$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/l91Okr9M9n8WqV9RtSSN2-hCM8E.roa File: l91Okr9M9n8WqV9RtSSN2-hCM8E.roa (raw, json) Hash identifier: DVm6/ff1l0agYZOV7Outfp5fzWVWu7R01pda95yW9Ls= Subject key identifier: 97:DD:4E:92:BF:4C:F6:7F:16:A9:5F:51:B5:24:8D:DB:E8:42:33:C1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18B0 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/l91Okr9M9n8WqV9RtSSN2-hCM8E.roa Signing time: Fri 17 Jan 2025 01:25:25 +0000 ROA not before: Fri 17 Jan 2025 01:25:25 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 45.252.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6320 (0x18b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:25 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=97DD4E92BF4CF67F16A95F51B5248DDBE84233C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:1c:30:f4:3e:d3:12:0c:6f:5c:f0:f2:9c: 4d:26:0f:4d:87:e8:9e:2f:6f:90:d4:ff:2f:0f:f4: 0f:b4:49:ca:d6:65:7c:96:e9:5f:8c:38:8a:3f:c5: b7:d1:07:95:d1:21:99:69:82:6c:ca:a1:2c:e6:2f: b2:1f:5d:11:17:21:d6:c5:ff:91:8d:81:cc:80:da: 5f:5f:fd:0b:ac:b2:24:4d:a6:4c:25:04:69:bc:7d: 8a:0f:1e:2c:85:a4:db:7b:50:ff:57:cd:93:b2:3a: 48:03:28:ce:fe:0f:cc:44:79:b5:7c:29:c6:ab:3c: cf:d2:70:7a:e7:8c:4a:c8:a8:d0:11:15:20:d6:8b: 58:09:da:6c:a9:94:cd:33:db:73:6b:18:2c:62:64: 02:b7:94:d4:4e:a8:cb:05:9b:fe:c7:1e:25:3d:b2: 92:5d:62:a8:30:ac:9a:fe:bf:25:fe:64:9b:42:70: b1:d3:36:ce:3c:c5:73:59:21:72:8e:d1:29:80:cd: 27:04:4e:70:0e:c2:a5:88:bb:3b:81:98:98:b3:ab: 7d:07:8a:a6:14:c8:0d:0d:7e:48:4f:0f:c8:ba:6b: 20:ef:b2:bd:37:47:fc:84:00:b3:2c:02:a2:bd:dc: a5:db:29:ea:5a:aa:ca:8a:dc:de:1a:98:91:ed:33: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DD:4E:92:BF:4C:F6:7F:16:A9:5F:51:B5:24:8D:DB:E8:42:33:C1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/l91Okr9M9n8WqV9RtSSN2-hCM8E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.16.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:f5:c0:65:98:5a:4a:bb:c6:ab:83:33:4b:f6:05:40:69:ab: 7a:d4:59:4d:ed:ae:00:74:9c:f7:1d:bf:af:fb:c5:4e:b0:c7: 50:3e:70:81:c6:81:82:2f:c9:bb:f6:c5:ac:ee:02:a1:b3:d9: 08:b1:05:94:de:a0:90:50:07:b1:a6:96:d3:13:df:cc:45:61: a8:d7:0f:8c:c4:ae:6a:3b:c7:cd:50:51:00:b6:7f:a2:e5:7b: 7b:88:04:1d:f9:9d:05:17:ab:86:16:07:68:de:13:f8:bb:62: 9e:79:d6:4b:23:68:f2:d0:13:cb:bc:f4:f6:e5:6e:98:07:80: 5c:68:ae:e4:70:93:57:d4:93:6b:99:03:47:a5:43:49:f5:41: e6:dc:36:d0:54:5d:e1:b7:27:ce:9b:3e:a0:60:aa:18:3f:68: 7d:17:42:3e:e9:d7:af:17:69:d2:b8:57:1f:ad:cf:bd:8d:62: b1:e1:a3:d9:c3:2d:02:1d:aa:13:63:8a:4c:18:0e:26:ea:1a: a9:bc:ef:e1:21:24:24:2b:98:d8:2b:98:63:bc:55:52:37:df: 3f:b9:a7:79:f4:a5:2d:3b:e6:b0:d7:c5:18:8e:c1:dd:c0:0f: 4c:b2:ee:b1:da:7c:19:69:4b:76:ab:f0:28:51:ff:93:43:7f: 8b:02:ae:35 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk3REQ0RTkyQkY0Q0Y2 N0YxNkE5NUY1MUI1MjQ4RERCRTg0MjMzQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiHhww9D7TEgxvXPDynE0mD02H6J4vb5DU/y8P9A+0ScrWZXyW 6V+MOIo/xbfRB5XRIZlpgmzKoSzmL7IfXREXIdbF/5GNgcyA2l9f/QussiRNpkwl BGm8fYoPHiyFpNt7UP9XzZOyOkgDKM7+D8xEebV8KcarPM/ScHrnjErIqNARFSDW i1gJ2myplM0z23NrGCxiZAK3lNROqMsFm/7HHiU9spJdYqgwrJr+vyX+ZJtCcLHT Ns48xXNZIXKO0SmAzScETnAOwqWIuzuBmJizq30HiqYUyA0NfkhPD8i6ayDvsr03 R/yEALMsAqK93KXbKepaqsqK3N4amJHtM5Z1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUl91Okr9M9n8WqV9RtSSN2+hCM8EwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2w5MU9rcjlNOW44V3FW OVJ0U1NOMi1oQ004RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BAwDQYJKoZIhvcNAQELBQADggEBADr1wGWYWkq7xquDM0v2BUBpq3rUWU3t rgB0nPcdv6/7xU6wx1A+cIHGgYIvybv2xazuAqGz2QixBZTeoJBQB7GmltMT38xF YajXD4zErmo7x81QUQC2f6Lle3uIBB35nQUXq4YWB2jeE/i7Yp551ksjaPLQE8u8 9PblbpgHgFxoruRwk1fUk2uZA0elQ0n1QebcNtBUXeG3J86bPqBgqhg/aH0XQj7p 168XadK4Vx+tz72NYrHho9nDLQIdqhNjikwYDibqGqm87+EhJCQrmNgrmGO8VVI3 3z+5p3n0pS075rDXxRiOwd3AD0yy7rHafBlpS3ar8ChR/5NDf4sCrjU= -----END CERTIFICATE-----Generated at Fri Apr 4 18:42:54 2025 by rpki-client