$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/dLSuNN8eytW7aRwCJ4SVdOMceLI.roa File: dLSuNN8eytW7aRwCJ4SVdOMceLI.roa (raw, json) Hash identifier: C2oKoZ4cvTOK+oEe/2eqZsQbIRd3TWvD6BY1FG+7ODU= Subject key identifier: 74:B4:AE:34:DF:1E:CA:D5:BB:69:1C:02:27:84:95:74:E3:1C:78:B2 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1860 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dLSuNN8eytW7aRwCJ4SVdOMceLI.roa Signing time: Fri 17 Jan 2025 01:24:59 +0000 ROA not before: Fri 17 Jan 2025 01:24:59 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 202.136.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6240 (0x1860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:59 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=74B4AE34DF1ECAD5BB691C0227849574E31C78B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:ca:af:a4:01:37:c7:44:d8:a6:c4:a8:93: 17:69:4b:29:52:61:17:f0:44:ee:db:6a:99:34:64: 23:c6:59:45:35:bd:c4:4e:cf:eb:f5:5f:16:2c:17: 95:72:d2:79:6d:ea:77:e1:3c:41:9d:e0:3d:3a:58: a9:cd:0b:26:5b:c7:54:cb:e6:63:39:d0:43:b2:43: 5f:6b:4e:52:52:27:5e:86:81:eb:37:49:5d:16:01: c4:c4:94:96:11:70:71:7a:ab:2b:1c:28:97:17:b8: a9:e9:6c:ef:7c:fd:b3:e2:39:6b:3f:6f:ba:52:85: e4:4c:a2:88:9b:fc:83:9d:25:8f:bf:6a:21:9d:71: 62:9c:e4:af:1e:ca:f3:6b:af:da:c5:fa:8e:fb:e5: ae:71:fe:0a:18:b8:94:4c:b6:82:bd:7d:69:09:2f: 7c:03:a0:cd:67:2c:ba:b6:d0:e9:45:fb:95:61:cb: 53:2e:f4:6f:e6:85:8b:46:f1:74:f0:c9:1f:e5:36: 89:c6:1e:7d:d4:86:23:df:bb:df:f8:50:ee:23:36: 4e:ae:e7:cc:98:e7:bb:bb:67:eb:70:06:3a:d6:01: b7:4d:7d:a4:f9:e1:4b:ec:84:26:e4:a9:fc:74:70: 73:fe:ec:a9:f4:fe:32:57:97:33:54:a5:e1:db:fd: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:AE:34:DF:1E:CA:D5:BB:69:1C:02:27:84:95:74:E3:1C:78:B2 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dLSuNN8eytW7aRwCJ4SVdOMceLI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.136.248.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:ee:d6:a8:4f:d0:43:cb:f4:47:42:3e:8a:8c:9e:c0:31:9f: 24:23:ad:24:fe:33:1f:03:8f:0a:17:db:5d:b5:79:16:50:00: 12:07:83:b0:8d:46:0c:d3:0c:52:88:7a:c3:4a:71:c7:47:a6: f2:0b:e5:9b:6a:bd:78:27:0c:43:d7:03:db:b7:9e:31:33:fb: 44:99:d0:f8:52:e2:20:09:0f:7c:2d:85:35:c8:4d:22:9b:4b: 46:d1:ab:b1:5d:35:ba:af:c8:ba:d3:6d:94:4a:a5:00:c6:bf: f2:8e:86:eb:28:85:09:26:39:63:e1:40:a1:e3:f7:48:1e:91: a4:68:d7:7c:d3:bf:b5:29:2b:b4:22:97:02:7a:df:96:ec:99: cf:b7:64:c6:54:ee:7a:c0:e1:dd:bc:f2:11:b1:9c:36:8b:bf: 84:cf:bb:e1:b1:e7:62:7f:0a:f5:ac:8e:de:38:94:8e:88:fe: 4b:60:f5:49:1c:12:b7:fe:be:62:ed:62:e6:e5:6e:3b:1e:01: 79:6c:62:b1:c6:da:4e:4c:0d:19:19:90:0e:fb:8b:d5:ca:e4: 57:1b:11:41:31:66:01:38:82:f4:0a:f9:d6:01:b1:07:50:c1: 8a:59:e4:2a:73:de:0b:17:90:2a:2e:d3:ed:82:f6:cb:5d:eb: 1e:ce:ee:da -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc0QjRBRTM0REYxRUNB RDVCQjY5MUMwMjI3ODQ5NTc0RTMxQzc4QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuPsqvpAE3x0TYpsSokxdpSylSYRfwRO7bapk0ZCPGWUU1vcRO z+v1XxYsF5Vy0nlt6nfhPEGd4D06WKnNCyZbx1TL5mM50EOyQ19rTlJSJ16Gges3 SV0WAcTElJYRcHF6qyscKJcXuKnpbO98/bPiOWs/b7pSheRMooib/IOdJY+/aiGd cWKc5K8eyvNrr9rF+o775a5x/goYuJRMtoK9fWkJL3wDoM1nLLq20OlF+5Vhy1Mu 9G/mhYtG8XTwyR/lNonGHn3UhiPfu9/4UO4jNk6u58yY57u7Z+twBjrWAbdNfaT5 4UvshCbkqfx0cHP+7Kn0/jJXlzNUpeHb/TJxAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUdLSuNN8eytW7aRwCJ4SVdOMceLIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2RMU3VOTjhleXRXN2FS d0NKNFNWZE9NY2VMSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKiPgwDQYJKoZIhvcNAQELBQADggEBAA7u1qhP0EPL9EdCPoqMnsAxnyQjrST+ Mx8DjwoX2121eRZQABIHg7CNRgzTDFKIesNKccdHpvIL5ZtqvXgnDEPXA9u3njEz +0SZ0PhS4iAJD3wthTXITSKbS0bRq7FdNbqvyLrTbZRKpQDGv/KOhusohQkmOWPh QKHj90gekaRo13zTv7UpK7QilwJ635bsmc+3ZMZU7nrA4d288hGxnDaLv4TPu+Gx 52J/CvWsjt44lI6I/ktg9UkcErf+vmLtYublbjseAXlsYrHG2k5MDRkZkA77i9XK 5FcbEUExZgE4gvQK+dYBsQdQwYpZ5Cpz3gsXkCou0+2C9std6x7O7to= -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:11 2025 by rpki-client