$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/iRTMDNLoTKbzVBXrFwFRsuQjyN8.roa File: iRTMDNLoTKbzVBXrFwFRsuQjyN8.roa (raw, json) Hash identifier: SUCqhnlgysTGYlpjAAsabGfOvpKwaJDRdG+G42nkRh4= Subject key identifier: 89:14:CC:0C:D2:E8:4C:A6:F3:54:15:EB:17:01:51:B2:E4:23:C8:DF Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1889 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/iRTMDNLoTKbzVBXrFwFRsuQjyN8.roa Signing time: Fri 17 Jan 2025 01:25:12 +0000 ROA not before: Fri 17 Jan 2025 01:25:12 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6281 (0x1889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:12 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8914CC0CD2E84CA6F35415EB170151B2E423C8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:2c:6f:d0:bb:68:ec:df:46:28:b4:c1:6c: 6a:6e:af:10:d5:ac:6c:5c:0e:17:0c:e3:50:0a:49: 1e:79:b0:46:05:8c:15:3d:18:12:88:2f:7a:1f:27: 70:1c:8b:05:36:2f:d2:f8:52:ab:28:7c:ac:ca:f5: 00:da:34:a0:59:1f:0e:1e:f3:bf:b5:1c:82:4b:f0: 6f:e6:47:4d:1b:8a:98:d2:14:ca:0d:7b:55:5e:60: bd:4f:47:35:2a:f2:d5:76:bd:af:09:fe:c7:9f:4e: 03:a3:03:00:85:75:2d:e8:74:74:42:ba:31:fd:d4: 83:84:fa:5d:8c:02:ea:eb:1a:78:e7:54:1d:6b:86: 64:54:2e:ee:5a:49:f8:9c:79:2f:51:c0:f7:a4:bc: 8a:69:8a:f5:81:34:cc:07:61:25:98:26:8a:66:b1: 5a:df:67:da:f5:96:be:33:39:66:02:f7:82:64:cf: 83:0c:54:53:91:3d:19:76:4a:59:dc:b6:0e:60:d3: 44:5a:9b:f8:0a:70:ba:5b:97:fd:cc:79:e2:59:6f: 3e:ba:f4:ce:2e:5c:02:97:8d:8f:b0:98:8a:dc:97: 34:c2:76:f1:58:2f:7d:f8:91:77:91:7d:27:f4:b4: e3:75:2d:18:31:e6:53:4b:d9:42:a9:83:ef:34:b8: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:14:CC:0C:D2:E8:4C:A6:F3:54:15:EB:17:01:51:B2:E4:23:C8:DF X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/iRTMDNLoTKbzVBXrFwFRsuQjyN8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.20.0/22 Signature Algorithm: sha256WithRSAEncryption 46:3a:ec:02:cd:ea:77:da:b1:bd:8f:70:72:27:35:bf:4a:a2: be:3b:b3:17:6f:0e:06:97:bc:75:5a:f6:87:47:07:46:d1:c8: 6b:c7:01:44:48:81:2c:0d:95:37:a2:d8:2e:59:d5:de:65:c8: c6:8d:1a:52:fa:36:6b:bb:5b:2e:10:73:cf:a5:66:3f:8e:0e: 25:d2:d4:1c:96:aa:04:a5:71:eb:e9:78:09:d7:b9:e8:8b:8c: 22:09:e0:60:c1:de:d2:20:39:a0:ae:9a:01:f5:bf:3f:a7:29: e4:f3:90:a3:b5:9e:ad:8b:0b:2b:4c:48:46:20:29:55:5b:6c: 3b:d6:3f:0e:0f:dc:7f:c1:91:0d:44:25:f5:c8:96:10:7e:f3: ff:e9:d6:d3:c7:0e:95:e1:b2:3d:a4:68:78:6c:ca:07:2a:28: f0:45:76:36:9a:11:19:cc:4c:61:10:25:4f:57:48:ac:57:d5: 59:50:fa:09:c6:64:c6:e1:61:92:5b:63:4e:b4:1e:1e:f8:af: 77:d0:d6:d3:57:dd:09:96:f6:6b:cd:da:7e:78:e8:d8:e1:18: aa:db:fc:b4:a2:91:4f:23:db:d7:be:44:1c:d1:8a:0c:95:3b: bf:97:ef:a3:a2:04:34:40:99:7e:13:d9:4b:89:3f:66:5c:4f: 56:6a:42:81 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg5MTRDQzBDRDJFODRD QTZGMzU0MTVFQjE3MDE1MUIyRTQyM0M4REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgJSxv0Lto7N9GKLTBbGpurxDVrGxcDhcM41AKSR55sEYFjBU9 GBKIL3ofJ3AciwU2L9L4UqsofKzK9QDaNKBZHw4e87+1HIJL8G/mR00bipjSFMoN e1VeYL1PRzUq8tV2va8J/sefTgOjAwCFdS3odHRCujH91IOE+l2MAurrGnjnVB1r hmRULu5aSficeS9RwPekvIppivWBNMwHYSWYJopmsVrfZ9r1lr4zOWYC94Jkz4MM VFORPRl2Slnctg5g00Ram/gKcLpbl/3MeeJZbz669M4uXAKXjY+wmIrclzTCdvFY L334kXeRfSf0tON1LRgx5lNL2UKpg+80uC5pAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUiRTMDNLoTKbzVBXrFwFRsuQjyN8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2lSVE1ETkxvVEtielZC WHJGd0ZSc3VRanlOOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BQwDQYJKoZIhvcNAQELBQADggEBAEY67ALN6nfasb2PcHInNb9Kor47sxdv DgaXvHVa9odHB0bRyGvHAURIgSwNlTei2C5Z1d5lyMaNGlL6Nmu7Wy4Qc8+lZj+O DiXS1ByWqgSlcevpeAnXueiLjCIJ4GDB3tIgOaCumgH1vz+nKeTzkKO1nq2LCytM SEYgKVVbbDvWPw4P3H/BkQ1EJfXIlhB+8//p1tPHDpXhsj2kaHhsygcqKPBFdjaa ERnMTGEQJU9XSKxX1VlQ+gnGZMbhYZJbY060Hh74r3fQ1tNX3QmW9mvN2n546Njh GKrb/LSikU8j29e+RBzRigyVO7+X76OiBDRAmX4T2UuJP2ZcT1ZqQoE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:41:22 2025 by rpki-client