$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/vp207DwZALz4CAztV57KUXEKE9E.roa File: vp207DwZALz4CAztV57KUXEKE9E.roa (raw, json) Hash identifier: HjtHJEj/l2+u4pKHA61w+aJrigKGxIuFyLiBrg1HedY= Subject key identifier: BE:9D:B4:EC:3C:19:00:BC:F8:08:0C:ED:57:9E:CA:51:71:0A:13:D1 Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Certificate serial: 0FB0 Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/vp207DwZALz4CAztV57KUXEKE9E.roa Signing time: Fri 17 Jan 2025 01:27:52 +0000 ROA not before: Fri 17 Jan 2025 01:27:52 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 62387 IP address blocks: 123.98.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4016 (0xfb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA Validity Not Before: Jan 17 01:27:52 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=BE9DB4EC3C1900BCF8080CED579ECA51710A13D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:c3:7a:70:2f:1b:ea:1d:3c:9a:f4:ee:db: cd:bc:3c:02:92:fd:a1:a9:f0:b3:2a:51:6a:d4:76: 54:c8:ff:77:f0:fe:18:3e:5a:7d:f8:76:59:10:f6: 6d:6a:44:2c:1c:ff:6b:2a:b4:be:7f:8a:36:8d:a7: 3a:7f:ff:dd:ce:80:a3:42:38:b6:59:e0:d5:e9:b7: 53:f5:fa:1d:5c:1e:4d:e6:2d:cc:11:ff:4c:92:dc: 5c:03:08:cc:a4:0c:17:e0:2c:60:a9:5f:d2:b5:1e: 79:2f:73:48:be:e5:ca:20:40:63:36:ac:25:b5:cf: 2e:8e:2c:f5:79:aa:d2:a9:72:29:d4:b9:77:fa:b1: 38:dd:7c:d8:88:a4:77:52:b6:1b:ea:84:ec:b3:b3: 96:ee:d9:bd:00:29:b5:13:70:17:1f:31:b9:86:c2: ad:c1:c4:99:50:b5:17:05:98:bf:f5:a6:25:71:02: 12:e8:56:a7:5e:b9:74:ec:f8:1a:82:ab:8b:f0:5a: 8c:3e:90:48:a2:e8:43:6a:15:b1:52:66:bb:b1:de: 0f:a9:e2:ab:2e:f0:6c:aa:ff:a1:2f:43:36:f3:1a: a0:f8:7c:07:fe:de:6e:b4:52:6d:f4:79:d9:e8:30: ea:03:d3:c1:c5:3e:15:8d:1b:40:38:05:c6:79:87: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:B4:EC:3C:19:00:BC:F8:08:0C:ED:57:9E:CA:51:71:0A:13:D1 X509v3 Authority Key Identifier: keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/vp207DwZALz4CAztV57KUXEKE9E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.98.24.0/22 Signature Algorithm: sha256WithRSAEncryption 99:72:56:ca:f7:b2:62:f4:56:c8:78:35:f0:dd:d9:81:59:72: fb:3f:94:64:ec:dd:aa:b2:84:89:0d:4e:74:b8:4e:49:cf:9c: 95:c6:af:cc:f7:66:3d:4e:fd:1b:4d:0d:ba:d5:97:c9:f9:2c: 78:74:de:1c:11:86:da:e2:3b:17:3c:4c:27:12:94:0a:7e:23: 59:70:fa:1f:9e:8d:15:b0:7d:cc:8f:b9:bc:5a:42:b4:70:b0: c5:ef:08:80:42:83:84:a0:a3:6b:0c:db:fe:ab:af:69:9c:77: 80:d3:0d:8c:e2:04:55:db:8c:e7:1f:86:ff:d2:3a:df:a4:2b: 16:08:ab:d2:4d:30:f3:17:45:9a:4b:e1:a9:6e:7b:6e:7a:12: 7a:ed:1c:39:b7:ad:ca:5e:dc:8d:5f:b4:82:eb:86:08:ef:da: ed:00:38:f5:bd:27:ec:f1:c3:70:19:68:be:bc:42:2d:05:8c: 04:59:d4:09:c7:60:86:f7:fb:8e:4d:bc:89:5a:44:ed:ff:9e: 21:d6:72:ef:43:ef:b0:ec:e7:f0:ba:bd:1d:84:71:38:6e:be: a4:e7:83:ef:39:37:10:9d:de:00:4f:cd:39:f5:01:b9:5b:13: b8:27:9a:b4:f6:9b:76:20:7a:44:97:90:4e:77:45:ec:82:8b: aa:dc:a0:e6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICD7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1 QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTcw MTI3NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJFOURCNEVDM0MxOTAw QkNGODA4MENFRDU3OUVDQTUxNzEwQTEzRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJWcN6cC8b6h08mvTu2828PAKS/aGp8LMqUWrUdlTI/3fw/hg+ Wn34dlkQ9m1qRCwc/2sqtL5/ijaNpzp//93OgKNCOLZZ4NXpt1P1+h1cHk3mLcwR /0yS3FwDCMykDBfgLGCpX9K1Hnkvc0i+5cogQGM2rCW1zy6OLPV5qtKpcinUuXf6 sTjdfNiIpHdSthvqhOyzs5bu2b0AKbUTcBcfMbmGwq3BxJlQtRcFmL/1piVxAhLo VqdeuXTs+BqCq4vwWow+kEii6ENqFbFSZrux3g+p4qsu8Gyq/6EvQzbzGqD4fAf+ 3m60Um30ednoMOoD08HFPhWNG0A4BcZ5h8N9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvp207DwZALz4CAztV57KUXEKE9EwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3ZwMjA3RHdaQUx6NENB enRWNTdLVVhFS0U5RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJ7YhgwDQYJKoZIhvcNAQELBQADggEBAJlyVsr3smL0Vsh4NfDd2YFZcvs/lGTs 3aqyhIkNTnS4TknPnJXGr8z3Zj1O/RtNDbrVl8n5LHh03hwRhtriOxc8TCcSlAp+ I1lw+h+ejRWwfcyPubxaQrRwsMXvCIBCg4Sgo2sM2/6rr2mcd4DTDYziBFXbjOcf hv/SOt+kKxYIq9JNMPMXRZpL4alue256EnrtHDm3rcpe3I1ftILrhgjv2u0AOPW9 J+zxw3AZaL68Qi0FjARZ1AnHYIb3+45NvIlaRO3/niHWcu9D77Ds5/C6vR2EcThu vqTng+85NxCd3gBPzTn1AblbE7gnmrT2m3YgekSXkE53ReyCi6rcoOY= -----END CERTIFICATE-----Generated at Fri Apr 4 18:48:26 2025 by rpki-client