$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/4mivCFMBAf7EEBKKxRo0rub4T64.roa File: 4mivCFMBAf7EEBKKxRo0rub4T64.roa (raw, json) Hash identifier: jz9z1yXxrP3c49QtbOgAGOSwj2Y8ZkTwUpXiF59bJtI= Subject key identifier: E2:68:AF:08:53:01:01:FE:C4:10:12:8A:C5:1A:34:AE:E6:F8:4F:AE Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C Certificate serial: 12A1 Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/4mivCFMBAf7EEBKKxRo0rub4T64.roa Signing time: Fri 17 Jan 2025 01:26:59 +0000 ROA not before: Fri 17 Jan 2025 01:26:59 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137798 IP address blocks: 2402:f8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4769 (0x12a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C Validity Not Before: Jan 17 01:26:59 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E268AF08530101FEC410128AC51A34AEE6F84FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:21:e5:ee:dc:02:eb:48:38:28:ab:81:d6: 3a:75:a1:8c:b7:81:ac:46:89:6d:0c:ad:56:17:1c: 88:62:35:81:ce:63:d2:c8:3a:e0:51:95:46:6c:df: c2:91:07:a2:09:5f:8c:75:8b:97:4b:3b:f9:6c:02: 03:65:06:44:2b:53:9a:8d:fa:15:d9:17:be:01:4e: a8:99:42:5e:11:3f:a5:a8:e7:d0:40:96:7d:05:c5: 88:48:b7:86:9b:ff:bd:08:f4:dc:4c:42:32:b5:6c: a1:aa:43:d2:be:12:b2:31:76:54:b1:7d:70:cb:29: 0f:bf:bb:4d:b1:44:bc:28:31:09:ae:0c:62:95:29: d5:89:e6:7a:7a:5e:f6:df:79:34:be:86:e7:ba:bf: 19:b3:72:4e:9f:bd:60:b9:28:36:04:2d:94:88:05: 56:7d:2e:1d:c5:15:f0:77:97:23:f0:ce:dd:c7:a0: 46:63:5c:29:d7:8d:1f:0c:f6:fe:e1:7a:28:f4:64: d6:6c:55:78:12:8f:b7:a7:d0:2b:a5:83:38:aa:fd: 7b:35:05:82:50:a2:73:cf:5d:f8:24:4b:f2:0d:0a: 7a:d8:1e:6f:73:36:6c:1b:0c:2c:c6:60:d0:50:6a: d3:2f:7c:5d:c0:72:af:87:16:42:79:19:e0:c6:49: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:68:AF:08:53:01:01:FE:C4:10:12:8A:C5:1A:34:AE:E6:F8:4F:AE X509v3 Authority Key Identifier: keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/4mivCFMBAf7EEBKKxRo0rub4T64.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:f8c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:d8:cb:b5:32:33:7e:15:5f:1b:6c:01:b5:4d:ea:8a:cc:76: 93:2c:9b:f2:9b:a2:f7:64:b2:59:27:41:50:78:f2:04:0d:21: 99:51:e6:aa:78:d9:88:cc:3f:05:b6:d3:e8:a6:2c:99:47:78: 51:2c:ef:7b:0b:d1:fb:e0:d5:95:e1:ed:7c:f8:b5:b8:cc:c7: 6e:a7:ed:cd:0e:d1:79:40:16:77:83:b1:bc:22:3d:01:05:fd: 45:66:b9:b4:20:05:25:a0:48:de:50:48:3f:68:fe:88:01:ef: f5:d2:00:e5:9b:0d:da:ac:c9:ef:bf:4e:76:23:1e:03:54:92: 33:35:54:15:6c:a8:e3:ed:3f:6a:18:e6:12:dd:11:71:d7:b3: 2c:dc:e2:ce:8e:48:91:d8:59:4e:95:31:b4:cd:0d:a4:9e:8f: d7:fe:82:db:c9:7d:23:4c:e8:a9:5c:d4:bb:ea:15:97:1f:c9: 01:cb:f5:ac:d1:b8:98:2c:95:90:b7:44:0c:83:a7:4c:e2:e0: 2d:5e:17:70:51:b2:e8:62:24:f2:85:24:68:c4:b7:ce:4e:4e: b8:33:70:59:36:ef:c7:74:63:2e:0a:a8:d1:e3:a4:db:5a:4e: 43:c9:75:78:13:5d:21:c3:21:49:4c:ae:b7:99:41:14:e1:52: f7:e0:73:5e -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICEqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEUz RTAyNzE0MkM2MzNENTY1OTg0MThERjZERUJDMDFCREQ4MDA4QzAeFw0yNTAxMTcw MTI2NTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEUyNjhBRjA4NTMwMTAx RkVDNDEwMTI4QUM1MUEzNEFFRTZGODRGQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYxSHl7twC60g4KKuB1jp1oYy3gaxGiW0MrVYXHIhiNYHOY9LI OuBRlUZs38KRB6IJX4x1i5dLO/lsAgNlBkQrU5qN+hXZF74BTqiZQl4RP6Wo59BA ln0FxYhIt4ab/70I9NxMQjK1bKGqQ9K+ErIxdlSxfXDLKQ+/u02xRLwoMQmuDGKV KdWJ5np6XvbfeTS+hue6vxmzck6fvWC5KDYELZSIBVZ9Lh3FFfB3lyPwzt3HoEZj XCnXjR8M9v7heij0ZNZsVXgSj7en0Culgziq/Xs1BYJQonPPXfgkS/INCnrYHm9z NmwbDCzGYNBQatMvfF3Acq+HFkJ5GeDGSTwFAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU4mivCFMBAf7EEBKKxRo0rub4T64wHwYDVR0jBBgwFoAUjj4CcULGM9VlmEGN 9t68Ab3YAIwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz OC9qajRDY1VMR005VmxtRUdOOXQ2OEFiM1lBSXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pqNENjVUxHTTlWbG1FR045dDY4QWIzWUFJdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MzgvNG1pdkNGTUJBZjdF RUJLS3hSbzBydWI0VDY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQC+MAAADANBgkqhkiG9w0BAQsFAAOCAQEAmNjLtTIzfhVfG2wBtU3qisx2 kyyb8pui92SyWSdBUHjyBA0hmVHmqnjZiMw/BbbT6KYsmUd4USzvewvR++DVleHt fPi1uMzHbqftzQ7ReUAWd4OxvCI9AQX9RWa5tCAFJaBI3lBIP2j+iAHv9dIA5ZsN 2qzJ779OdiMeA1SSMzVUFWyo4+0/ahjmEt0RcdezLNzizo5IkdhZTpUxtM0NpJ6P 1/6C28l9I0zoqVzUu+oVlx/JAcv1rNG4mCyVkLdEDIOnTOLgLV4XcFGy6GIk8oUk aMS3zk5OuDNwWTbvx3RjLgqo0eOk21pOQ8l1eBNdIcMhSUyut5lBFOFS9+BzXg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:26 2025 by rpki-client