$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/24xLyjMy4LfsbGRkTTHxHGsVz_w.roa File: 24xLyjMy4LfsbGRkTTHxHGsVz_w.roa (raw, json) Hash identifier: tfWKWLl4aEdktmWd3AIGERKp6UsWq246tht5mEUzF4I= Subject key identifier: DB:8C:4B:CA:33:32:E0:B7:EC:6C:64:64:4D:31:F1:1C:6B:15:CF:FC Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 0FB3 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/24xLyjMy4LfsbGRkTTHxHGsVz_w.roa Signing time: Fri 17 Jan 2025 01:27:53 +0000 ROA not before: Fri 17 Jan 2025 01:27:53 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 119.59.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4019 (0xfb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Jan 17 01:27:53 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=DB8C4BCA3332E0B7EC6C64644D31F11C6B15CFFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:7c:99:a6:57:5d:e7:70:10:8c:8d:a4:73: 6d:33:67:e8:fb:4f:1b:bd:9a:5d:33:b0:f8:fb:40: 71:9e:b2:6b:29:61:cc:ad:32:e1:16:29:9f:49:10: 98:9d:63:32:97:76:3b:9a:6c:6b:c9:fb:9c:f3:72: 87:90:96:cb:36:5c:8f:87:d5:a2:8d:9f:bd:98:75: f1:a2:41:43:fd:05:fa:39:48:97:a4:93:7d:73:db: cd:e2:70:a3:1d:95:09:7e:28:2f:c1:29:09:56:31: 0f:40:0b:44:ef:8e:2a:11:21:25:2c:27:85:cd:1f: 9b:56:0f:a9:5a:22:a4:e5:db:67:4e:13:23:b5:6b: 4e:bc:43:20:ff:d9:ad:a4:d3:e2:4f:5e:e5:7d:75: e5:52:75:b3:84:74:dd:38:0e:b9:ba:a9:3d:25:49: e7:47:50:a8:c1:ae:1c:8d:ad:87:bf:2d:33:6a:9f: 5e:d5:5d:0a:af:d9:e4:f2:e0:46:31:cd:55:b8:10: d5:0d:8d:6f:34:ed:db:20:2b:7b:c9:59:06:bb:8c: 4b:b0:2d:82:e8:2f:48:93:e3:50:60:3d:6a:62:f6: 6d:5d:b9:62:83:74:a3:98:e7:fa:b2:dc:d9:6b:f8: 57:80:7b:f9:96:83:3c:2f:0d:e2:83:d8:10:05:ca: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8C:4B:CA:33:32:E0:B7:EC:6C:64:64:4D:31:F1:1C:6B:15:CF:FC X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/24xLyjMy4LfsbGRkTTHxHGsVz_w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.59.212.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:b1:72:67:84:9a:0d:57:ab:30:7e:a2:2b:e8:9d:1a:d9:56: 4a:dd:97:fb:23:67:17:ed:f8:e9:8f:f6:a5:30:34:26:d3:59: c5:e7:32:d4:5c:c8:86:8f:41:03:37:3e:82:e4:e0:a7:25:3b: 89:b6:6c:b6:9c:39:b7:59:b0:5c:fe:51:58:88:33:19:ba:df: 9e:a2:f7:c9:5f:16:2c:df:b9:90:ca:61:e3:4e:be:9e:bf:76: eb:90:1e:a8:b6:7a:10:c0:0b:f1:56:80:e8:01:f1:3c:2d:a7: 13:eb:0f:f8:a6:47:58:88:a5:89:1d:bf:92:1c:42:14:1e:ff: 9d:19:e9:f3:83:f3:13:d8:bf:b3:3d:5a:e3:73:21:c2:af:e8: 19:66:b5:02:7b:16:8d:d0:6d:62:79:c1:59:ed:97:8c:4d:5f: 47:eb:d1:1f:85:39:5d:f0:3a:4b:44:dc:c5:91:b2:eb:48:20: ac:14:03:6d:c3:d0:e0:7a:05:61:4e:db:43:af:c5:e0:49:36: 48:96:ab:dc:f4:9d:74:0e:14:3d:15:8a:f6:c1:2d:92:77:58: d3:d3:4b:03:98:90:ed:73:3f:0e:1b:d6:de:20:f3:39:65:96: 65:ef:93:13:ab:31:62:5c:7b:fc:f8:db:18:fe:3b:58:17:bc: b8:63:a1:33 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTcw MTI3NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERCOEM0QkNBMzMzMkUw QjdFQzZDNjQ2NDREMzFGMTFDNkIxNUNGRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRyHyZpldd53AQjI2kc20zZ+j7Txu9ml0zsPj7QHGesmspYcyt MuEWKZ9JEJidYzKXdjuabGvJ+5zzcoeQlss2XI+H1aKNn72YdfGiQUP9Bfo5SJek k31z283icKMdlQl+KC/BKQlWMQ9AC0TvjioRISUsJ4XNH5tWD6laIqTl22dOEyO1 a068QyD/2a2k0+JPXuV9deVSdbOEdN04Drm6qT0lSedHUKjBrhyNrYe/LTNqn17V XQqv2eTy4EYxzVW4ENUNjW807dsgK3vJWQa7jEuwLYLoL0iT41BgPWpi9m1duWKD dKOY5/qy3Nlr+FeAe/mWgzwvDeKD2BAFyuuNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU24xLyjMy4LfsbGRkTTHxHGsVz/wwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzLzI0eEx5ak15NExmc2JH UmtUVEh4SEdzVnpfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ3O9QwDQYJKoZIhvcNAQELBQADggEBAI2xcmeEmg1XqzB+oivonRrZVkrdl/sj Zxft+OmP9qUwNCbTWcXnMtRcyIaPQQM3PoLk4KclO4m2bLacObdZsFz+UViIMxm6 356i98lfFizfuZDKYeNOvp6/duuQHqi2ehDAC/FWgOgB8TwtpxPrD/imR1iIpYkd v5IcQhQe/50Z6fOD8xPYv7M9WuNzIcKv6BlmtQJ7Fo3QbWJ5wVntl4xNX0fr0R+F OV3wOktE3MWRsutIIKwUA23D0OB6BWFO20OvxeBJNkiWq9z0nXQOFD0VivbBLZJ3 WNPTSwOYkO1zPw4b1t4g8zlllmXvkxOrMWJce/z42xj+O1gXvLhjoTM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:37 2025 by rpki-client