$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/lwjNSorLO6sogwSEhUFTrpgYnjI.roa File: lwjNSorLO6sogwSEhUFTrpgYnjI.roa (raw, json) Hash identifier: WElPxibr9Anaku2dyTjxj4U8xBg/YOV/t51u3Our9G4= Subject key identifier: 97:08:CD:4A:8A:CB:3B:AB:28:83:04:84:85:41:53:AE:98:18:9E:32 Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Certificate serial: 09EF Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lwjNSorLO6sogwSEhUFTrpgYnjI.roa Signing time: Mon 17 Feb 2025 13:58:33 +0000 ROA not before: Mon 17 Feb 2025 13:58:33 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 398704 IP address blocks: 59.107.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2543 (0x9ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0 Validity Not Before: Feb 17 13:58:33 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9708CD4A8ACB3BAB28830484854153AE98189E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:6b:14:e1:d7:7d:8c:db:49:82:4b:42:ed: 7e:50:92:b5:d4:56:5a:44:02:70:a2:bb:01:0a:df: 91:c3:73:1b:69:ff:b0:9b:ee:55:05:4f:c1:93:33: b1:de:2e:82:2b:97:91:a7:87:3a:70:d9:20:26:98: f0:35:4e:f9:a7:2a:ed:b3:bf:4b:d3:9a:b6:fc:13: 5d:b2:17:2f:10:64:4a:55:dc:05:04:1b:80:17:c8: c7:ea:f6:4f:f4:95:a7:42:cc:c5:bd:da:89:7f:8d: 25:5b:8b:0e:a6:8d:24:ba:91:9d:6f:f5:d9:b7:2a: a6:8b:da:1e:9a:7b:2f:9e:62:f9:c7:42:d1:4c:a6: e4:cd:24:b9:ed:c4:79:58:8b:0d:49:68:f5:ff:4c: 90:fa:7f:a4:61:0a:34:62:ee:86:5b:c1:e5:26:6f: 51:a0:e4:5f:74:04:21:f1:a3:a4:52:00:57:df:57: 5c:be:05:4b:ef:f4:e7:aa:09:4d:bb:e3:92:cb:fe: 1b:88:32:4e:ab:35:dc:f6:62:dd:83:af:82:ce:5c: 33:08:95:08:07:39:e5:35:38:8d:bf:9a:f5:5c:7e: f2:3a:34:ea:6b:ad:a9:ce:1c:ec:9a:c6:cb:5f:63: 29:5d:29:18:27:77:3e:8b:d0:d9:5b:51:48:63:e0: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:CD:4A:8A:CB:3B:AB:28:83:04:84:85:41:53:AE:98:18:9E:32 X509v3 Authority Key Identifier: keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lwjNSorLO6sogwSEhUFTrpgYnjI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.107.192.0/18 Signature Algorithm: sha256WithRSAEncryption 1d:98:9d:44:46:a6:13:ee:7b:3e:d9:98:39:cc:71:82:80:8a: 18:ea:81:30:f2:c5:28:e7:01:9a:f8:3d:58:62:d2:cb:8d:ce: 23:da:96:3d:a6:50:bd:dd:90:5a:fe:36:56:af:c8:19:d8:82: 8d:58:28:c0:27:24:f9:e9:a8:25:d2:42:6d:58:1e:b1:30:40: c1:34:7d:4a:3f:29:b9:18:40:86:8d:a2:2f:6f:bd:f0:bb:b7: 10:a6:ea:2e:b9:f0:dc:ec:f2:ec:8b:80:c7:fa:8d:3c:b0:56: e5:ff:8f:71:a7:c4:94:e3:cf:37:33:2d:6a:0b:d2:e7:60:1c: eb:a9:66:7a:37:f1:6f:a9:d3:37:01:38:79:62:25:63:a4:a0: f2:4a:51:0f:5c:fb:09:00:84:2f:dc:01:ee:47:40:2a:81:d0: 7c:ca:dd:f8:a8:f1:5d:9b:89:35:c1:0d:36:25:3c:c3:01:41: 54:1f:a1:d1:17:f6:62:1f:0e:1a:bd:2b:96:a8:65:ef:a4:bc: 39:38:ff:3c:50:7f:35:8e:b3:b4:06:16:63:47:4c:52:09:ca: ac:70:d1:d4:c8:92:e2:b6:93:9b:5e:95:c0:c6:9d:4b:45:c2: 68:0e:e4:7c:7c:96:9f:59:0a:1d:8d:94:28:fc:9f:85:27:9a: 5f:fa:11:8b -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4 MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTAyMTcx MzU4MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk3MDhDRDRBOEFDQjNC QUIyODgzMDQ4NDg1NDE1M0FFOTgxODlFMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFemsU4dd9jNtJgktC7X5QkrXUVlpEAnCiuwEK35HDcxtp/7Cb 7lUFT8GTM7HeLoIrl5Gnhzpw2SAmmPA1TvmnKu2zv0vTmrb8E12yFy8QZEpV3AUE G4AXyMfq9k/0ladCzMW92ol/jSVbiw6mjSS6kZ1v9dm3KqaL2h6aey+eYvnHQtFM puTNJLntxHlYiw1JaPX/TJD6f6RhCjRi7oZbweUmb1Gg5F90BCHxo6RSAFffV1y+ BUvv9OeqCU2745LL/huIMk6rNdz2Yt2Dr4LOXDMIlQgHOeU1OI2/mvVcfvI6NOpr ranOHOyaxstfYyldKRgndz6L0NlbUUhj4AdvAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUlwjNSorLO6sogwSEhUFTrpgYnjIwHwYDVR0jBBgwFoAUlIG05AkBXY630D82 A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvbHdqTlNvckxPNnNvZ3dTRWhV RlRycGdZbmpJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjtr wDANBgkqhkiG9w0BAQsFAAOCAQEAHZidREamE+57PtmYOcxxgoCKGOqBMPLFKOcB mvg9WGLSy43OI9qWPaZQvd2QWv42Vq/IGdiCjVgowCck+emoJdJCbVgesTBAwTR9 Sj8puRhAho2iL2+98Lu3EKbqLrnw3Ozy7IuAx/qNPLBW5f+PcafElOPPNzMtagvS 52Ac66lmejfxb6nTNwE4eWIlY6Sg8kpRD1z7CQCEL9wB7kdAKoHQfMrd+KjxXZuJ NcENNiU8wwFBVB+h0Rf2Yh8OGr0rlqhl76S8OTj/PFB/NY6ztAYWY0dMUgnKrHDR 1MiS4raTm16VwMadS0XCaA7kfHyWn1kKHY2UKPyfhSeaX/oRiw== -----END CERTIFICATE-----Generated at Wed Jun 4 03:02:27 2025 by rpki-client