$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/Yg61RxIhCNGDnQvVtwg-egnxOLU.roa File: Yg61RxIhCNGDnQvVtwg-egnxOLU.roa (raw, json) Hash identifier: 3XfY+iN0080xE/fEDKYWFBE5T1lbhQ0g9gRDubSk/jY= Subject key identifier: 62:0E:B5:47:12:21:08:D1:83:9D:0B:D5:B7:08:3E:7A:09:F1:38:B5 Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Certificate serial: 06 Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/Yg61RxIhCNGDnQvVtwg-egnxOLU.roa Signing time: Tue 14 Jan 2025 08:18:20 +0000 ROA not before: Tue 14 Jan 2025 08:18:20 +0000 ROA not after: Wed 14 Jan 2026 07:53:29 +0000 asID: 17969 IP address blocks: 218.244.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850 Validity Not Before: Jan 14 08:18:20 2025 GMT Not After : Jan 14 07:53:29 2026 GMT Subject: CN=620EB547122108D1839D0BD5B7083E7A09F138B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:ee:fd:74:52:0f:73:2d:2c:22:89:ec:fa: d6:36:3f:9a:eb:51:c1:d4:e9:22:de:4f:3b:78:2d: e4:01:23:33:7e:72:5e:c6:6d:e8:29:b4:f0:8c:bf: 7f:43:a1:21:57:ca:2a:1e:93:5a:3b:3a:67:0f:5b: b6:29:eb:f7:d8:9f:be:4f:9b:8b:63:d9:66:23:b7: 8c:be:8d:54:7b:20:c5:30:15:df:3c:cb:ee:13:c5: f2:60:13:0f:6c:4a:5a:47:10:ef:1f:7a:a9:57:09: 6c:28:82:e0:a4:ed:8e:66:d5:b3:c3:4d:98:6a:fb: 43:6c:c7:d3:70:1e:91:cf:32:31:bd:32:81:55:59: ad:38:45:78:07:8a:0b:5b:b6:f5:aa:61:f6:46:dc: e8:dd:aa:5a:41:f6:a7:ce:66:df:2b:84:23:e3:0b: 8b:98:c8:d4:a6:c5:b6:81:33:28:ae:97:67:cc:59: 0a:7f:3c:8d:76:b2:b7:f7:01:ec:bc:c2:7e:82:9c: 07:3c:4c:79:fd:21:43:b6:13:d2:fa:49:62:a4:33: f2:6e:e1:c8:47:c3:ec:5b:6e:84:6c:21:ad:34:15: 44:7a:8f:ba:50:08:6d:26:61:8b:43:3f:b8:24:85: 1f:89:09:87:4b:c9:41:e7:76:71:16:cc:d8:d4:5f: ec:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0E:B5:47:12:21:08:D1:83:9D:0B:D5:B7:08:3E:7A:09:F1:38:B5 X509v3 Authority Key Identifier: keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/Yg61RxIhCNGDnQvVtwg-egnxOLU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.244.0.0/19 Signature Algorithm: sha256WithRSAEncryption 1f:cc:27:85:1c:a5:7b:09:c4:5e:aa:14:bc:a2:70:c4:d6:87: d2:61:fc:7d:0e:f5:3b:3c:d4:de:66:88:2c:83:2a:c0:5a:25: 1d:87:cd:da:bc:fb:d7:d1:1d:a1:67:55:d7:16:ae:96:e5:98: a4:fe:5d:49:9f:a7:b8:78:3a:6c:22:f3:5a:de:bb:79:e6:8e: 3b:fd:cf:87:8d:14:d3:76:7a:a0:1c:41:a2:28:b5:11:8e:be: 98:70:88:29:5b:a7:fe:da:63:3e:9b:05:2e:53:19:94:09:27: 55:79:a7:03:97:a5:e6:87:79:d8:8a:a5:25:d7:87:47:cb:62: d2:45:f7:97:0c:ad:3e:a8:91:ff:c9:d9:8e:98:26:ce:7e:e2: e4:bb:7c:2f:9a:4f:25:67:19:bb:d0:67:ad:ee:55:7a:23:4e: 17:a9:a0:3c:a0:e2:be:69:98:44:68:43:d9:c4:e0:a5:1c:60: b4:e8:97:da:0e:52:d0:97:d5:2b:ec:ef:8b:f2:0d:f9:a4:bf: 51:6d:9f:88:cf:99:10:03:6d:3e:96:b6:20:cf:24:62:07:98: 9a:86:24:5a:92:61:fc:be:ea:44:47:5b:7d:0f:c4:d0:ab:db: 00:f2:c1:a7:22:b2:37:d5:ba:64:c1:7f:c7:6a:e8:42:06:0f: 90:ee:6f:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQ0Iy NzNCMDk3OTk3QzAyQjRGNTJFNUMxQkI0RkVGRTY2Nzk3ODUwMB4XDTI1MDExNDA4 MTgyMFoXDTI2MDExNDA3NTMyOVowMzExMC8GA1UEAxMoNjIwRUI1NDcxMjIxMDhE MTgzOUQwQkQ1QjcwODNFN0EwOUYxMzhCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMY07v10Ug9zLSwiiez61jY/mutRwdTpIt5PO3gt5AEjM35yXsZt 6Cm08Iy/f0OhIVfKKh6TWjs6Zw9btinr99ifvk+bi2PZZiO3jL6NVHsgxTAV3zzL 7hPF8mATD2xKWkcQ7x96qVcJbCiC4KTtjmbVs8NNmGr7Q2zH03Aekc8yMb0ygVVZ rThFeAeKC1u29aph9kbc6N2qWkH2p85m3yuEI+MLi5jI1KbFtoEzKK6XZ8xZCn88 jXayt/cB7LzCfoKcBzxMef0hQ7YT0vpJYqQz8m7hyEfD7FtuhGwhrTQVRHqPulAI bSZhi0M/uCSFH4kJh0vJQed2cRbM2NRf7FUCAwEAAaOCAe8wggHrMB0GA1UdDgQW BBRiDrVHEiEI0YOdC9W3CD56CfE4tTAfBgNVHSMEGDAWgBTssnOwl5l8ArT1Llwb tP7+Znl4UDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi83 TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLzdMSnpzSmVaZkFLMDlTNWNHN1QtX21aNWVGQS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIyL1lnNjFSeEloQ05HRG5RdlZ0 d2ctZWdueE9MVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXa 9AAwDQYJKoZIhvcNAQELBQADggEBAB/MJ4UcpXsJxF6qFLyicMTWh9Jh/H0O9Ts8 1N5miCyDKsBaJR2Hzdq8+9fRHaFnVdcWrpblmKT+XUmfp7h4Omwi81reu3nmjjv9 z4eNFNN2eqAcQaIotRGOvphwiClbp/7aYz6bBS5TGZQJJ1V5pwOXpeaHediKpSXX h0fLYtJF95cMrT6okf/J2Y6YJs5+4uS7fC+aTyVnGbvQZ63uVXojThepoDyg4r5p mERoQ9nE4KUcYLTol9oOUtCX1Svs74vyDfmkv1Ftn4jPmRADbT6WtiDPJGIHmJqG JFqSYfy+6kRHW30PxNCr2wDywacisjfVumTBf8dq6EIGD5Dub3E= -----END CERTIFICATE-----Generated at Sat Apr 26 15:10:21 2025 by rpki-client