLcaPzD bezTqUs5i51wptRNcBzzYbZzaWkbE4D2xzvFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUUeWMtdJvNlOhYmCG7a6nZBvRdUYwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L1VlV010ZEp2TmxPaFlt Q0c3YTZuWkJ2UmRVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBwfzANBgkqhkiG9w0BAQsFAAOCAQEAicLX+ELFXHqFvP3Nkv3Z8A4hqqilNEyX MnxUsTEg/KY80vRlA+udrjaFPS95psKXgYRqBWCwPIoo0tKPrUE4dQgJ3lh4A8ph 1XLdbkAhRtXM++x4KiIGna42WWzGM3/lyklgslfnYWFhwOtj+xtAebtCzgIuMVw2 5vdGjTKGj3vauN7EDj4T7sEQNAlH/vle+sL2bMlVBQoSlhZA7BZemWNFimcyGCpd 9yqi2xnMmtoNJWzbvd4q6VQyGuTbTjjgajHO8MbcaC1Ve1ACj1pbc122G0mf9gbv 7DW/YRVKe6Ll0UpgdEP8tGLAEJg6rYPvQdRcy1gezlpSmLAHzM4Ncg== -----END CERTIFICATE-----Generated at Fri Apr 4 18:40:27 2025 by rpki-client