$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/xsxZblScrv5MGFjEfMsCB0UV9_8.roa File: xsxZblScrv5MGFjEfMsCB0UV9_8.roa (raw, json) Hash identifier: fe7w2BYhQT4k89kIyj8VK35Y/ggTi+haDsUfgrYFNXc= Subject key identifier: C6:CC:59:6E:54:9C:AE:FE:4C:18:58:C4:7C:CB:02:07:45:15:F7:FF Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97 Certificate serial: 101B Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/xsxZblScrv5MGFjEfMsCB0UV9_8.roa Signing time: Mon 24 Feb 2025 05:01:16 +0000 ROA not before: Mon 24 Feb 2025 05:01:16 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63701 IP address blocks: 2407:4980::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4123 (0x101b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97 Validity Not Before: Feb 24 05:01:16 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C6CC596E549CAEFE4C1858C47CCB02074515F7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:f8:db:68:5c:e7:73:79:af:61:3b:df:6e: c6:45:58:fd:32:30:d1:51:f4:8b:26:1e:4c:be:01: 64:19:2b:e7:2e:8f:dd:1b:79:d7:6c:08:55:3b:ac: 86:db:b0:f5:c6:de:66:bf:ff:fa:38:7b:0d:89:84: 79:1c:6d:40:d6:fd:fe:47:ee:9e:22:38:1d:76:10: bf:e7:c5:01:e5:ab:66:ea:31:51:cc:85:ef:6f:65: 6f:4a:b3:a4:52:4f:9b:fb:fa:f8:9c:8a:0d:bc:a9: 3b:c3:d8:7d:42:a8:d1:95:3f:75:28:d8:1b:07:f9: 3c:a1:76:ed:48:c4:c8:28:26:6d:ff:a5:20:d6:dd: 14:c9:3b:41:17:05:bf:6d:6a:61:bb:4c:b5:46:83: 67:fe:b3:c0:a3:f7:b4:a4:e7:ef:0a:80:56:09:c8: 3d:f6:31:3a:0e:7a:c6:59:49:f5:37:c6:65:b3:bb: 30:b3:23:7c:3c:0f:6a:d1:5f:8e:37:fc:43:4c:1b: da:5c:5b:e2:3b:1e:3e:98:c3:02:5f:4c:6e:7a:1c: b9:ed:b6:d4:8f:aa:1a:0d:98:d7:82:b8:79:ff:0b: da:f5:e9:1f:b2:a3:15:3b:05:7b:98:5e:b6:7e:1b: 1d:e9:64:bb:15:25:de:e7:95:28:35:b3:37:bb:e9: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CC:59:6E:54:9C:AE:FE:4C:18:58:C4:7C:CB:02:07:45:15:F7:FF X509v3 Authority Key Identifier: keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/xsxZblScrv5MGFjEfMsCB0UV9_8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4980::/32 Signature Algorithm: sha256WithRSAEncryption 0a:0c:94:7f:6f:f2:97:96:ef:bb:2a:d6:ff:56:d5:e0:6e:e2: 71:03:3e:ff:48:7e:47:b6:4d:be:02:d3:a0:28:a3:71:51:a2: 69:b5:b1:12:be:9d:8c:f5:49:97:f3:0f:c0:8e:29:a9:92:42: be:98:a0:1f:9f:99:b7:6c:d2:dc:cd:40:65:f4:50:fd:5c:eb: 97:8d:bc:c5:45:6a:75:3a:2a:16:ff:05:6f:8e:41:af:33:c0: 20:13:84:48:a7:82:70:b6:99:af:7a:b3:d7:77:3a:03:76:24: a2:8f:62:9c:6f:bd:25:3c:a1:09:1d:c8:36:ab:d8:30:b1:15: ad:34:5d:ff:d2:b4:b2:a6:7c:70:0b:20:6e:b1:ba:39:0b:6a: 7b:86:c5:f1:d9:e8:39:ff:4b:cf:45:68:21:e2:a5:1c:2c:b8: ed:0c:6d:45:b1:d2:0e:7d:96:c5:da:d5:d3:73:dd:e6:4a:49: aa:17:1b:6e:ea:f2:55:27:79:81:05:6c:de:22:1b:76:5e:79: 74:74:df:cf:25:7d:17:f7:e4:89:96:aa:7d:0e:21:3d:43:7a: cd:e1:b8:7b:b2:71:a9:c3:01:8e:32:ac:67:07:7d:33:b9:19: b9:47:9d:33:31:89:dd:6d:fc:d6:7f:aa:f4:5c:bc:ae:6f:30: c8:5c:9d:c4 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICEBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTAyMjQw NTAxMTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM2Q0M1OTZFNTQ5Q0FF RkU0QzE4NThDNDdDQ0IwMjA3NDUxNUY3RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwYPjbaFznc3mvYTvfbsZFWP0yMNFR9IsmHky+AWQZK+cuj90b eddsCFU7rIbbsPXG3ma///o4ew2JhHkcbUDW/f5H7p4iOB12EL/nxQHlq2bqMVHM he9vZW9Ks6RST5v7+vicig28qTvD2H1CqNGVP3Uo2BsH+Tyhdu1IxMgoJm3/pSDW 3RTJO0EXBb9tamG7TLVGg2f+s8Cj97Sk5+8KgFYJyD32MToOesZZSfU3xmWzuzCz I3w8D2rRX443/ENMG9pcW+I7Hj6YwwJfTG56HLntttSPqhoNmNeCuHn/C9r16R+y oxU7BXuYXrZ+Gx3pZLsVJd7nlSg1sze76Yo3AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUxsxZblScrv5MGFjEfMsCB0UV9/8wHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG 2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEveHN4WmJsU2NydjVN R0ZqRWZNc0NCMFVWOV84LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHSYAwDQYJKoZIhvcNAQELBQADggEBAAoMlH9v8peW77sq1v9W1eBu4nED Pv9Ifke2Tb4C06Aoo3FRomm1sRK+nYz1SZfzD8COKamSQr6YoB+fmbds0tzNQGX0 UP1c65eNvMVFanU6Khb/BW+OQa8zwCAThEingnC2ma96s9d3OgN2JKKPYpxvvSU8 oQkdyDar2DCxFa00Xf/StLKmfHALIG6xujkLanuGxfHZ6Dn/S89FaCHipRwsuO0M bUWx0g59lsXa1dNz3eZKSaoXG27q8lUneYEFbN4iG3ZeeXR0388lfRf35ImWqn0O IT1Des3huHuycanDAY4yrGcHfTO5GblHnTMxid1t/NZ/qvRcvK5vMMhcncQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:32:00 2025 by rpki-client