$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/z2tQnYIcwYNi5mtl41qsGHPqf84.roa File: z2tQnYIcwYNi5mtl41qsGHPqf84.roa (raw, json) Hash identifier: 1RNhAGCZmYuAX3ecLRypMBqhU1csjZJx3VFquJWTDKo= Subject key identifier: CF:6B:50:9D:82:1C:C1:83:62:E6:6B:65:E3:5A:AC:18:73:EA:7F:CE Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18DA Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z2tQnYIcwYNi5mtl41qsGHPqf84.roa Signing time: Fri 17 Jan 2025 01:25:41 +0000 ROA not before: Fri 17 Jan 2025 01:25:41 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6362 (0x18da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:41 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=CF6B509D821CC18362E66B65E35AAC1873EA7FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8a:46:d2:05:a9:02:fe:ea:aa:70:a2:ff:47: cc:30:0e:7c:e4:65:6e:f7:7c:02:bb:52:a2:01:6a: b4:5f:68:be:d9:44:0f:bc:dc:a6:d0:d0:7c:66:68: 70:f1:95:6b:e8:b5:85:7f:a1:a3:9c:22:ef:fb:36: ef:d4:97:be:0c:0e:b2:7f:a0:39:7f:34:72:b4:d0: f8:f5:42:7f:5e:80:55:a3:dc:9e:ec:e4:78:01:0c: 08:93:82:d0:3f:a4:7d:97:5f:8b:0b:c4:46:5b:32: 69:f9:93:ef:58:57:92:28:a2:f2:44:c3:0f:19:c1: c9:3d:fc:d7:61:64:2a:fe:84:bb:2d:75:ca:d4:9a: 62:a3:69:f1:e9:f5:cb:62:22:76:16:0d:e3:0c:0c: 4b:a8:81:a6:44:ed:13:ea:1f:1f:5e:e0:67:06:e7: c6:db:ab:7b:5c:7b:1a:b2:ac:a5:cb:99:97:0e:e7: a7:17:2d:db:51:1a:8e:be:31:c9:63:e5:fa:47:2d: b1:3a:84:68:eb:4d:5f:cc:bf:de:60:ad:56:11:91: 9c:df:16:6c:42:4d:1d:78:91:7b:44:78:62:0e:20: 7f:42:1a:b6:83:94:9d:00:57:c8:eb:b9:0b:da:c1: df:f5:1e:2d:a1:dd:78:81:c5:2b:47:17:ea:f5:b2: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:50:9D:82:1C:C1:83:62:E6:6B:65:E3:5A:AC:18:73:EA:7F:CE X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z2tQnYIcwYNi5mtl41qsGHPqf84.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.32.0/22 Signature Algorithm: sha256WithRSAEncryption 37:17:5f:9b:ba:95:da:5f:55:da:0b:99:bf:14:8c:9f:63:03: 3c:07:17:2a:91:fe:89:52:09:9f:52:f0:ab:fc:a4:19:61:e5: b6:7a:56:f2:ce:4c:f7:73:dd:e3:75:2a:43:77:37:38:60:29: 63:46:fa:06:d7:0c:17:81:eb:e8:af:6f:b6:73:31:6d:29:44: f0:55:37:b7:1c:dc:cc:90:d6:c3:d3:0c:5f:9d:27:1c:e0:13: 32:63:de:12:3b:d2:ed:e9:33:e4:70:84:20:71:5f:18:18:65: 3d:77:54:36:a9:fb:5e:2b:3b:df:3c:b2:da:b3:cb:69:52:91: 94:1c:bf:2c:ac:71:79:ac:37:bf:3e:99:ec:7c:cd:ec:97:11: 03:d0:8d:b2:4b:4e:e7:00:db:e4:ed:29:29:a9:70:43:41:a0: 56:31:00:4c:07:e1:c7:a3:e4:99:9d:b9:de:2d:87:7e:cc:b7: 9b:fe:7a:ad:86:ba:9c:8b:e3:f0:c7:87:79:fe:e9:66:31:2b: ea:82:71:8c:5b:00:fa:75:10:f0:48:82:7e:29:1c:ae:1c:81: 99:0b:5c:c3:0d:5b:89:5a:c3:1b:d8:db:29:e0:27:79:dc:31: 6e:7e:7a:c3:1f:91:cc:a4:90:80:51:8e:e0:e0:6d:51:44:a8: a4:6d:a7:23 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENGNkI1MDlEODIxQ0Mx ODM2MkU2NkI2NUUzNUFBQzE4NzNFQTdGQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuikbSBakC/uqqcKL/R8wwDnzkZW73fAK7UqIBarRfaL7ZRA+8 3KbQ0HxmaHDxlWvotYV/oaOcIu/7Nu/Ul74MDrJ/oDl/NHK00Pj1Qn9egFWj3J7s 5HgBDAiTgtA/pH2XX4sLxEZbMmn5k+9YV5IoovJEww8Zwck9/NdhZCr+hLstdcrU mmKjafHp9ctiInYWDeMMDEuogaZE7RPqHx9e4GcG58bbq3tcexqyrKXLmZcO56cX LdtRGo6+Mclj5fpHLbE6hGjrTV/Mv95grVYRkZzfFmxCTR14kXtEeGIOIH9CGraD lJ0AV8jruQvawd/1Hi2h3XiBxStHF+r1soQpAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUz2tQnYIcwYNi5mtl41qsGHPqf84wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3oydFFuWUljd1lOaTVt dGw0MXFzR0hQcWY4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CAwDQYJKoZIhvcNAQELBQADggEBADcXX5u6ldpfVdoLmb8UjJ9jAzwHFyqR /olSCZ9S8Kv8pBlh5bZ6VvLOTPdz3eN1KkN3NzhgKWNG+gbXDBeB6+ivb7ZzMW0p RPBVN7cc3MyQ1sPTDF+dJxzgEzJj3hI70u3pM+RwhCBxXxgYZT13VDap+14rO988 stqzy2lSkZQcvyyscXmsN78+mex8zeyXEQPQjbJLTucA2+TtKSmpcENBoFYxAEwH 4cej5Jmdud4th37Mt5v+eq2GupyL4/DHh3n+6WYxK+qCcYxbAPp1EPBIgn4pHK4c gZkLXMMNW4lawxvY2yngJ3ncMW5+esMfkcykkIBRjuDgbVFEqKRtpyM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:48:19 2025 by rpki-client