$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/o_oAkdJTg2XeO1GwIypjLQPXohM.roa File: o_oAkdJTg2XeO1GwIypjLQPXohM.roa (raw, json) Hash identifier: 4/5vSj9d5XDVtoHiWhC8a+MOhwVdu7cs1BRGxj4luCs= Subject key identifier: A3:FA:00:91:D2:53:83:65:DE:3B:51:B0:23:2A:63:2D:03:D7:A2:13 Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Certificate serial: 1BF4 Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/o_oAkdJTg2XeO1GwIypjLQPXohM.roa Signing time: Fri 17 Jan 2025 01:27:18 +0000 ROA not before: Fri 17 Jan 2025 01:27:18 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 23650 IP address blocks: 2404:6380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7156 (0x1bf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32 Validity Not Before: Jan 17 01:27:18 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A3FA0091D2538365DE3B51B0232A632D03D7A213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:47:79:80:fe:cb:b5:30:74:ef:70:15:f0: e1:c6:0f:fd:06:12:16:2c:f9:a3:f7:df:b4:3e:ab: 0b:7b:6d:93:b9:8a:a7:d7:81:da:90:25:29:d0:dc: a4:ae:3d:7a:39:2a:29:45:d9:24:17:2f:9c:90:f5: 2e:11:ef:db:b7:11:54:d7:e9:a9:c6:d7:db:cb:e3: f0:67:4b:04:d1:34:20:c7:33:5e:d8:34:7a:be:18: 6d:eb:70:0a:4e:78:26:d5:69:8f:df:7b:a7:ee:83: 5b:c9:f6:50:a0:42:17:09:a3:22:da:2d:14:58:e4: 5a:f2:58:37:9a:11:f4:43:f8:5c:d0:52:45:9b:bf: be:ac:63:63:4f:68:15:e6:84:b3:0b:0e:bc:54:8e: 68:12:5a:38:a6:5a:e1:0a:f9:ac:fa:a5:10:d2:d4: 50:da:e3:45:9a:8b:ef:54:a5:e0:1b:f2:1a:25:9f: 44:2e:0e:11:c4:b2:6b:ba:58:52:b7:2e:c3:6e:67: bc:49:5d:80:fa:23:79:dd:c2:cb:a9:4d:8f:64:7b: 80:a8:0a:9a:e8:01:c8:b2:59:82:cc:ce:e2:75:48: b2:c8:d1:df:fb:db:2e:62:cd:bc:d0:0a:1e:32:b3: f0:73:2e:82:bf:dc:85:55:2a:79:be:1a:bc:cf:5d: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:00:91:D2:53:83:65:DE:3B:51:B0:23:2A:63:2D:03:D7:A2:13 X509v3 Authority Key Identifier: keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/o_oAkdJTg2XeO1GwIypjLQPXohM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:6380::/32 Signature Algorithm: sha256WithRSAEncryption 0a:ce:3e:c3:76:08:9c:4c:50:08:f5:cf:fd:50:8d:61:d6:7e: 1c:1a:55:20:0e:df:ac:c8:db:84:9e:4b:4e:ec:79:a9:9a:93: b0:cd:46:85:88:dd:b8:5f:66:f5:d8:15:36:c0:69:32:82:7f: 2a:a5:1d:d6:38:82:11:af:9d:cc:6c:cd:87:97:8d:91:cd:87: eb:4b:9d:27:ca:8b:d7:62:1b:a7:ed:5c:e0:90:76:87:ce:3d: 7c:69:32:e0:c8:8e:2f:ec:d3:58:6b:b3:2a:85:22:6b:b5:4a: c0:10:64:13:6d:ff:b4:a2:75:11:ce:89:f1:b6:fb:de:cd:50: 00:3b:60:bd:25:67:aa:b9:c6:92:e5:93:9c:66:2b:d4:b0:37: 35:51:1d:0d:e9:57:b3:19:4f:47:89:0d:91:3f:f2:57:27:28: 84:cf:85:5d:39:f2:f5:ce:07:b7:43:7b:1a:07:b3:27:98:a7: 05:04:c7:dd:ed:82:69:43:87:bc:d0:74:a3:f1:39:8f:96:ba: 31:fc:2d:6d:33:97:df:d6:70:1d:cb:ac:bf:f1:48:9a:4f:d9: 15:b3:29:35:54:6d:69:f2:8e:7a:6f:5b:7c:07:2e:73:ad:bc: 8e:aa:8e:6c:c1:41:51:23:90:b2:b7:b4:5b:be:f7:27:1c:98: d6:9d:db:4a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICG/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yNTAxMTcw MTI3MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEEzRkEwMDkxRDI1Mzgz NjVERTNCNTFCMDIzMkE2MzJEMDNEN0EyMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8vkd5gP7LtTB073AV8OHGD/0GEhYs+aP337Q+qwt7bZO5iqfX gdqQJSnQ3KSuPXo5KilF2SQXL5yQ9S4R79u3EVTX6anG19vL4/BnSwTRNCDHM17Y NHq+GG3rcApOeCbVaY/fe6fug1vJ9lCgQhcJoyLaLRRY5FryWDeaEfRD+FzQUkWb v76sY2NPaBXmhLMLDrxUjmgSWjimWuEK+az6pRDS1FDa40Wai+9UpeAb8holn0Qu DhHEsmu6WFK3LsNuZ7xJXYD6I3ndwsupTY9ke4CoCproAciyWYLMzuJ1SLLI0d/7 2y5izbzQCh4ys/BzLoK/3IVVKnm+GrzPXZwzAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUo/oAkdJTg2XeO1GwIypjLQPXohMwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ +wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvb19vQWtkSlRnMlhl TzFHd0l5cGpMUVBYb2hNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQEY4AwDQYJKoZIhvcNAQELBQADggEBAArOPsN2CJxMUAj1z/1QjWHWfhwa VSAO36zI24SeS07seamak7DNRoWI3bhfZvXYFTbAaTKCfyqlHdY4ghGvncxszYeX jZHNh+tLnSfKi9diG6ftXOCQdofOPXxpMuDIji/s01hrsyqFImu1SsAQZBNt/7Si dRHOifG2+97NUAA7YL0lZ6q5xpLlk5xmK9SwNzVRHQ3pV7MZT0eJDZE/8lcnKITP hV058vXOB7dDexoHsyeYpwUEx93tgmlDh7zQdKPxOY+WujH8LW0zl9/WcB3LrL/x SJpP2RWzKTVUbWnyjnpvW3wHLnOtvI6qjmzBQVEjkLK3tFu+9yccmNad20o= -----END CERTIFICATE-----Generated at Sat Apr 26 17:56:17 2025 by rpki-client