$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/rOLumr8zLbB3kRHCDhi7Bh5TFSM.roa File: rOLumr8zLbB3kRHCDhi7Bh5TFSM.roa (raw, json) Hash identifier: wTsm34rRUnKeYShds63OrObhV4ouFiXbyVdZZojQ+dg= Subject key identifier: AC:E2:EE:9A:BF:33:2D:B0:77:91:11:C2:0E:18:BB:06:1E:53:15:23 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 17FA Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rOLumr8zLbB3kRHCDhi7Bh5TFSM.roa Signing time: Fri 17 Jan 2025 01:24:23 +0000 ROA not before: Fri 17 Jan 2025 01:24:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 45.252.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6138 (0x17fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=ACE2EE9ABF332DB0779111C20E18BB061E531523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:8c:40:09:68:38:83:00:97:df:70:97:54: c1:67:18:d1:d5:15:fa:00:16:e7:fd:85:7d:50:83: c6:3b:c1:af:76:83:19:e3:1f:64:6d:65:1d:58:60: e8:83:45:cc:48:8a:18:81:b0:37:d9:3b:73:fc:f6: 8e:28:55:80:fe:18:61:0c:17:f9:f9:ff:5e:1c:77: 5b:5b:07:b6:0e:93:ba:f8:a6:75:c0:ea:42:1f:11: 70:fa:23:6d:24:f9:5e:cc:2e:57:b9:ba:f9:1c:c6: 73:f3:fd:69:7d:ec:2c:f1:84:1e:a8:6b:9b:b4:80: 60:05:cf:1c:81:ca:7b:2c:ea:ce:d5:fb:b1:a7:c7: 8d:6b:b2:77:fa:de:53:2b:59:95:52:ad:87:ba:4a: 6c:f4:74:91:1e:21:fb:aa:b9:27:89:06:68:06:9d: cc:6a:49:eb:2c:6e:f8:81:83:89:64:f4:e0:00:07: 62:bd:aa:b9:ca:81:f1:7e:5a:9d:52:b3:f5:9d:f0: fd:08:70:a8:6b:b4:f7:4a:c4:59:5b:a8:77:9e:b8: 32:de:2e:0a:bd:54:3e:1b:95:51:27:4b:c5:26:82: 5b:12:a1:63:4d:d9:d2:22:fb:f4:e7:ee:21:f6:8e: 0e:3c:a1:59:68:92:17:ce:d6:3a:1f:58:5e:28:f5: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E2:EE:9A:BF:33:2D:B0:77:91:11:C2:0E:18:BB:06:1E:53:15:23 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rOLumr8zLbB3kRHCDhi7Bh5TFSM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.32.0/22 Signature Algorithm: sha256WithRSAEncryption de:1c:f0:96:eb:3a:9f:74:ab:1c:4a:18:24:50:17:08:d0:0c: 78:2d:4e:e8:45:dc:fd:f7:7a:b0:6c:19:be:09:82:11:4b:32: 89:5c:04:ea:83:28:d3:41:b9:3f:b3:dd:c9:a7:ce:80:cb:9f: 73:06:5e:59:68:a1:1f:61:50:ae:11:ef:b8:ce:5b:dd:61:08: 50:26:f9:d5:82:a4:c2:71:1f:4d:cd:43:4b:e5:1e:92:c0:2c: a6:5a:36:c5:4f:13:bb:cf:e1:12:12:19:47:fa:a2:6d:bf:cd: a4:ac:bd:65:96:af:39:d4:d3:f6:04:28:8d:24:54:f5:7e:9e: 94:2f:32:94:b0:a7:e8:6c:bb:22:d7:15:a0:1b:72:dd:56:4a: 2f:c1:59:25:f8:32:25:ef:d3:1f:3c:fb:3f:b5:a0:91:84:b5: 6e:1a:31:f3:d3:ca:e3:21:63:06:8e:5c:80:ad:d5:29:c1:d5: 1d:83:c9:e0:95:3c:01:93:a0:19:b2:fa:da:79:b8:32:c3:ea: 83:9a:5d:2d:9c:0f:86:9c:d2:23:9b:0a:b2:a7:c3:1f:a3:dd: 1f:8b:d0:51:3f:eb:2d:e8:36:79:fd:8c:44:f4:32:05:46:6a: 76:aa:50:3a:85:f6:8c:78:35:f4:73:52:dc:fb:69:bc:b8:7e: 9a:36:43:3b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICF/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFDRTJFRTlBQkYzMzJE QjA3NzkxMTFDMjBFMThCQjA2MUU1MzE1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1VYxACWg4gwCX33CXVMFnGNHVFfoAFuf9hX1Qg8Y7wa92gxnj H2RtZR1YYOiDRcxIihiBsDfZO3P89o4oVYD+GGEMF/n5/14cd1tbB7YOk7r4pnXA 6kIfEXD6I20k+V7MLle5uvkcxnPz/Wl97CzxhB6oa5u0gGAFzxyBynss6s7V+7Gn x41rsnf63lMrWZVSrYe6Smz0dJEeIfuquSeJBmgGncxqSessbviBg4lk9OAAB2K9 qrnKgfF+Wp1Ss/Wd8P0IcKhrtPdKxFlbqHeeuDLeLgq9VD4blVEnS8UmglsSoWNN 2dIi+/Tn7iH2jg48oVlokhfO1jofWF4o9R2LAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUrOLumr8zLbB3kRHCDhi7Bh5TFSMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3JPTHVtcjh6TGJCM2tS SENEaGk3Qmg1VEZTTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CAwDQYJKoZIhvcNAQELBQADggEBAN4c8JbrOp90qxxKGCRQFwjQDHgtTuhF 3P33erBsGb4JghFLMolcBOqDKNNBuT+z3cmnzoDLn3MGXllooR9hUK4R77jOW91h CFAm+dWCpMJxH03NQ0vlHpLALKZaNsVPE7vP4RISGUf6om2/zaSsvWWWrznU0/YE KI0kVPV+npQvMpSwp+hsuyLXFaAbct1WSi/BWSX4MiXv0x88+z+1oJGEtW4aMfPT yuMhYwaOXICt1SnB1R2DyeCVPAGToBmy+tp5uDLD6oOaXS2cD4ac0iObCrKnwx+j 3R+L0FE/6y3oNnn9jET0MgVGanaqUDqF9ox4NfRzUtz7aby4fpo2Qzs= -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:33 2025 by rpki-client