$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa File: M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa (raw, json) Hash identifier: m9tbtocpg4JKbwsMbWXBIPlz4frao3dfUdJHi7zrZgg= Subject key identifier: 33:95:B1:88:89:58:09:6E:92:65:44:D1:0D:36:F1:6B:62:E7:CE:35 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D06 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa Signing time: Fri 17 Jan 2025 01:26:46 +0000 ROA not before: Fri 17 Jan 2025 01:26:46 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59077 IP address blocks: 2401:3480::/36 maxlen: 36 2401:3480:2000::/36 maxlen: 36 2401:3480:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7430 (0x1d06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:46 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=3395B1888958096E926544D10D36F16B62E7CE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:44:0e:79:de:ae:d4:74:88:67:92:47:1e:dc: 28:52:a1:58:ab:a7:39:db:24:74:c0:82:1e:58:5e: ce:3d:c9:62:c0:ac:2d:64:a4:92:39:0b:c2:a6:8a: 99:30:23:00:cc:8a:19:ac:d5:96:8c:8a:0e:b1:de: 70:c2:e4:de:dd:2a:dc:bc:58:be:f2:52:82:b4:34: b1:7e:df:39:1f:8d:24:9f:f9:02:57:2b:fe:f6:3c: 77:48:bb:93:62:fb:e0:c0:e9:47:6b:a8:42:c2:db: d2:70:14:79:cb:1c:b4:59:63:76:95:50:30:42:31: 1b:4a:e1:27:94:e4:4a:9a:0e:7a:cc:c0:16:29:dc: 08:2f:06:bd:9a:ff:c3:ac:b9:c2:d5:17:6b:7c:ea: 53:5a:68:6a:7d:2c:45:06:f8:95:fd:45:2e:91:27: fa:81:22:90:ab:af:58:d6:00:f5:a8:1b:de:fe:60: b0:97:76:12:1b:51:75:40:b8:83:e3:4a:10:37:62: d0:39:de:2d:56:20:5a:9c:57:b6:66:d6:0d:49:e2: 59:5a:b2:f0:19:63:9b:93:eb:20:11:61:ba:c5:85: ea:fc:5c:34:ec:9b:bf:63:78:82:16:9c:69:8c:b7: e1:2d:06:80:ee:d1:50:41:71:68:a5:d8:f1:f8:c7: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:95:B1:88:89:58:09:6E:92:65:44:D1:0D:36:F1:6B:62:E7:CE:35 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/M5WxiIlYCW6SZUTRDTbxa2LnzjU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3480::/36 2401:3480:2000::/35 Signature Algorithm: sha256WithRSAEncryption a0:7f:a4:b6:45:41:4e:ea:cb:86:2c:ce:bf:67:1b:12:c1:38: 6b:92:fe:c1:a3:16:cc:31:4e:99:3e:63:62:51:10:37:81:fa: eb:8f:76:4d:cc:72:64:ac:04:d4:f4:a5:e4:e3:cc:53:f1:28: 82:79:20:ee:74:c7:16:18:3c:b2:a8:1e:b9:3d:f9:df:fb:cb: 77:1f:b3:d4:8a:87:8b:6f:35:66:6e:97:7a:c6:53:26:8d:ea: 7d:4d:1b:b3:e7:c1:96:40:51:e6:27:1d:b4:da:a4:19:2d:a5: b5:0d:46:be:39:28:c8:eb:8a:0a:0a:47:45:05:4d:27:6e:40: 59:fe:22:1e:65:0e:d0:d0:8e:94:05:db:2a:84:85:64:97:d5: 06:fb:b4:d7:61:0b:0f:ba:93:39:c4:e2:80:af:be:22:60:af: a5:91:6b:7d:e3:91:91:41:cc:e3:7a:36:1c:36:51:03:a3:95: 1a:fd:75:b8:ee:e4:1d:89:32:a9:25:49:c5:6d:16:61:2c:1f: 64:79:28:67:b1:2a:ff:c0:c7:31:32:a8:65:73:8a:a8:52:15: 79:77:9c:38:78:a5:3d:0d:cb:e4:3c:19:51:47:21:fb:a7:77: bf:e1:b2:c3:9c:16:25:ab:37:6c:f6:ab:7e:62:27:c3:57:8f: 25:0e:da:ae -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgICHQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMzOTVCMTg4ODk1ODA5 NkU5MjY1NDREMTBEMzZGMTZCNjJFN0NFMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsRA553q7UdIhnkkce3ChSoVirpznbJHTAgh5YXs49yWLArC1k pJI5C8KmipkwIwDMihms1ZaMig6x3nDC5N7dKty8WL7yUoK0NLF+3zkfjSSf+QJX K/72PHdIu5Ni++DA6UdrqELC29JwFHnLHLRZY3aVUDBCMRtK4SeU5EqaDnrMwBYp 3AgvBr2a/8OsucLVF2t86lNaaGp9LEUG+JX9RS6RJ/qBIpCrr1jWAPWoG97+YLCX dhIbUXVAuIPjShA3YtA53i1WIFqcV7Zm1g1J4llasvAZY5uT6yARYbrFher8XDTs m79jeIIWnGmMt+EtBoDu0VBBcWil2PH4x+7hAgMBAAGjggH7MIIB9zAdBgNVHQ4E FgQUM5WxiIlYCW6SZUTRDTbxa2LnzjUwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L001V3hpSWxZQ1c2U1pV VFJEVGJ4YTJMbnpqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBAD BgQkATSAAAMGBSQBNIAgMA0GCSqGSIb3DQEBCwUAA4IBAQCgf6S2RUFO6suGLM6/ ZxsSwThrkv7BoxbMMU6ZPmNiURA3gfrrj3ZNzHJkrATU9KXk48xT8SiCeSDudMcW GDyyqB65Pfnf+8t3H7PUioeLbzVmbpd6xlMmjep9TRuz58GWQFHmJx202qQZLaW1 DUa+OSjI64oKCkdFBU0nbkBZ/iIeZQ7Q0I6UBdsqhIVkl9UG+7TXYQsPupM5xOKA r74iYK+lkWt945GRQczjejYcNlEDo5Ua/XW47uQdiTKpJUnFbRZhLB9keShnsSr/ wMcxMqhlc4qoUhV5d5w4eKU9DcvkPBlRRyH7p3e/4bLDnBYlqzds9qt+YifDV48l Dtqu -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:07 2025 by rpki-client