$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/v66eWKmcsL08qHt8VFFmXhezF_o.roa File: v66eWKmcsL08qHt8VFFmXhezF_o.roa (raw, json) Hash identifier: hFdtONRx1QXaVv8Tsj/YtyQXsPu9pqoTJeeGy3EXCYU= Subject key identifier: BF:AE:9E:58:A9:9C:B0:BD:3C:A8:7B:7C:54:51:66:5E:17:B3:17:FA Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 14B9 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/v66eWKmcsL08qHt8VFFmXhezF_o.roa Signing time: Fri 17 Jan 2025 01:27:24 +0000 ROA not before: Fri 17 Jan 2025 01:27:24 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 37963 IP address blocks: 112.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5305 (0x14b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jan 17 01:27:24 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BFAE9E58A99CB0BD3CA87B7C5451665E17B317FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:38:e4:d3:b9:4d:7e:35:c6:d4:85:2f:ab: 76:17:7f:ba:46:32:84:44:8d:3d:6e:43:3c:83:c5: 7b:0b:9d:8f:ca:be:f0:f2:89:a8:33:63:ef:ae:d6: 76:69:52:13:42:4a:7a:04:34:ee:a8:15:c8:06:bc: 71:cb:81:a7:3c:88:39:f8:24:e7:47:66:ec:1c:66: 6b:25:38:03:09:dc:d6:0d:63:d5:29:87:8d:dd:85: 7d:1c:04:3d:d6:89:00:7e:e7:63:da:be:67:9a:50: a7:4d:be:c2:a7:ad:86:d5:77:5e:f0:99:fa:0e:00: 54:12:8b:be:08:84:24:68:db:4d:f3:65:99:c2:dc: 1e:a1:ac:2c:48:7f:36:b6:05:43:c1:58:59:43:45: c2:75:3e:06:d5:f5:84:da:42:4d:05:ac:ea:fe:db: 3e:20:ca:44:de:fa:3f:d9:17:6a:55:5c:46:4b:7f: 23:09:0a:cc:6b:9a:54:b5:0a:fa:77:7c:8b:b7:6d: 89:e9:1a:b5:37:88:95:35:64:2a:43:21:5f:93:7f: a6:8e:f1:f8:1a:b7:f2:e7:3e:9d:84:d9:09:a9:ad: c4:2c:0e:ce:76:de:50:8e:d3:f7:26:76:88:a3:6e: 70:8c:6c:8a:eb:1c:38:11:a9:da:1a:a7:a9:a3:4f: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AE:9E:58:A9:9C:B0:BD:3C:A8:7B:7C:54:51:66:5E:17:B3:17:FA X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/v66eWKmcsL08qHt8VFFmXhezF_o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:70:ba:2c:c3:e9:c8:5a:8e:4e:3b:77:c1:0d:cc:d4:cf:da: 16:b2:7c:e8:9c:33:2e:12:fd:0d:a7:df:a1:14:61:be:53:68: 37:ac:92:68:2d:56:5d:eb:45:0d:bf:e4:b4:4b:f5:4f:9e:8a: 56:c8:ff:98:7d:62:cf:0b:50:02:e2:02:79:47:33:f9:2c:a7: 9a:cf:7b:50:e2:73:c0:1d:20:f6:82:fb:9c:3a:d5:fc:28:90: f5:1a:e2:bf:20:57:9a:c0:16:cd:ec:5f:b3:c5:63:a2:70:3c: c2:35:d6:c2:08:09:aa:6f:8c:f0:72:e5:4c:eb:a9:01:8c:cd: be:e5:9b:4f:eb:4c:e5:c5:9f:63:64:cf:5f:4e:7b:84:53:23: 1d:3c:a2:38:da:c8:ab:84:42:67:39:4d:8a:87:0c:bf:1d:2e: 8d:04:58:40:44:99:46:d7:5c:7f:47:9d:0f:a4:2c:a1:9b:c4: 23:aa:40:8d:f6:a3:a7:2e:ff:59:27:87:17:b7:54:7d:75:b7: fd:fb:8d:1a:8f:20:59:53:48:52:64:14:10:6e:e9:fc:39:58: c1:48:45:b5:e7:d2:83:ff:20:b2:86:e6:08:8d:2c:49:3b:39: c6:46:9b:ec:bd:bd:7f:8d:64:77:4c:a5:94:99:67:5d:b6:37: 36:6d:69:74 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTAxMTcw MTI3MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJGQUU5RTU4QTk5Q0Iw QkQzQ0E4N0I3QzU0NTE2NjVFMTdCMzE3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQzDjk07lNfjXG1IUvq3YXf7pGMoREjT1uQzyDxXsLnY/KvvDy iagzY++u1nZpUhNCSnoENO6oFcgGvHHLgac8iDn4JOdHZuwcZmslOAMJ3NYNY9Up h43dhX0cBD3WiQB+52PavmeaUKdNvsKnrYbVd17wmfoOAFQSi74IhCRo203zZZnC 3B6hrCxIfza2BUPBWFlDRcJ1PgbV9YTaQk0FrOr+2z4gykTe+j/ZF2pVXEZLfyMJ CsxrmlS1Cvp3fIu3bYnpGrU3iJU1ZCpDIV+Tf6aO8fgat/LnPp2E2QmprcQsDs52 3lCO0/cmdoijbnCMbIrrHDgRqdoap6mjT39/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUv66eWKmcsL08qHt8VFFmXhezF/owHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3Y2NmVXS21jc0wwOHFI dDhWRkZtWGhlekZfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBwfjANBgkqhkiG9w0BAQsFAAOCAQEAXHC6LMPpyFqOTjt3wQ3M1M/aFrJ86Jwz LhL9DaffoRRhvlNoN6ySaC1WXetFDb/ktEv1T56KVsj/mH1izwtQAuICeUcz+Syn ms97UOJzwB0g9oL7nDrV/CiQ9RrivyBXmsAWzexfs8VjonA8wjXWwggJqm+M8HLl TOupAYzNvuWbT+tM5cWfY2TPX057hFMjHTyiONrIq4RCZzlNiocMvx0ujQRYQESZ Rtdcf0edD6QsoZvEI6pAjfajpy7/WSeHF7dUfXW3/fuNGo8gWVNIUmQUEG7p/DlY wUhFtefSg/8gsobmCI0sSTs5xkab7L29f41kd0yllJlnXbY3Nm1pdA== -----END CERTIFICATE-----Generated at Fri Jun 6 17:27:39 2025 by rpki-client