$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/cVoQDix8GdUK66QL9UnK3ERruZs.roa File: cVoQDix8GdUK66QL9UnK3ERruZs.roa (raw, json) Hash identifier: qqjDGY18l8XEVkWGW2f78g5iG6mlm7R+9+MMWGFJ8Rk= Subject key identifier: 71:5A:10:0E:2C:7C:19:D5:0A:EB:A4:0B:F5:49:CA:DC:44:6B:B9:9B Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18B7 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cVoQDix8GdUK66QL9UnK3ERruZs.roa Signing time: Fri 17 Jan 2025 01:25:27 +0000 ROA not before: Fri 17 Jan 2025 01:25:27 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 50983 IP address blocks: 2403:1b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6327 (0x18b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:27 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=715A100E2C7C19D50AEBA40BF549CADC446BB99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:4d:3c:f6:6e:16:f4:ae:53:cb:05:8b:16: 86:36:a3:3d:3d:ab:f0:b4:2a:06:65:e1:ff:5e:a7: 20:82:75:cc:82:a8:4e:31:57:d7:09:7e:ee:e9:87: d5:4a:b4:1b:d6:57:c0:29:23:fd:b0:f3:bd:34:e6: cb:70:55:30:3b:bd:25:33:02:2d:1f:e2:ef:9c:ec: a3:45:bd:79:4c:ef:3e:16:5e:d0:11:3d:7d:91:8c: da:55:0a:2c:f4:47:5b:36:8d:d3:2e:5c:ce:b6:cb: c2:26:70:91:1f:61:10:0c:1f:2d:61:b6:15:23:d3: 6f:f3:f5:6f:9b:d8:7a:18:9d:f2:48:53:ef:5e:62: af:20:fc:fe:38:71:3e:69:b3:33:d8:a1:e5:ba:33: 01:02:86:79:55:0f:99:96:0c:cb:b6:10:83:d3:d2: 37:80:ea:d3:ac:1d:14:fd:1f:29:36:c2:3a:7d:30: 36:ce:61:34:ea:62:32:12:f2:dd:fd:b7:b9:69:82: 56:eb:16:d5:23:4a:b9:a2:ca:a3:cb:f4:81:92:df: f3:bf:89:47:a7:f3:93:88:0e:fa:e6:d8:4b:91:80: 74:96:75:a3:d8:fe:9e:a4:bf:3e:f3:e8:4b:d1:f6: 96:9b:61:84:0f:44:ca:c5:04:d2:a1:2a:c4:a2:44: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:10:0E:2C:7C:19:D5:0A:EB:A4:0B:F5:49:CA:DC:44:6B:B9:9B X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cVoQDix8GdUK66QL9UnK3ERruZs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:1b80::/32 Signature Algorithm: sha256WithRSAEncryption 90:9d:c8:4a:78:2c:7e:fc:21:93:55:93:5d:cb:b0:64:0e:f7: c4:81:b0:49:09:c3:8a:12:35:f1:84:d7:67:f6:26:dd:0e:d8: c5:b2:2e:d5:d3:e6:49:ba:6a:ce:a9:2d:aa:08:14:52:50:19: 50:3a:a9:f6:c1:6c:58:08:6f:c3:eb:b4:c1:15:aa:ca:15:e7: a3:da:33:35:c5:0e:d8:37:71:63:ff:84:d8:cc:01:e5:73:57: 68:6f:7e:b2:4d:cb:84:e1:a2:89:4a:c4:30:3e:c0:ce:81:24: 54:1b:b5:86:a2:fa:63:90:96:9c:a4:0e:19:ae:67:ec:c8:74: 83:a9:2b:4a:d6:3a:b4:b9:07:5b:3e:b3:dc:df:fd:02:74:4b: 2a:6d:21:e4:36:30:13:1d:b9:99:38:82:82:bd:15:1c:90:68: 5d:ec:52:3f:a5:53:31:66:dc:cf:18:9b:26:30:9d:63:90:e2: 5e:18:6d:24:41:50:1a:9d:41:ab:06:12:e5:a4:b1:6f:4f:24: 72:9c:c0:38:de:31:52:49:77:e7:c0:eb:ff:c0:f9:f2:d7:0c: 49:c5:b6:fd:fd:3d:68:fc:98:a4:5f:d5:b3:a5:c3:a4:3a:f3: b1:cf:2f:c3:9e:3d:31:db:09:f5:dc:be:f4:42:ed:e4:50:80: 79:b7:c9:0b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICGLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcxNUExMDBFMkM3QzE5 RDUwQUVCQTQwQkY1NDlDQURDNDQ2QkI5OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo2E089m4W9K5TywWLFoY2oz09q/C0KgZl4f9epyCCdcyCqE4x V9cJfu7ph9VKtBvWV8ApI/2w87005stwVTA7vSUzAi0f4u+c7KNFvXlM7z4WXtAR PX2RjNpVCiz0R1s2jdMuXM62y8ImcJEfYRAMHy1hthUj02/z9W+b2HoYnfJIU+9e Yq8g/P44cT5pszPYoeW6MwEChnlVD5mWDMu2EIPT0jeA6tOsHRT9Hyk2wjp9MDbO YTTqYjIS8t39t7lpglbrFtUjSrmiyqPL9IGS3/O/iUen85OIDvrm2EuRgHSWdaPY /p6kvz7z6EvR9pabYYQPRMrFBNKhKsSiRJ4HAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUcVoQDix8GdUK66QL9UnK3ERruZswHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2NWb1FEaXg4R2RVSzY2 UUw5VW5LM0VScnVacy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAxuAMA0GCSqGSIb3DQEBCwUAA4IBAQCQnchKeCx+/CGTVZNdy7BkDvfEgbBJ CcOKEjXxhNdn9ibdDtjFsi7V0+ZJumrOqS2qCBRSUBlQOqn2wWxYCG/D67TBFarK Feej2jM1xQ7YN3Fj/4TYzAHlc1dob36yTcuE4aKJSsQwPsDOgSRUG7WGovpjkJac pA4ZrmfsyHSDqStK1jq0uQdbPrPc3/0CdEsqbSHkNjATHbmZOIKCvRUckGhd7FI/ pVMxZtzPGJsmMJ1jkOJeGG0kQVAanUGrBhLlpLFvTyRynMA43jFSSXfnwOv/wPny 1wxJxbb9/T1o/JikX9WzpcOkOvOxzy/Dnj0x2wn13L70Qu3kUIB5t8kL -----END CERTIFICATE-----Generated at Fri Apr 4 18:39:17 2025 by rpki-client