$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lH1Y9TVXmeomL2NOA-yurt6RtIM.roa File: lH1Y9TVXmeomL2NOA-yurt6RtIM.roa (raw, json) Hash identifier: jDf3ji8HpH+hlXC5spkG5TU2SG8q47V/ENczQXo1fXg= Subject key identifier: 94:7D:58:F5:35:57:99:EA:26:2F:63:4E:03:EC:AE:AE:DE:91:B4:83 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18C7 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lH1Y9TVXmeomL2NOA-yurt6RtIM.roa Signing time: Fri 17 Jan 2025 01:25:33 +0000 ROA not before: Fri 17 Jan 2025 01:25:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59803 IP address blocks: 2403:1b80::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6343 (0x18c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=947D58F5355799EA262F634E03ECAEAEDE91B483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:f9:69:ed:8f:6b:5d:4b:40:0a:ef:39:a1: ed:5b:b6:99:3d:49:6c:92:36:fa:00:d0:82:1c:0b: e7:3b:73:f2:96:8e:3d:62:54:4b:af:e0:71:66:81: b6:d8:43:19:38:28:36:e4:60:91:dd:b9:7c:40:ec: 62:91:f7:59:73:ee:fa:ae:64:ce:61:5e:0e:d7:9e: 21:26:94:da:96:c3:1e:42:71:db:be:81:92:8c:74: 75:1b:b5:59:38:b6:35:f8:18:69:8b:bb:b8:7e:ca: 91:30:2a:6c:cd:22:d5:df:c7:b8:62:68:76:a0:8e: d1:25:75:69:3d:60:e6:12:45:84:b6:ec:02:5b:36: b2:d7:bf:08:fc:b3:79:cc:f6:74:b7:6f:ad:9e:52: b9:67:1b:de:7f:2c:9f:f2:05:8e:da:1a:a5:21:4e: a4:71:61:f4:b7:6d:72:da:54:82:d7:53:ef:ba:7f: 3d:19:8c:e1:cc:bb:18:63:f8:b8:da:12:d5:49:f4: ed:56:a8:c5:42:7e:0f:2f:15:af:d2:7c:bb:8e:5f: 7f:bc:f1:0f:fd:89:bd:66:d5:f4:00:55:44:67:dd: 41:8d:a7:a9:79:54:4b:4d:1d:e6:82:11:1d:7d:24: 5f:d6:17:58:57:ad:6a:8e:02:da:06:e3:04:f0:b3: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7D:58:F5:35:57:99:EA:26:2F:63:4E:03:EC:AE:AE:DE:91:B4:83 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lH1Y9TVXmeomL2NOA-yurt6RtIM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 83:4e:f9:50:61:7a:b0:42:ea:9e:01:57:dd:0a:b4:7e:06:a6: c4:46:30:dc:2c:f8:df:45:30:c1:f8:94:b2:54:ef:d4:f3:52: 8d:2a:0c:7e:fa:2f:6b:d6:a6:01:66:4d:4f:5b:75:88:62:68: 85:1f:fa:92:22:00:7d:02:72:b0:44:4b:ae:0b:9b:bb:a5:12: e7:f8:5b:40:d6:a2:f3:24:e0:83:16:7b:63:14:d4:6c:81:48: 24:ea:c1:ce:77:ae:48:55:c5:ec:34:90:6c:8f:41:7f:29:95: a2:23:41:1a:14:d1:fa:0c:bb:06:24:27:8e:c9:34:39:52:d2: a6:44:a0:71:57:c2:20:68:0e:50:bb:8a:ea:9a:ca:d7:4a:91: 3e:b0:6e:be:36:83:e3:d2:fb:ad:94:f7:49:ef:5c:81:67:24: d7:ff:96:93:f5:10:90:7d:17:0c:ac:59:bd:0c:09:7b:69:8a: c0:80:bb:58:86:db:d9:7d:d9:ca:ac:43:6a:bf:0d:18:36:e1: f7:70:1f:a0:ee:c5:a5:a9:df:a6:04:d6:41:a5:ce:fd:9b:69: 03:bd:4c:72:aa:53:9a:30:e8:3c:8b:11:91:15:05:95:7c:ee: 30:62:5b:33:dd:df:43:ff:24:6d:6d:47:fe:64:48:a7:6e:37: 6e:6b:df:a1 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICGMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk0N0Q1OEY1MzU1Nzk5 RUEyNjJGNjM0RTAzRUNBRUFFREU5MUI0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Wflp7Y9rXUtACu85oe1btpk9SWySNvoA0IIcC+c7c/KWjj1i VEuv4HFmgbbYQxk4KDbkYJHduXxA7GKR91lz7vquZM5hXg7XniEmlNqWwx5Ccdu+ gZKMdHUbtVk4tjX4GGmLu7h+ypEwKmzNItXfx7hiaHagjtEldWk9YOYSRYS27AJb NrLXvwj8s3nM9nS3b62eUrlnG95/LJ/yBY7aGqUhTqRxYfS3bXLaVILXU++6fz0Z jOHMuxhj+LjaEtVJ9O1WqMVCfg8vFa/SfLuOX3+88Q/9ib1m1fQAVURn3UGNp6l5 VEtNHeaCER19JF/WF1hXrWqOAtoG4wTwsztZAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUlH1Y9TVXmeomL2NOA+yurt6RtIMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2xIMVk5VFZYbWVvbUwy Tk9BLXl1cnQ2UnRJTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkAxuAAAAwDQYJKoZIhvcNAQELBQADggEBAINO+VBherBC6p4BV90KtH4GpsRG MNws+N9FMMH4lLJU79TzUo0qDH76L2vWpgFmTU9bdYhiaIUf+pIiAH0CcrBES64L m7ulEuf4W0DWovMk4IMWe2MU1GyBSCTqwc53rkhVxew0kGyPQX8plaIjQRoU0foM uwYkJ47JNDlS0qZEoHFXwiBoDlC7iuqaytdKkT6wbr42g+PS+62U90nvXIFnJNf/ lpP1EJB9FwysWb0MCXtpisCAu1iG29l92cqsQ2q/DRg24fdwH6DuxaWp36YE1kGl zv2baQO9THKqU5ow6DyLEZEVBZV87jBiWzPd30P/JG1tR/5kSKduN25r36E= -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:38 2025 by rpki-client