$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa File: KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa (raw, json) Hash identifier: Np74l2zvMHdN3u9vLx3Kbuovv22rSj7qXcnMGAme8L4= Subject key identifier: 29:BA:D2:A7:E2:40:D9:71:76:42:5F:21:48:2A:C2:D4:26:CB:B7:A8 Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Certificate serial: 12A9 Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa Signing time: Fri 17 Jan 2025 01:29:56 +0000 ROA not before: Fri 17 Jan 2025 01:29:56 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63199 IP address blocks: 106.3.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 01:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4777 (0x12a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285 Validity Not Before: Jan 17 01:29:56 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=29BAD2A7E240D97176425F21482AC2D426CBB7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:66:f8:67:67:1b:59:8e:14:ed:35:e2:d4: 25:b3:91:09:60:75:cd:44:8b:1b:e9:8c:77:3e:a5: 85:bc:d5:79:f5:04:3f:c5:f8:73:50:d4:59:4a:91: 14:9b:67:a8:7a:d3:07:35:c6:53:5b:ef:38:8f:63: 99:b4:05:95:c8:59:e0:ca:ff:0c:9c:56:43:71:12: 5c:11:19:ce:a6:1f:6e:f0:4c:b3:e5:97:83:84:17: 24:41:f0:99:7a:02:f0:af:56:d2:ab:94:9d:c3:39: 96:92:90:73:f6:75:a8:90:79:32:11:13:f1:a0:79: ac:c7:54:16:f7:56:96:ea:37:4a:1c:4f:d3:9e:b0: 09:9a:5f:e4:5c:9a:26:d6:9b:76:f5:c9:1f:42:31: 8c:d2:68:a1:86:c0:31:cc:f2:cc:5a:d3:e1:1a:f0: d4:1b:92:d7:40:e8:10:23:29:08:35:98:95:8b:2b: f6:01:e7:41:de:49:89:94:f3:69:82:a3:0f:a4:e1: 04:32:21:0c:6e:8e:c3:75:df:13:f1:39:69:cc:79: e1:e7:ee:d1:ed:83:a1:e2:85:cd:e5:bd:08:b4:56: 0a:7f:29:cd:ee:cf:a6:f0:81:0a:9b:e1:6d:e1:98: 19:fb:66:d1:00:71:64:7f:f9:db:de:3c:81:0b:b9: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BA:D2:A7:E2:40:D9:71:76:42:5F:21:48:2A:C2:D4:26:CB:B7:A8 X509v3 Authority Key Identifier: keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/KbrSp-JA2XF2Ql8hSCrC1CbLt6g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.3.139.0/24 Signature Algorithm: sha256WithRSAEncryption 03:a4:cf:f8:85:c3:6a:61:06:fb:e6:26:fd:b2:2e:04:d1:17: ba:96:1a:c8:a2:19:3d:fb:de:df:ba:6e:be:87:50:d5:37:8d: 62:69:4a:8d:f4:90:58:e1:ce:2a:bd:bd:22:de:f0:c1:d7:11: 84:f8:5b:14:0b:3d:2a:09:6a:15:7a:04:2e:17:73:7e:f0:b6: c9:0a:9e:ce:44:73:fd:67:45:41:88:ed:76:9c:f0:6f:56:2e: a9:82:10:1d:d3:eb:26:03:90:5f:65:69:69:59:84:a8:44:85: 32:9b:8e:60:55:ab:1f:d9:0e:63:50:c6:9d:a0:b5:e5:30:07: 56:6f:3b:9e:c2:60:0b:7b:4a:84:9a:97:fb:d0:4c:e8:4a:3a: 27:95:20:a8:7b:b0:1f:8d:49:6b:9b:48:f1:cf:e8:e5:8f:6c: 55:35:1e:ba:b9:9f:e9:7a:99:1a:e1:84:10:b8:f5:3f:0c:8a: fe:63:2a:3a:bc:3f:af:9d:1a:41:e5:7b:c8:20:ec:d4:8e:90: 89:9a:1d:d7:07:10:0e:9e:25:cf:7a:7a:ab:2e:f1:88:c3:00: b5:cd:07:4c:87:56:43:26:58:06:f7:a4:0e:43:0f:64:8b:41: 0a:78:1e:3d:97:af:2f:fb:ad:61:b7:ba:fa:9f:3c:2e:3c:63: a6:0d:79:9f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICEqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREE5 OTNGRTVDMDRGRjlGMjJDNTI2MjYzMEJFQzM3RjVCM0E3ODI4NTAeFw0yNTAxMTcw MTI5NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI5QkFEMkE3RTI0MEQ5 NzE3NjQyNUYyMTQ4MkFDMkQ0MjZDQkI3QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSFmb4Z2cbWY4U7TXi1CWzkQlgdc1EixvpjHc+pYW81Xn1BD/F +HNQ1FlKkRSbZ6h60wc1xlNb7ziPY5m0BZXIWeDK/wycVkNxElwRGc6mH27wTLPl l4OEFyRB8Jl6AvCvVtKrlJ3DOZaSkHP2daiQeTIRE/GgeazHVBb3VpbqN0ocT9Oe sAmaX+RcmibWm3b1yR9CMYzSaKGGwDHM8sxa0+Ea8NQbktdA6BAjKQg1mJWLK/YB 50HeSYmU82mCow+k4QQyIQxujsN13xPxOWnMeeHn7tHtg6Hihc3lvQi0Vgp/Kc3u z6bwgQqb4W3hmBn7ZtEAcWR/+dvePIELuWw5AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUKbrSp+JA2XF2Ql8hSCrC1CbLt6gwHwYDVR0jBBgwFoAU2pk/5cBP+fIsUmJj C+w39bOngoUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0 LzJwa181Y0JQLWZJc1VtSmpDLXczOWJPbmdvVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvMnBrXzVjQlAtZklzVW1KakMtdzM5Yk9uZ29VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU0L0ticlNwLUpBMlhGMlFs OGhTQ3JDMUNiTHQ2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABqA4swDQYJKoZIhvcNAQELBQADggEBAAOkz/iFw2phBvvmJv2yLgTRF7qWGsii GT373t+6br6HUNU3jWJpSo30kFjhziq9vSLe8MHXEYT4WxQLPSoJahV6BC4Xc37w tskKns5Ec/1nRUGI7Xac8G9WLqmCEB3T6yYDkF9laWlZhKhEhTKbjmBVqx/ZDmNQ xp2gteUwB1ZvO57CYAt7SoSal/vQTOhKOieVIKh7sB+NSWubSPHP6OWPbFU1Hrq5 n+l6mRrhhBC49T8Miv5jKjq8P6+dGkHle8gg7NSOkImaHdcHEA6eJc96eqsu8YjD ALXNB0yHVkMmWAb3pA5DD2SLQQp4Hj2Xry/7rWG3uvqfPC48Y6YNeZ8= -----END CERTIFICATE-----Generated at Thu Apr 17 00:45:49 2025 by rpki-client