$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/VxPk5iM-37fhsjehwvXgJSlF4_c.roa File: VxPk5iM-37fhsjehwvXgJSlF4_c.roa (raw, json) Hash identifier: N8QG1U8qF61cp5UUG9XSTk3GsyBmbRRj5hvkeQxrZEg= Subject key identifier: 57:13:E4:E6:23:3E:DF:B7:E1:B2:37:A1:C2:F5:E0:25:29:45:E3:F7 Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Certificate serial: 1D97 Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/VxPk5iM-37fhsjehwvXgJSlF4_c.roa Signing time: Fri 28 Feb 2025 05:53:29 +0000 ROA not before: Fri 28 Feb 2025 05:53:29 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4134 IP address blocks: 115.31.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 09:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7575 (0x1d97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94 Validity Not Before: Feb 28 05:53:29 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=5713E4E6233EDFB7E1B237A1C2F5E0252945E3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:f3:f4:ba:25:f8:88:d9:75:8f:26:5f:5d: 1d:30:f9:94:4b:d5:93:9d:b7:da:80:bf:32:1a:7e: 07:18:a9:17:98:b2:a3:c7:fd:ea:dd:53:0f:ae:d6: c6:aa:ef:bc:a4:a2:85:48:57:73:ff:ed:d8:94:07: 27:94:db:58:82:10:cf:32:1e:4c:33:8b:6a:dd:56: 09:e9:24:5a:f2:05:1c:6d:e0:28:01:e6:d8:a3:6b: ea:89:89:3a:55:1e:cf:39:82:6b:ec:37:08:dd:d0: 4d:60:6b:f5:17:2a:42:c3:64:fc:8c:f7:78:b0:11: e1:7e:32:92:db:17:dd:ee:a0:f5:a7:46:20:41:fa: d6:ee:ed:9d:09:9c:75:87:bd:5d:71:0e:69:82:c6: ee:3b:f3:14:fc:bd:b5:85:af:37:49:b6:9b:59:6e: 5f:6f:2d:ee:60:d5:01:88:26:a3:56:1e:9f:5b:bf: 9d:53:8f:1d:3e:13:ab:46:a6:eb:61:ab:97:50:9a: 13:c7:c1:1d:f5:3d:11:aa:41:42:c8:a1:ed:3d:8c: 7a:dd:d3:82:6b:04:9c:01:15:4d:a3:21:3e:80:2d: 47:46:f9:a2:71:52:8c:78:e9:98:c6:63:93:89:dc: b1:d5:a0:17:64:fc:6e:57:23:95:19:45:14:c0:44: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:E4:E6:23:3E:DF:B7:E1:B2:37:A1:C2:F5:E0:25:29:45:E3:F7 X509v3 Authority Key Identifier: keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/VxPk5iM-37fhsjehwvXgJSlF4_c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.31.68.0/22 Signature Algorithm: sha256WithRSAEncryption d9:e1:d4:f9:9a:2c:be:85:7f:14:53:a3:ee:61:aa:cd:f7:bc: 43:7f:76:55:50:0b:31:cb:a5:36:f4:be:8c:ba:d0:e2:bb:2f: c0:c1:0f:2a:16:b6:96:01:46:d8:a6:ae:e2:bf:c5:61:1c:17: e2:16:8e:40:77:27:1a:d9:08:98:8d:a6:28:fc:e6:34:fe:33: 46:4b:b6:e4:c4:0e:b0:1f:7c:51:51:fe:ba:ae:27:cd:b2:34: 20:a6:a4:16:35:01:e7:2c:77:19:96:16:b3:5c:8c:67:a9:c5: b8:a4:d0:f6:b4:93:47:0f:cc:d2:73:65:41:eb:a2:b0:4d:8b: 68:e2:9f:42:a0:c8:2b:b5:93:6b:54:d1:75:1e:5f:81:43:8d: 36:13:37:10:37:14:d5:90:1e:3c:d4:82:6d:84:dd:94:a5:9d: f0:69:25:e6:11:58:68:39:b3:d9:3f:13:4d:85:04:21:81:c1: 97:4c:05:bf:be:f6:64:c2:8c:ee:0b:7c:4e:8a:ee:55:94:05: 51:6b:9e:5b:42:45:25:93:9e:c3:dd:d7:2b:9b:80:f1:1c:13: 40:82:18:a0:78:6a:d0:d1:2c:6c:25:ba:4f:65:bf:0d:21:93: 8d:d2:85:67:da:b1:82:3d:3c:db:c9:66:e0:f1:21:d5:00:90: 1c:3b:f9:8f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4 M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yNTAyMjgw NTUzMjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU3MTNFNEU2MjMzRURG QjdFMUIyMzdBMUMyRjVFMDI1Mjk0NUUzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPyPP0uiX4iNl1jyZfXR0w+ZRL1ZOdt9qAvzIafgcYqReYsqPH /erdUw+u1saq77ykooVIV3P/7diUByeU21iCEM8yHkwzi2rdVgnpJFryBRxt4CgB 5tija+qJiTpVHs85gmvsNwjd0E1ga/UXKkLDZPyM93iwEeF+MpLbF93uoPWnRiBB +tbu7Z0JnHWHvV1xDmmCxu478xT8vbWFrzdJtptZbl9vLe5g1QGIJqNWHp9bv51T jx0+E6tGputhq5dQmhPHwR31PRGqQULIoe09jHrd04JrBJwBFU2jIT6ALUdG+aJx Uox46ZjGY5OJ3LHVoBdk/G5XI5UZRRTARL+3AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUVxPk5iM+37fhsjehwvXgJSlF4/cwHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL1Z4UGs1aU0tMzdmaHNq ZWh3dlhnSlNsRjRfYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJzH0QwDQYJKoZIhvcNAQELBQADggEBANnh1PmaLL6FfxRTo+5hqs33vEN/dlVQ CzHLpTb0voy60OK7L8DBDyoWtpYBRtimruK/xWEcF+IWjkB3JxrZCJiNpij85jT+ M0ZLtuTEDrAffFFR/rquJ82yNCCmpBY1AecsdxmWFrNcjGepxbik0Pa0k0cPzNJz ZUHrorBNi2jin0KgyCu1k2tU0XUeX4FDjTYTNxA3FNWQHjzUgm2E3ZSlnfBpJeYR WGg5s9k/E02FBCGBwZdMBb++9mTCjO4LfE6K7lWUBVFrnltCRSWTnsPd1yubgPEc E0CCGKB4atDRLGwluk9lvw0hk43ShWfasYI9PNvJZuDxIdUAkBw7+Y8= -----END CERTIFICATE-----Generated at Thu Mar 13 07:16:43 2025 by rpki-client