$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/uAf5pUFdtYtdOx45Hj4gHBGOKJE.roa File: uAf5pUFdtYtdOx45Hj4gHBGOKJE.roa (raw, json) Hash identifier: 6JrQVp7ySTlmiK0e6//AOGp9uZShw5JAgDSFSxnbhKs= Subject key identifier: B8:07:F9:A5:41:5D:B5:8B:5D:3B:1E:39:1E:3E:20:1C:11:8E:28:91 Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Certificate serial: 1D02 Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/uAf5pUFdtYtdOx45Hj4gHBGOKJE.roa Signing time: Fri 17 Jan 2025 01:26:45 +0000 ROA not before: Fri 17 Jan 2025 01:26:45 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 2401:3480:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7426 (0x1d02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9 Validity Not Before: Jan 17 01:26:45 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B807F9A5415DB58B5D3B1E391E3E201C118E2891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:66:e2:b9:a1:59:b0:cf:b5:bc:8b:0d:a3: 7d:9a:84:cb:9a:67:20:8d:c7:b5:e9:ad:27:34:7b: 73:fc:3d:af:ef:ee:e9:46:89:09:b1:d8:d0:37:08: 35:5a:b4:6b:18:ef:87:66:95:ef:92:3a:48:95:18: 0c:c9:50:2b:a2:d8:e1:b3:d4:14:c3:6f:0c:06:09: 83:be:7e:10:30:ff:01:e8:10:9f:5b:96:61:1e:87: 35:83:01:25:07:20:b6:82:21:ff:8a:d6:61:51:e2: 3b:a3:8f:84:03:54:f1:e6:e7:3e:9f:e2:1a:23:84: 31:b5:32:c4:b1:62:73:ca:e5:e1:f7:ae:51:42:8f: 2b:71:05:9d:72:65:77:b6:2b:d6:ba:92:e9:e7:3b: a6:fa:69:bc:6f:7b:1e:55:f5:e1:6c:0a:6f:52:d9: 14:f3:bd:cf:fc:08:39:14:2e:ec:73:85:a1:fd:18: 6e:44:13:5e:58:c3:f1:75:59:19:48:36:cc:c1:b3: d4:0f:48:13:43:a5:03:d1:f6:bd:e0:3a:09:6e:03: fd:a3:de:a8:35:55:48:3b:18:b0:23:5c:d6:b0:0d: f0:4f:be:63:04:eb:a5:81:f4:d1:34:0b:af:cd:4c: ea:b5:dd:78:f3:4d:e8:e4:b1:e9:40:a9:ec:a3:01: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:07:F9:A5:41:5D:B5:8B:5D:3B:1E:39:1E:3E:20:1C:11:8E:28:91 X509v3 Authority Key Identifier: keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/uAf5pUFdtYtdOx45Hj4gHBGOKJE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3480:2000::/48 Signature Algorithm: sha256WithRSAEncryption 9a:9e:e7:1e:70:3f:d9:04:0f:80:50:5b:1b:61:e4:2f:7f:f9: c2:77:41:78:d1:28:19:6d:21:b5:d7:0b:95:23:70:56:f1:a0: 64:e6:bb:72:f9:04:d6:87:da:26:bd:d1:de:d9:a7:35:3a:99: 14:15:45:24:0e:69:45:9d:13:5e:1c:cf:91:21:59:c9:cc:0c: cb:e0:ba:fa:ba:be:df:68:ce:3e:90:19:cb:9c:51:88:67:a1: 70:43:fa:46:41:04:9e:59:76:90:66:32:61:52:9b:6e:bc:47: 70:a1:c1:53:4c:4f:20:c8:6c:6f:a5:46:cb:b9:cd:4b:48:e6: a7:51:b2:01:84:91:22:db:fd:18:e9:8d:6c:bd:d3:90:3b:79: b2:8a:cf:1e:fd:47:de:23:53:56:ae:e5:87:dc:02:9d:49:c6: 6e:b7:be:2c:40:78:72:74:ba:55:02:bf:60:c5:bb:67:44:0c: a4:1c:cf:12:2d:c9:97:4c:4e:99:39:c5:5c:34:5c:67:d5:71: fa:b0:f8:fb:fb:1f:1c:c6:dc:df:52:21:51:7b:f3:bd:4a:99: 55:58:b9:c3:84:0d:1a:62:c1:cd:7e:72:f7:44:13:7f:ce:b2: d6:b4:ae:17:dc:60:46:c4:00:ce:39:a2:16:8b:34:92:ad:87: 42:6d:e0:4d -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICHQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw MTI2NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI4MDdGOUE1NDE1REI1 OEI1RDNCMUUzOTFFM0UyMDFDMTE4RTI4OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxpGbiuaFZsM+1vIsNo32ahMuaZyCNx7XprSc0e3P8Pa/v7ulG iQmx2NA3CDVatGsY74dmle+SOkiVGAzJUCui2OGz1BTDbwwGCYO+fhAw/wHoEJ9b lmEehzWDASUHILaCIf+K1mFR4jujj4QDVPHm5z6f4hojhDG1MsSxYnPK5eH3rlFC jytxBZ1yZXe2K9a6kunnO6b6abxvex5V9eFsCm9S2RTzvc/8CDkULuxzhaH9GG5E E15Yw/F1WRlINszBs9QPSBNDpQPR9r3gOgluA/2j3qg1VUg7GLAjXNawDfBPvmME 66WB9NE0C6/NTOq13XjzTejkselAqeyjAegVAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUuAf5pUFdtYtdOx45Hj4gHBGOKJEwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3 L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3VBZjVwVUZkdFl0ZE94 NDVIajRnSEJHT0tKRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkATSAIAAwDQYJKoZIhvcNAQELBQADggEBAJqe5x5wP9kED4BQWxth5C9/+cJ3 QXjRKBltIbXXC5UjcFbxoGTmu3L5BNaH2ia90d7ZpzU6mRQVRSQOaUWdE14cz5Eh WcnMDMvguvq6vt9ozj6QGcucUYhnoXBD+kZBBJ5ZdpBmMmFSm268R3ChwVNMTyDI bG+lRsu5zUtI5qdRsgGEkSLb/RjpjWy905A7ebKKzx79R94jU1au5YfcAp1Jxm63 vixAeHJ0ulUCv2DFu2dEDKQczxItyZdMTpk5xVw0XGfVcfqw+Pv7HxzG3N9SIVF7 871KmVVYucOEDRpiwc1+cvdEE3/Osta0rhfcYEbEAM45ohaLNJKth0Jt4E0= -----END CERTIFICATE-----Generated at Fri Apr 4 18:48:53 2025 by rpki-client