$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/jb9ozNwrt5qh-23ROv_NlluXhaY.roa File: jb9ozNwrt5qh-23ROv_NlluXhaY.roa (raw, json) Hash identifier: 7oVRvty5bE6QQ2ipOZC0RC4HGKH4v0k14iGkp2mlC2s= Subject key identifier: 8D:BF:68:CC:DC:2B:B7:9A:A1:FB:6D:D1:3A:FF:CD:96:5B:97:85:A6 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 1077 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jb9ozNwrt5qh-23ROv_NlluXhaY.roa Signing time: Thu 20 Feb 2025 05:07:06 +0000 ROA not before: Thu 20 Feb 2025 05:07:06 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 101.232.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4215 (0x1077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Feb 20 05:07:06 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8DBF68CCDC2BB79AA1FB6DD13AFFCD965B9785A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:a5:45:7c:e1:15:89:6a:77:08:cc:1b:93: d9:2b:db:cb:30:ba:5e:03:57:6d:41:4c:da:fe:21: d8:25:3e:60:f5:05:25:60:0d:f8:7d:c6:d7:94:7a: 06:60:f0:70:01:ce:e6:29:37:ca:49:c9:80:68:72: 96:07:b2:61:ce:1a:85:4d:59:e2:09:46:5a:7b:2b: 8e:1c:41:f5:d6:ed:8c:38:7a:a7:c6:b5:41:ad:68: 78:6c:cc:ba:d5:d1:e0:f8:0c:e6:91:04:81:f5:04: 6b:0a:fe:4a:f2:65:e3:b1:bc:01:90:23:92:76:75: 7f:84:33:60:a7:ba:fe:46:86:13:82:4b:3c:9c:2b: 47:49:df:f4:61:e0:d2:11:f1:d8:84:f1:8d:ab:57: f1:af:b2:dd:e4:cf:06:40:dc:98:7c:90:be:51:48: ac:3c:df:4e:69:e3:c4:2e:98:47:55:cb:48:70:74: b2:57:ed:d1:e3:ce:de:27:9b:68:10:65:8f:91:1a: 6f:0a:5d:a1:9a:b5:2d:90:50:a3:f4:e5:b2:f6:e2: d1:a1:4c:5e:bb:d9:8d:ef:db:d4:89:de:e4:de:bb: 42:a7:d2:dd:e8:ef:d0:dc:a0:f0:f7:19:f8:cf:66: 4b:8d:dd:69:6b:68:9f:e7:20:f8:03:f6:8e:c1:3b: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BF:68:CC:DC:2B:B7:9A:A1:FB:6D:D1:3A:FF:CD:96:5B:97:85:A6 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jb9ozNwrt5qh-23ROv_NlluXhaY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.232.44.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:c4:82:9a:22:83:e1:7c:91:84:74:8f:e8:3c:2f:92:c3:b4: b3:30:c0:3f:37:7a:78:95:dc:60:0e:4d:e1:a8:13:9d:85:11: 63:af:0e:87:9b:5e:f6:4f:b4:e4:2b:d9:a2:d0:4e:ef:70:e2: 4e:73:6f:e9:83:ad:71:e9:0e:a8:8f:fd:3f:19:26:31:84:41: c2:dd:94:82:f8:73:98:97:48:d0:0f:54:fe:95:6c:2e:e0:44: 49:4c:1d:e4:99:cd:e1:5d:f6:f5:44:98:85:40:77:ed:bc:f3: 40:19:1d:9b:75:d3:31:dc:74:da:b6:dc:a2:4f:8b:6e:9a:fa: 91:27:d2:bf:59:21:c7:ec:fa:c6:bd:4b:25:0a:0c:c4:eb:d6: c3:9e:bd:28:02:32:e2:c4:6a:b8:32:cf:16:dd:71:6d:5f:e2: c1:7a:2d:d3:b8:ec:b9:78:0e:03:bf:b0:e5:63:8f:3b:77:34: 72:e2:e0:63:fc:56:17:0b:3c:00:37:74:73:90:22:ee:3f:bc: ee:24:e9:d3:57:e3:c7:b7:7e:07:ee:89:a0:27:a6:71:18:28: e7:58:d2:80:c8:60:fe:73:55:ea:b8:01:68:3b:23:1a:a8:9f: 9d:26:eb:61:9f:5a:11:4d:e2:6c:3b:65:7e:a6:5c:f9:20:9a: 86:01:11:5f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAyMjAw NTA3MDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhEQkY2OENDREMyQkI3 OUFBMUZCNkREMTNBRkZDRDk2NUI5Nzg1QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe+aVFfOEViWp3CMwbk9kr28swul4DV21BTNr+IdglPmD1BSVg Dfh9xteUegZg8HABzuYpN8pJyYBocpYHsmHOGoVNWeIJRlp7K44cQfXW7Yw4eqfG tUGtaHhszLrV0eD4DOaRBIH1BGsK/kryZeOxvAGQI5J2dX+EM2Cnuv5GhhOCSzyc K0dJ3/Rh4NIR8diE8Y2rV/Gvst3kzwZA3Jh8kL5RSKw8305p48QumEdVy0hwdLJX 7dHjzt4nm2gQZY+RGm8KXaGatS2QUKP05bL24tGhTF672Y3v29SJ3uTeu0Kn0t3o 79DcoPD3GfjPZkuN3WlraJ/nIPgD9o7BO76RAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUjb9ozNwrt5qh+23ROv/NlluXhaYwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2piOW96TndydDVxaC0y M1JPdl9ObGx1WGhhWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJl6CwwDQYJKoZIhvcNAQELBQADggEBAI7Egpoig+F8kYR0j+g8L5LDtLMwwD83 eniV3GAOTeGoE52FEWOvDoebXvZPtOQr2aLQTu9w4k5zb+mDrXHpDqiP/T8ZJjGE QcLdlIL4c5iXSNAPVP6VbC7gRElMHeSZzeFd9vVEmIVAd+2880AZHZt10zHcdNq2 3KJPi26a+pEn0r9ZIcfs+sa9SyUKDMTr1sOevSgCMuLEargyzxbdcW1f4sF6LdO4 7Ll4DgO/sOVjjzt3NHLi4GP8VhcLPAA3dHOQIu4/vO4k6dNX48e3fgfuiaAnpnEY KOdY0oDIYP5zVeq4AWg7Ixqon50m62GfWhFN4mw7ZX6mXPkgmoYBEV8= -----END CERTIFICATE-----Generated at Fri Apr 4 18:44:59 2025 by rpki-client