$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/W1URaSazluROyyGrCRdwxFhYd9Y.roa File: W1URaSazluROyyGrCRdwxFhYd9Y.roa (raw, json) Hash identifier: MFQX03Vp/Q22Pl5Z2PCr1olysGH4LnFsVKx6mJcCNSQ= Subject key identifier: 5B:55:11:69:26:B3:96:E4:4E:CB:21:AB:09:17:70:C4:58:58:77:D6 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 186A Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/W1URaSazluROyyGrCRdwxFhYd9Y.roa Signing time: Fri 17 Jan 2025 01:25:02 +0000 ROA not before: Fri 17 Jan 2025 01:25:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 45.252.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6250 (0x186a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:02 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5B55116926B396E44ECB21AB091770C4585877D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:5f:ef:1b:0b:70:45:86:a0:c0:a0:fe:7a: f1:d5:98:f7:8b:1e:9e:a1:53:d7:15:a1:96:96:a9: 6f:c4:86:49:46:ab:2e:15:78:f7:9e:11:ad:a4:ec: 8c:ec:01:b3:5c:4f:f2:63:e2:05:26:aa:eb:51:af: 74:21:2d:cb:3d:49:f4:d4:b4:57:48:0a:37:6b:31: c0:91:b8:fd:8a:a6:0f:01:c8:44:3f:28:ff:3c:d4: 18:1c:45:bd:74:4d:f1:05:b8:92:d1:90:81:68:b8: 09:24:31:17:d9:02:fa:cb:d4:97:4a:44:b8:70:a2: 77:21:93:39:9a:68:91:38:77:64:ef:6c:7d:20:c5: 47:4b:7d:e4:84:07:f1:8e:f0:ea:3a:50:cd:89:18: cd:b0:8b:66:77:80:43:17:00:e5:62:04:49:dc:d8: d5:bf:32:03:1f:7e:78:d1:98:91:69:78:3a:ca:66: 2d:4a:f6:96:3b:1e:1f:e4:f4:41:fc:40:7c:7d:3b: f3:0e:50:79:d7:7e:99:67:0c:24:4b:23:a9:9d:ad: b2:82:4a:14:53:8b:82:30:e3:58:e9:20:8b:66:c1: 71:db:c3:99:21:c4:43:74:99:fc:8d:6b:d4:06:d1: ca:70:36:1d:7f:df:2b:f0:07:a2:8a:84:9c:62:c4: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:55:11:69:26:B3:96:E4:4E:CB:21:AB:09:17:70:C4:58:58:77:D6 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/W1URaSazluROyyGrCRdwxFhYd9Y.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.16.0/22 Signature Algorithm: sha256WithRSAEncryption 89:7c:95:4b:9e:09:02:19:1e:3c:b1:ca:6e:40:98:76:f3:d7: 55:1d:62:3c:ab:49:83:dc:a4:9d:1d:2d:b0:14:ed:9c:6e:ac: ba:2c:00:ec:83:0b:5c:af:b8:a1:f1:07:36:a0:10:4d:1a:ff: d0:eb:1d:e7:30:a6:63:fb:b4:77:ba:f7:d3:a7:f2:0c:56:5d: 43:b6:38:19:c3:51:0b:f5:fa:15:5b:d9:ce:aa:0e:80:f5:e4: 3c:31:f4:28:9b:ab:dd:ae:59:6a:da:12:b7:c9:3a:33:47:9e: e9:45:cc:8d:65:0d:7f:95:03:10:a7:f9:78:db:86:2c:3b:fc: 1b:df:9b:f7:8e:0d:47:47:6b:cb:1d:f3:26:9f:cf:c5:e0:8e: 07:69:40:78:6b:b9:96:8d:69:23:61:66:e0:52:3e:e4:54:ab: b3:ca:68:db:0a:55:33:ba:f8:3c:14:6c:58:91:b3:95:0d:87: 49:ef:1d:99:a4:64:02:64:e6:05:ff:e1:d1:cf:32:52:f9:dc: f2:10:fd:3a:51:ba:21:14:6b:2b:96:be:83:dd:a8:da:a0:f9: ad:c1:78:e4:ec:a9:c1:b0:ed:79:98:87:c6:21:33:5f:b9:5f: ae:f9:70:35:ce:a4:de:7e:e9:6c:77:c7:7a:f0:b3:2c:f5:78: 2a:a9:57:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVCNTUxMTY5MjZCMzk2 RTQ0RUNCMjFBQjA5MTc3MEM0NTg1ODc3RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnKl/vGwtwRYagwKD+evHVmPeLHp6hU9cVoZaWqW/EhklGqy4V ePeeEa2k7IzsAbNcT/Jj4gUmqutRr3QhLcs9SfTUtFdICjdrMcCRuP2Kpg8ByEQ/ KP881BgcRb10TfEFuJLRkIFouAkkMRfZAvrL1JdKRLhwonchkzmaaJE4d2TvbH0g xUdLfeSEB/GO8Oo6UM2JGM2wi2Z3gEMXAOViBEnc2NW/MgMffnjRmJFpeDrKZi1K 9pY7Hh/k9EH8QHx9O/MOUHnXfplnDCRLI6mdrbKCShRTi4Iw41jpIItmwXHbw5kh xEN0mfyNa9QG0cpwNh1/3yvwB6KKhJxixImRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUW1URaSazluROyyGrCRdwxFhYd9YwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1cxVVJhU2F6bHVST3l5 R3JDUmR3eEZoWWQ5WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BAwDQYJKoZIhvcNAQELBQADggEBAIl8lUueCQIZHjyxym5AmHbz11UdYjyr SYPcpJ0dLbAU7ZxurLosAOyDC1yvuKHxBzagEE0a/9DrHecwpmP7tHe699On8gxW XUO2OBnDUQv1+hVb2c6qDoD15Dwx9Cibq92uWWraErfJOjNHnulFzI1lDX+VAxCn +Xjbhiw7/Bvfm/eODUdHa8sd8yafz8XgjgdpQHhruZaNaSNhZuBSPuRUq7PKaNsK VTO6+DwUbFiRs5UNh0nvHZmkZAJk5gX/4dHPMlL53PIQ/TpRuiEUayuWvoPdqNqg +a3BeOTsqcGw7XmYh8YhM1+5X675cDXOpN5+6Wx3x3rwsyz1eCqpV0Q= -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:50 2025 by rpki-client