$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/d16R1vhzR6AdU3s3oYlV8svDpoc.roa File: d16R1vhzR6AdU3s3oYlV8svDpoc.roa (raw, json) Hash identifier: pZyYQk5Fbz2ihWXOaIedm3qeVm2r1E2UFUu++wqvZGo= Subject key identifier: 77:5E:91:D6:F8:73:47:A0:1D:53:7B:37:A1:89:55:F2:CB:C3:A6:87 Certificate issuer: /CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20 Certificate serial: 21EC Authority key identifier: AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/d16R1vhzR6AdU3s3oYlV8svDpoc.roa Signing time: Tue 07 Jan 2025 06:56:25 +0000 ROA not before: Tue 07 Jan 2025 06:56:25 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 7468 IP address blocks: 222.126.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8684 (0x21ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20 Validity Not Before: Jan 7 06:56:25 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=775E91D6F87347A01D537B37A18955F2CBC3A687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:6f:7c:ac:c6:a0:d8:c2:49:33:43:51:20: b9:a9:e4:0b:fd:8c:de:05:89:5e:08:d8:75:54:45: fb:de:5b:5a:a3:d6:72:82:0d:3e:5a:a8:9b:bb:c2: ff:e5:73:a4:be:ce:ce:87:21:6d:df:9e:55:54:31: d2:9f:12:e6:c9:f3:8c:80:e3:c1:38:2b:79:1d:84: c7:93:fd:91:48:7b:c7:cf:92:6c:75:37:7b:b7:40: b0:fa:77:a6:b3:ba:3f:da:9c:20:24:6d:94:c5:96: 95:ff:43:0d:da:b7:9c:51:f5:47:a6:a2:ba:b9:d4: b7:f0:56:be:63:80:3a:18:82:2a:d2:e0:be:a0:b1: a7:56:ce:03:98:69:73:79:91:c5:5b:98:20:da:15: ca:75:1b:81:e1:45:88:ae:aa:6b:09:8e:a0:19:bc: e9:2f:22:4c:24:a9:d4:70:7f:ed:63:eb:2e:fe:15: 6e:95:63:0c:b5:46:52:88:70:cc:34:c5:6f:96:c5: 9d:14:ac:12:59:e3:0e:bb:f5:47:83:45:53:87:5b: 43:89:f4:05:81:12:a7:bd:8a:1e:f9:c3:5a:94:03: ef:41:b6:a3:f3:c1:51:96:ce:cc:b5:8b:19:70:ad: 2f:f9:08:e8:10:d4:46:b4:98:5c:0a:c0:1b:c0:71: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5E:91:D6:F8:73:47:A0:1D:53:7B:37:A1:89:55:F2:CB:C3:A6:87 X509v3 Authority Key Identifier: keyid:AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/d16R1vhzR6AdU3s3oYlV8svDpoc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.126.138.0/24 Signature Algorithm: sha256WithRSAEncryption 60:61:91:42:3c:93:58:0f:27:a1:16:b8:35:66:08:19:67:6a: 04:f3:34:0a:1b:ec:70:c2:29:59:b2:2e:f5:40:5b:62:a8:e1: 73:a9:72:8a:29:5f:38:d5:c4:9c:12:a6:56:f6:33:92:76:77: 24:2c:98:aa:12:b4:3f:e6:b0:c3:83:bd:59:dd:f7:83:6c:bb: 65:5e:5e:fe:64:90:e5:3e:32:0d:6a:64:e2:ff:f4:9a:50:e1: d2:d4:06:12:bc:82:c7:0e:ab:b5:c4:2d:7a:14:13:b4:5d:0c: 63:03:e3:3c:6b:ef:ab:00:68:47:6d:8a:a1:b2:19:46:29:ab: 46:b9:8b:a4:18:9d:5c:8f:e3:a5:4b:a4:ac:6d:cf:fa:2a:d6: 90:d7:f1:db:ee:ff:d9:74:cc:9a:f1:66:60:e2:c1:04:60:8a: 5d:fb:71:13:ae:28:17:30:bc:4b:f5:eb:bd:40:0a:cb:37:0a: ca:91:0c:69:20:6c:ff:2f:74:b0:3b:c0:8f:fb:74:13:08:a4: 68:4a:f5:5b:b2:97:4c:e3:70:2d:7f:4a:3e:e7:89:82:ad:ff: 70:2e:52:c3:e3:86:26:04:52:98:63:fe:23:16:7a:ce:47:46: 4c:1a:57:c6:a4:a7:ff:53:ac:05:92:2b:44:af:5a:b3:11:3d: e1:97:6e:43 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICIewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUYz QUY0RDAxRjBDRDA1NkYwRTNGNjk4ODAwQjIyM0FFRTc3M0QyMDAeFw0yNTAxMDcw NjU2MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc3NUU5MUQ2Rjg3MzQ3 QTAxRDUzN0IzN0ExODk1NUYyQ0JDM0E2ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1lm98rMag2MJJM0NRILmp5Av9jN4FiV4I2HVURfveW1qj1nKC DT5aqJu7wv/lc6S+zs6HIW3fnlVUMdKfEubJ84yA48E4K3kdhMeT/ZFIe8fPkmx1 N3u3QLD6d6azuj/anCAkbZTFlpX/Qw3at5xR9Uemorq51LfwVr5jgDoYgirS4L6g sadWzgOYaXN5kcVbmCDaFcp1G4HhRYiuqmsJjqAZvOkvIkwkqdRwf+1j6y7+FW6V Ywy1RlKIcMw0xW+WxZ0UrBJZ4w679UeDRVOHW0OJ9AWBEqe9ih75w1qUA+9BtqPz wVGWzsy1ixlwrS/5COgQ1Ea0mFwKwBvAcQX7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUd16R1vhzR6AdU3s3oYlV8svDpocwHwYDVR0jBBgwFoAUrzr00B8M0Fbw4/aY gAsiOu53PSAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMz L3J6cjAwQjhNMEZidzRfYVlnQXNpT3U1M1BTQS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvcnpyMDBCOE0wRmJ3NF9hWWdBc2lPdTUzUFNBLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMzL2QxNlIxdmh6UjZBZFUz czNvWWxWOHN2RHBvYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADefoowDQYJKoZIhvcNAQELBQADggEBAGBhkUI8k1gPJ6EWuDVmCBlnagTzNAob 7HDCKVmyLvVAW2Ko4XOpcoopXzjVxJwSplb2M5J2dyQsmKoStD/msMODvVnd94Ns u2VeXv5kkOU+Mg1qZOL/9JpQ4dLUBhK8gscOq7XELXoUE7RdDGMD4zxr76sAaEdt iqGyGUYpq0a5i6QYnVyP46VLpKxtz/oq1pDX8dvu/9l0zJrxZmDiwQRgil37cROu KBcwvEv1671ACss3CsqRDGkgbP8vdLA7wI/7dBMIpGhK9Vuyl0zjcC1/Sj7niYKt /3AuUsPjhiYEUphj/iMWes5HRkwaV8akp/9TrAWSK0SvWrMRPeGXbkM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:49 2025 by rpki-client