$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/S2bjNQej-REqHgT0YrR_t7OF0FY.roa File: S2bjNQej-REqHgT0YrR_t7OF0FY.roa (raw, json) Hash identifier: JxMODKuWSwr6iH8TL8EdeU0qcY/yfLIHP/GxfzV8PUw= Subject key identifier: 4B:66:E3:35:07:A3:F9:11:2A:1E:04:F4:62:B4:7F:B7:B3:85:D0:56 Certificate issuer: /CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53 Certificate serial: 1D72 Authority key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/S2bjNQej-REqHgT0YrR_t7OF0FY.roa Signing time: Fri 17 Jan 2025 01:28:17 +0000 ROA not before: Fri 17 Jan 2025 01:28:17 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 133111 IP address blocks: 42.201.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7538 (0x1d72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53 Validity Not Before: Jan 17 01:28:17 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4B66E33507A3F9112A1E04F462B47FB7B385D056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:47:6d:44:32:af:19:b9:27:ce:5e:e2:51:c3: d8:82:16:d6:f8:d5:87:f4:5e:eb:ae:78:7a:17:e5: 40:f0:97:e0:d5:f1:73:ac:4e:04:db:8c:16:41:35: cd:f4:2a:eb:7a:67:4f:97:32:c1:c6:7c:da:24:d2: db:e6:5a:b3:57:a3:76:1f:72:f9:c1:ea:68:90:bd: 23:46:c4:4b:48:14:8f:fa:9d:33:61:a1:4e:6a:59: 31:43:c2:5e:9d:b0:f6:fc:b9:e2:d7:cc:35:3f:0d: 8c:75:20:87:58:35:71:16:d7:2c:0b:01:80:97:bd: fa:70:a9:3b:0a:98:d5:f9:19:89:0e:81:f5:24:b6: 59:5f:36:15:52:cf:51:22:76:d7:c2:e7:9b:ce:05: c9:4b:e0:c3:c4:b1:c6:5d:50:5a:5b:8f:59:32:e0: 05:c1:a5:6f:e1:34:cf:76:68:b4:68:2e:65:e7:37: 1e:27:07:4f:cd:d3:2d:95:58:13:2e:f2:86:79:a5: 92:34:54:28:9a:c1:7a:19:ee:cb:40:bb:af:15:f9: 60:97:b8:0c:71:19:48:70:3e:97:8a:e9:77:d6:e4: 1e:1a:2c:bf:73:dc:c8:ca:ba:0b:f5:ba:c3:d2:b7: ec:06:f9:a8:f6:30:ab:c0:b4:41:e5:3f:f7:e7:ab: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:66:E3:35:07:A3:F9:11:2A:1E:04:F4:62:B4:7F:B7:B3:85:D0:56 X509v3 Authority Key Identifier: keyid:E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/S2bjNQej-REqHgT0YrR_t7OF0FY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.201.32.0/19 Signature Algorithm: sha256WithRSAEncryption ac:32:7c:b2:ff:e9:df:c4:40:e1:13:80:74:a4:73:e8:67:c3: fd:b4:91:11:fb:a9:c3:a3:e2:8e:84:c5:07:84:ca:42:8a:e4: ec:39:50:d1:5d:26:ba:a2:c7:73:0e:89:f4:a7:55:b3:30:41: ca:bf:b2:d8:f8:d0:90:c4:29:4c:33:e6:8e:13:23:fa:1f:01: 05:56:ca:7d:29:ed:ea:10:c7:37:e0:f4:d9:ce:fb:08:a3:8e: 17:e9:be:24:2e:1c:c6:28:6f:ca:8d:2c:84:a4:d6:d9:95:9a: 88:32:a3:0f:d4:0a:6c:9e:9a:b7:62:5f:6e:a7:97:2f:ea:0d: c1:cf:45:a4:fb:dc:37:80:c9:4d:af:4a:57:5d:f9:df:00:37: 12:52:97:4a:9c:6b:ea:62:4d:02:3f:39:00:76:9c:f5:f0:34: 8a:07:78:44:1e:24:7b:08:ff:52:b6:d1:eb:e0:33:03:c3:45: 91:ad:ec:87:f4:0b:08:40:d4:80:1b:f9:46:35:52:3b:a2:5f: a8:05:3b:bc:a8:fb:68:28:a6:40:73:27:f7:38:66:87:52:f7: d9:76:a3:d0:51:e6:33:a6:29:13:20:38:66:94:33:2e:55:18: 73:45:98:c3:d0:db:f3:4b:ca:dc:cc:fc:f2:f2:2d:d9:f2:60: ce:cb:e4:0c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTgy Mjg3QkI1NkZBQzhFNjc1M0FCREUzNkIzQjZBOTM5Q0I1OUE1MzAeFw0yNTAxMTcw MTI4MTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRCNjZFMzM1MDdBM0Y5 MTEyQTFFMDRGNDYyQjQ3RkI3QjM4NUQwNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwR21EMq8ZuSfOXuJRw9iCFtb41Yf0XuuueHoX5UDwl+DV8XOs TgTbjBZBNc30Kut6Z0+XMsHGfNok0tvmWrNXo3YfcvnB6miQvSNGxEtIFI/6nTNh oU5qWTFDwl6dsPb8ueLXzDU/DYx1IIdYNXEW1ywLAYCXvfpwqTsKmNX5GYkOgfUk tllfNhVSz1EidtfC55vOBclL4MPEscZdUFpbj1ky4AXBpW/hNM92aLRoLmXnNx4n B0/N0y2VWBMu8oZ5pZI0VCiawXoZ7stAu68V+WCXuAxxGUhwPpeK6XfW5B4aLL9z 3MjKugv1usPSt+wG+aj2MKvAtEHlP/fnq2UfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUS2bjNQej+REqHgT0YrR/t7OF0FYwHwYDVR0jBBgwFoAU6CKHu1b6yOZ1Or3j aztqk5y1mlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjI5 MS82Q0tIdTFiNnlPWjFPcjNqYXp0cWs1eTFtbE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzZDS0h1MWI2eU9aMU9yM2phenRxazV5MW1sTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIyOTEvUzJiak5RZWotUkVx SGdUMFlyUl90N09GMEZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBSrJIDANBgkqhkiG9w0BAQsFAAOCAQEArDJ8sv/p38RA4ROAdKRz6GfD/bSR Efupw6PijoTFB4TKQork7DlQ0V0muqLHcw6J9KdVszBByr+y2PjQkMQpTDPmjhMj +h8BBVbKfSnt6hDHN+D02c77CKOOF+m+JC4cxihvyo0shKTW2ZWaiDKjD9QKbJ6a t2JfbqeXL+oNwc9FpPvcN4DJTa9KV1353wA3ElKXSpxr6mJNAj85AHac9fA0igd4 RB4kewj/UrbR6+AzA8NFka3sh/QLCEDUgBv5RjVSO6JfqAU7vKj7aCimQHMn9zhm h1L32Xaj0FHmM6YpEyA4ZpQzLlUYc0WYw9Db80vK3Mz88vIt2fJgzsvkDA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:41 2025 by rpki-client