$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/aWQAkKVEm9E0XML9xvMW-U7w5SI.roa File: aWQAkKVEm9E0XML9xvMW-U7w5SI.roa (raw, json) Hash identifier: B+x+8YxfbClX0ecRmuy89qgF9yHtdysv+NEQoG3lfsA= Subject key identifier: 69:64:00:90:A5:44:9B:D1:34:5C:C2:FD:C6:F3:16:F9:4E:F0:E5:22 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18D9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aWQAkKVEm9E0XML9xvMW-U7w5SI.roa Signing time: Fri 17 Jan 2025 01:25:41 +0000 ROA not before: Fri 17 Jan 2025 01:25:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 43.254.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6361 (0x18d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=69640090A5449BD1345CC2FDC6F316F94EF0E522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:6e:32:4d:e0:10:9e:d6:92:b5:f8:25:8a: 9b:cc:72:79:19:65:f4:4b:15:3d:ce:2d:ee:d7:bc: 99:b3:52:69:42:02:2d:3e:ae:cf:f3:e3:8b:59:23: bc:a2:d6:14:f4:f4:29:40:2b:67:a8:a0:f3:8c:8a: e5:71:3e:ad:01:dd:ef:e5:c5:ce:0c:ef:c6:94:09: 04:6a:b1:4a:c1:29:af:6f:aa:1a:5f:0d:a7:64:d8: 41:26:7f:c4:ae:0b:ad:50:65:24:97:89:e9:2b:ec: 2a:91:20:c1:45:ff:20:07:bf:bf:f8:ed:dc:9e:42: d8:7a:1e:91:17:03:e3:d9:3d:97:0e:b1:31:f3:ba: 83:a0:c9:65:b8:3d:cf:21:f9:e1:72:cf:04:60:db: f6:be:0d:06:36:6e:e9:9e:1f:87:f3:39:b4:e4:ae: dc:49:8e:7f:d9:00:3b:d9:b9:51:26:48:5b:f7:58: 22:6b:a0:7d:43:a6:19:ad:06:b1:ee:8f:5e:00:14: 8c:6d:e2:58:ea:5a:84:cb:23:7f:5e:f7:e3:c6:39: e4:19:b7:d0:2b:d9:1a:d4:9f:9c:2e:a6:e7:98:d1: dc:39:9d:2e:35:b0:43:38:7e:0d:d5:a1:1a:97:8d: bd:6b:4c:aa:48:22:14:88:88:2a:0c:ee:72:7c:d1: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:64:00:90:A5:44:9B:D1:34:5C:C2:FD:C6:F3:16:F9:4E:F0:E5:22 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aWQAkKVEm9E0XML9xvMW-U7w5SI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.154.0/23 Signature Algorithm: sha256WithRSAEncryption b0:44:8a:67:fe:a7:15:2c:88:32:74:7e:f1:02:37:ef:bf:16: 10:13:94:01:a8:4d:09:4c:8b:0e:af:51:ca:f4:5a:b7:c0:3e: b5:fb:c6:16:fa:92:0a:99:0b:3b:88:ae:ca:6a:32:98:3a:44: 08:b0:18:5d:fb:31:7d:ac:85:31:e0:3b:05:8d:08:0c:76:73: 73:df:ba:c1:4e:08:49:05:55:25:79:a7:fa:01:fc:1d:9c:15: f6:1e:a7:0e:ee:00:1d:e5:a1:95:41:26:d0:36:76:07:59:04: 82:47:36:36:9d:20:4f:ae:6a:59:c4:ea:8c:e3:17:ff:5a:66: 8b:0e:0b:41:cd:4b:79:ff:56:bf:43:be:0f:c8:ca:11:32:bc: 39:42:0d:a3:5e:36:23:52:08:98:69:8b:53:24:17:c4:36:3f: 16:22:fa:5a:a8:78:c9:8a:0d:17:32:3e:87:dd:01:ad:f9:89: 17:40:bf:9c:8d:2c:c3:ff:86:e2:99:6a:a2:b3:12:04:fd:38: 72:de:31:48:77:f0:ba:7f:94:6b:a5:b6:5b:67:0f:e1:14:1f: eb:53:81:7b:1d:c4:6d:17:91:3f:d6:5d:e5:34:a1:ac:f5:2e: 6c:8b:de:35:a5:82:ca:4b:62:c4:91:74:32:ab:cf:24:ee:bc: 0d:ae:72:dd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY5NjQwMDkwQTU0NDlC RDEzNDVDQzJGREM2RjMxNkY5NEVGMEU1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC//m4yTeAQntaStfglipvMcnkZZfRLFT3OLe7XvJmzUmlCAi0+ rs/z44tZI7yi1hT09ClAK2eooPOMiuVxPq0B3e/lxc4M78aUCQRqsUrBKa9vqhpf Dadk2EEmf8SuC61QZSSXiekr7CqRIMFF/yAHv7/47dyeQth6HpEXA+PZPZcOsTHz uoOgyWW4Pc8h+eFyzwRg2/a+DQY2bumeH4fzObTkrtxJjn/ZADvZuVEmSFv3WCJr oH1DphmtBrHuj14AFIxt4ljqWoTLI39e9+PGOeQZt9Ar2RrUn5wupueY0dw5nS41 sEM4fg3VoRqXjb1rTKpIIhSIiCoM7nJ80cjHAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUaWQAkKVEm9E0XML9xvMW+U7w5SIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FXUUFrS1ZFbTlFMFhN TDl4dk1XLVU3dzVTSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEr/powDQYJKoZIhvcNAQELBQADggEBALBEimf+pxUsiDJ0fvECN++/FhATlAGo TQlMiw6vUcr0WrfAPrX7xhb6kgqZCzuIrspqMpg6RAiwGF37MX2shTHgOwWNCAx2 c3PfusFOCEkFVSV5p/oB/B2cFfYepw7uAB3loZVBJtA2dgdZBIJHNjadIE+ualnE 6ozjF/9aZosOC0HNS3n/Vr9Dvg/IyhEyvDlCDaNeNiNSCJhpi1MkF8Q2PxYi+lqo eMmKDRcyPofdAa35iRdAv5yNLMP/huKZaqKzEgT9OHLeMUh38Lp/lGultltnD+EU H+tTgXsdxG0XkT/WXeU0oaz1LmyL3jWlgspLYsSRdDKrzyTuvA2uct0= -----END CERTIFICATE-----Generated at Fri Apr 4 18:42:05 2025 by rpki-client