$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/bE6EGAOliwyC4ic3M9ouQLQOlSw.roa File: bE6EGAOliwyC4ic3M9ouQLQOlSw.roa (raw, json) Hash identifier: vuGBAhB+4vxK7Vaj1k+j7SD4BUEWJHiiafgwQiJkBZs= Subject key identifier: 6C:4E:84:18:03:A5:8B:0C:82:E2:27:37:33:DA:2E:40:B4:0E:95:2C Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 09EB Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/bE6EGAOliwyC4ic3M9ouQLQOlSw.roa Signing time: Mon 17 Feb 2025 13:58:31 +0000 ROA not before: Mon 17 Feb 2025 13:58:31 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 18811 IP address blocks: 59.107.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Feb 17 13:58:31 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6C4E841803A58B0C82E2273733DA2E40B40E952C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:1d:ea:f9:48:7f:ce:fb:88:44:be:1f:81: e3:30:40:15:43:eb:fd:62:4b:65:7c:bf:ff:06:44: 6c:f0:16:c2:59:fe:25:09:e9:23:04:2a:db:a0:fc: 50:43:01:29:26:c9:8f:9b:20:34:78:bd:c3:84:c9: 89:7e:5b:e1:fb:e3:60:27:3e:07:c5:02:1b:28:6d: e3:9d:65:fa:65:ca:de:9f:90:0b:2e:aa:0a:cd:fa: 64:ae:fc:dc:5f:8a:fd:a1:4b:3f:5f:b5:6e:20:e4: a7:ce:62:35:43:84:2f:f4:87:c9:d0:c4:ab:ad:48: d6:bd:fe:b5:ae:aa:94:92:80:6e:98:bb:67:c4:b4: cc:cf:7a:08:43:d3:4f:ad:69:39:6a:1e:c6:31:a9: eb:60:86:2c:8b:bf:8f:2c:f0:05:c6:38:4d:bc:5d: 47:71:23:dd:ae:a3:52:af:3c:b6:6f:ad:a8:82:ea: a5:77:32:e9:dc:ab:68:0c:02:04:4b:35:b4:be:ef: 08:f4:57:60:82:cf:d7:53:f1:3a:26:76:34:7a:46: a4:a4:a2:f3:6b:4e:f0:e1:d8:85:ef:ea:0a:b9:7b: bf:c5:05:5b:3d:5f:29:3b:a8:04:ae:8d:30:ca:01: 61:13:00:3f:96:83:8e:72:2f:bd:a3:7c:05:68:95: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:84:18:03:A5:8B:0C:82:E2:27:37:33:DA:2E:40:B4:0E:95:2C X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/bE6EGAOliwyC4ic3M9ouQLQOlSw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.107.192.0/18 Signature Algorithm: sha256WithRSAEncryption c9:c4:11:f1:6e:2d:8c:5f:e5:7e:7d:5d:34:d6:85:10:55:ea: 23:24:bc:84:04:76:cd:98:00:6f:b7:04:d4:63:eb:86:cd:42: 41:32:ec:3f:b7:d9:54:d9:d9:d9:fb:35:8f:4f:f0:1d:11:25: bb:06:88:a3:d6:c5:a1:87:ee:55:86:8f:c8:ce:0a:ca:e8:5e: 0c:0d:a5:38:e7:24:12:71:f7:73:ec:1f:a9:13:42:c1:60:21: b0:48:71:72:93:15:3f:df:38:c2:58:28:a2:ef:37:e2:97:d6: f2:0f:0a:cd:fe:47:ef:19:a2:61:85:26:d3:3a:d9:6e:f2:29: 47:a2:1e:67:08:64:ea:95:5e:37:f4:43:38:6d:10:0f:40:81: 47:1e:77:b1:88:9c:1d:9b:9a:ff:58:a0:7a:8c:aa:9d:8d:6c: e7:09:5d:64:14:5f:31:b2:2d:26:b7:c7:8a:11:65:73:73:fb: 16:c3:43:8f:88:92:e6:56:81:f0:c0:7b:54:17:06:05:a6:d7: b8:a0:05:af:e4:0d:66:a1:e5:8b:85:72:0f:12:20:16:8e:f3: df:f9:80:a1:95:71:8e:18:df:1a:bf:0e:8c:d2:fe:79:3d:39: de:4d:02:d2:04:2b:62:c4:22:96:e9:e7:00:fe:2c:0c:e5:06: a9:af:45:a2 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICCeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTAyMTcx MzU4MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZDNEU4NDE4MDNBNThC MEM4MkUyMjczNzMzREEyRTQwQjQwRTk1MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrDB3q+Uh/zvuIRL4fgeMwQBVD6/1iS2V8v/8GRGzwFsJZ/iUJ 6SMEKtug/FBDASkmyY+bIDR4vcOEyYl+W+H742AnPgfFAhsobeOdZfplyt6fkAsu qgrN+mSu/Nxfiv2hSz9ftW4g5KfOYjVDhC/0h8nQxKutSNa9/rWuqpSSgG6Yu2fE tMzPeghD00+taTlqHsYxqetghiyLv48s8AXGOE28XUdxI92uo1KvPLZvraiC6qV3 Muncq2gMAgRLNbS+7wj0V2CCz9dT8TomdjR6RqSkovNrTvDh2IXv6gq5e7/FBVs9 Xyk7qASujTDKAWETAD+Wg45yL72jfAVold1dAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUbE6EGAOliwyC4ic3M9ouQLQOlSwwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvYkU2RUdBT2xpd3lDNGljM005 b3VRTFFPbFN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjtr wDANBgkqhkiG9w0BAQsFAAOCAQEAycQR8W4tjF/lfn1dNNaFEFXqIyS8hAR2zZgA b7cE1GPrhs1CQTLsP7fZVNnZ2fs1j0/wHREluwaIo9bFoYfuVYaPyM4KyuheDA2l OOckEnH3c+wfqRNCwWAhsEhxcpMVP984wlgoou834pfW8g8Kzf5H7xmiYYUm0zrZ bvIpR6IeZwhk6pVeN/RDOG0QD0CBRx53sYicHZua/1igeoyqnY1s5wldZBRfMbIt JrfHihFlc3P7FsNDj4iS5laB8MB7VBcGBabXuKAFr+QNZqHli4VyDxIgFo7z3/mA oZVxjhjfGr8OjNL+eT053k0C0gQrYsQilunnAP4sDOUGqa9Fog== -----END CERTIFICATE-----Generated at Fri Apr 4 18:33:18 2025 by rpki-client