$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/mmx-GbSs4J4VUGylqPz_FT6uUIs.roa File: mmx-GbSs4J4VUGylqPz_FT6uUIs.roa (raw, json) Hash identifier: 6m8OY4pMm2b/rjB1SdyO3trcbplZ5sBLGqMbwi/clbY= Subject key identifier: 9A:6C:7E:19:B4:AC:E0:9E:15:50:6C:A5:A8:FC:FF:15:3E:AE:50:8B Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4C25 Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mmx-GbSs4J4VUGylqPz_FT6uUIs.roa Signing time: Tue 25 Mar 2025 06:07:54 +0000 ROA not before: Tue 25 Mar 2025 06:07:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63603 IP address blocks: 163.53.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19493 (0x4c25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Mar 25 06:07:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9A6C7E19B4ACE09E15506CA5A8FCFF153EAE508B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:6e:21:a6:4a:45:06:92:63:6c:3e:6a:85: 70:ed:90:cc:26:83:9b:6e:5c:7d:0b:d5:0f:cc:5a: 50:75:0c:8a:a8:b7:62:5d:25:5a:aa:62:6d:a7:2d: f8:b7:0a:1b:c8:e0:7d:97:b2:ee:e6:76:63:d2:0e: 35:12:0e:0e:fd:4b:9b:93:df:ab:0e:f9:b1:66:7c: f3:a1:03:02:43:5b:e0:be:85:f3:cf:53:ea:88:e9: 1c:59:64:d5:80:da:f6:96:36:de:e4:0a:0e:69:ef: 1c:7e:4f:c4:ce:78:84:59:a3:fd:d2:b1:99:96:1c: 20:5e:08:cf:b3:b8:3b:88:30:9d:51:1e:d4:d4:7e: 36:b2:af:be:bb:a2:47:4c:ae:8c:0f:da:3d:88:4a: a2:a0:34:0b:1e:b2:32:68:05:0d:78:76:0b:0c:bd: 16:1a:36:87:dd:02:4d:2d:39:fa:f8:ad:bd:38:d9: 39:9e:42:5f:ec:73:59:b9:92:3d:13:26:72:f9:a6: 2b:73:9b:61:5d:0d:69:f4:a9:9e:80:06:05:6a:40: a6:8f:76:dd:ed:a6:10:21:b9:36:63:8d:75:f0:bb: 7f:f1:73:22:8a:2a:04:14:a4:f0:28:18:05:55:ce: a9:5e:1a:ee:ef:ba:b6:a5:74:8a:ba:42:6e:a7:62: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6C:7E:19:B4:AC:E0:9E:15:50:6C:A5:A8:FC:FF:15:3E:AE:50:8B X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mmx-GbSs4J4VUGylqPz_FT6uUIs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.53.46.0/24 Signature Algorithm: sha256WithRSAEncryption 58:c0:7c:64:8d:ae:e7:5f:72:b4:16:ca:34:b4:d7:18:4e:46: dd:c3:63:b5:4f:37:c0:59:7a:e6:b5:c1:a6:6d:23:53:4a:de: 64:46:5d:04:ad:3a:27:46:2a:5f:30:80:06:90:93:99:08:1b: fb:a9:e2:fb:92:96:b9:d4:9b:2b:11:db:d8:6b:06:f2:36:82: 45:50:dc:ed:f1:87:46:56:a5:51:ef:5e:21:8d:6b:8d:aa:35: 67:97:33:72:80:4c:40:06:6d:7b:34:04:bd:86:ed:a0:f5:d0: 77:56:04:ee:2c:2b:15:5d:39:ce:80:7c:2d:0c:d0:77:ca:7c: 95:3c:fd:74:14:54:48:97:da:4d:d3:4b:45:a0:b6:01:70:b0: dd:2d:6e:c5:ed:9c:c9:33:9b:03:1c:43:0f:26:59:18:bb:39: 3d:8a:6d:05:85:0b:e4:bd:b5:f0:06:d3:8c:88:87:65:f6:18: fa:e3:81:90:39:6e:1b:6d:12:56:65:f5:4c:72:60:e0:c7:33: e5:f1:08:58:58:a1:35:1f:10:6a:e8:55:3f:91:60:05:a8:3b: 22:73:7c:da:26:2a:78:b8:00:00:c4:70:a9:7c:76:b6:39:5d: 83:1e:a8:14:d9:46:0b:4c:22:58:de:23:aa:d3:e8:89:4e:7a: cc:3a:d6:07 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICTCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw NjA3NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlBNkM3RTE5QjRBQ0Uw OUUxNTUwNkNBNUE4RkNGRjE1M0VBRTUwOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPuG4hpkpFBpJjbD5qhXDtkMwmg5tuXH0L1Q/MWlB1DIqot2Jd JVqqYm2nLfi3ChvI4H2Xsu7mdmPSDjUSDg79S5uT36sO+bFmfPOhAwJDW+C+hfPP U+qI6RxZZNWA2vaWNt7kCg5p7xx+T8TOeIRZo/3SsZmWHCBeCM+zuDuIMJ1RHtTU fjayr767okdMrowP2j2ISqKgNAsesjJoBQ14dgsMvRYaNofdAk0tOfr4rb042Tme Ql/sc1m5kj0TJnL5pitzm2FdDWn0qZ6ABgVqQKaPdt3tphAhuTZjjXXwu3/xcyKK KgQUpPAoGAVVzqleGu7vuraldIq6Qm6nYplpAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUmmx+GbSs4J4VUGylqPz/FT6uUIswHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvbW14LUdiU3M0SjRW VUd5bHFQel9GVDZ1VUlzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKM1LjANBgkqhkiG9w0BAQsFAAOCAQEAWMB8ZI2u519ytBbKNLTXGE5G3cNj tU83wFl65rXBpm0jU0reZEZdBK06J0YqXzCABpCTmQgb+6ni+5KWudSbKxHb2GsG 8jaCRVDc7fGHRlalUe9eIY1rjao1Z5czcoBMQAZtezQEvYbtoPXQd1YE7iwrFV05 zoB8LQzQd8p8lTz9dBRUSJfaTdNLRaC2AXCw3S1uxe2cyTObAxxDDyZZGLs5PYpt BYUL5L218AbTjIiHZfYY+uOBkDluG20SVmX1THJg4Mcz5fEIWFihNR8QauhVP5Fg Bag7InN82iYqeLgAAMRwqXx2tjldgx6oFNlGC0wiWN4jqtPoiU56zDrWBw== -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:54 2025 by rpki-client