$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/IJstGxYeXmD9TLf7m9peIJPOZ0M.roa File: IJstGxYeXmD9TLf7m9peIJPOZ0M.roa (raw, json) Hash identifier: EwzaajPcvPV1aJvbfovVMb0BoCuRVrdDj6XCyXd6Lx8= Subject key identifier: 20:9B:2D:1B:16:1E:5E:60:FD:4C:B7:FB:9B:DA:5E:20:93:CE:67:43 Certificate issuer: /CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Certificate serial: 12B9 Authority key identifier: 86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/IJstGxYeXmD9TLf7m9peIJPOZ0M.roa Signing time: Wed 22 Jan 2025 03:28:49 +0000 ROA not before: Wed 22 Jan 2025 03:28:49 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 63566 IP address blocks: 118.194.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4793 (0x12b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86DB0D88746FFC0814E589A139240F2F742D0C56 Validity Not Before: Jan 22 03:28:49 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=209B2D1B161E5E60FD4CB7FB9BDA5E2093CE6743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:6a:22:05:92:09:dc:0d:f7:9f:54:c9:2e: f6:f2:65:2d:8a:fe:ef:65:b8:53:3e:6a:14:4d:da: 34:48:54:cd:80:07:4c:f8:fb:8a:bd:d3:bf:b1:18: 46:bd:1b:be:62:d8:31:05:0f:5b:d7:98:6d:f1:69: 55:60:04:48:2c:40:48:a8:2f:6a:d6:94:90:41:a4: 47:a8:19:f0:e4:cb:38:49:4f:3e:14:2e:8e:4f:3d: 68:e5:6a:56:36:78:69:32:f3:0d:c8:db:1f:cd:b0: 3d:40:58:cc:fb:99:6c:64:83:61:15:3c:64:f6:9b: 10:41:f8:7e:b6:7f:a6:56:b8:69:98:73:b0:f1:e1: 55:25:c5:fc:94:6c:da:bf:c0:d8:9a:13:0d:51:3d: ad:cb:1c:13:f5:c2:f1:2d:77:cf:69:43:50:e6:c2: 47:05:40:92:27:64:7a:9d:d5:bb:1a:c5:94:f9:6f: 1f:f9:60:8b:8a:c5:99:bd:38:cd:dc:19:86:f6:81: 94:9d:78:82:5d:d2:38:c5:86:60:05:c4:0d:99:f3: e1:78:8d:56:74:9a:a4:46:12:82:f6:3a:ee:99:bc: af:f7:66:12:36:93:d6:9e:7a:ce:f2:2b:46:bd:0d: 5e:b4:b9:f6:07:e6:e7:13:22:62:35:c1:82:32:03: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9B:2D:1B:16:1E:5E:60:FD:4C:B7:FB:9B:DA:5E:20:93:CE:67:43 X509v3 Authority Key Identifier: keyid:86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/IJstGxYeXmD9TLf7m9peIJPOZ0M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.194.59.0/24 Signature Algorithm: sha256WithRSAEncryption 73:21:aa:86:7d:85:7f:e9:60:20:f9:1d:6a:49:4e:f8:89:20: 4f:41:62:99:a3:38:b9:aa:7f:61:1f:06:b6:53:4c:f7:28:64: e6:e8:33:2d:be:2c:db:91:f3:8f:90:10:7b:50:73:a1:f0:bb: f9:74:e0:99:d0:7d:09:e2:26:a6:1d:c8:b1:c2:56:23:e4:b3: f7:0e:70:95:c7:44:e5:b7:8f:84:1a:7d:39:d6:1b:86:53:4c: c0:e3:3d:7b:2d:ef:fe:87:2a:a6:38:95:eb:7b:7e:fc:96:d3: 16:72:c1:45:ab:ad:f9:87:f2:c8:12:1d:28:20:3d:bb:b7:bf: 7e:72:66:51:a9:15:7b:38:8a:0c:48:9b:31:4c:a6:95:69:35: 13:49:de:c6:50:1e:cd:53:76:1e:b7:d9:7b:32:6b:26:5c:a6: 31:33:01:37:fc:18:59:12:fa:77:22:c7:89:d0:34:cf:7b:eb: 72:27:31:fc:bd:cb:98:ed:e6:7a:64:a7:13:b7:3b:26:be:a5: e5:f9:6c:3e:30:e4:11:48:04:7d:e0:1b:8a:37:3c:6d:dc:40: d2:09:e7:8a:f1:d4:b2:5d:15:73:87:53:ee:1a:5c:82:f3:67: f5:37:5e:12:59:ae:66:83:10:7b:df:9d:ef:2d:3d:9b:9c:a6: 2c:5b:6c:22 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICErkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZE QjBEODg3NDZGRkMwODE0RTU4OUExMzkyNDBGMkY3NDJEMEM1NjAeFw0yNTAxMjIw MzI4NDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIwOUIyRDFCMTYxRTVF NjBGRDRDQjdGQjlCREE1RTIwOTNDRTY3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDQWoiBZIJ3A33n1TJLvbyZS2K/u9luFM+ahRN2jRIVM2AB0z4 +4q907+xGEa9G75i2DEFD1vXmG3xaVVgBEgsQEioL2rWlJBBpEeoGfDkyzhJTz4U Lo5PPWjlalY2eGky8w3I2x/NsD1AWMz7mWxkg2EVPGT2mxBB+H62f6ZWuGmYc7Dx 4VUlxfyUbNq/wNiaEw1RPa3LHBP1wvEtd89pQ1DmwkcFQJInZHqd1bsaxZT5bx/5 YIuKxZm9OM3cGYb2gZSdeIJd0jjFhmAFxA2Z8+F4jVZ0mqRGEoL2Ou6ZvK/3ZhI2 k9aees7yK0a9DV60ufYH5ucTImI1wYIyAxbrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUIJstGxYeXmD9TLf7m9peIJPOZ0MwHwYDVR0jBBgwFoAUhtsNiHRv/AgU5Ymh OSQPL3QtDFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc3 Ni9odHNOaUhSdl9BZ1U1WW1oT1NRUEwzUXRERlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2h0c05pSFJ2X0FnVTVZbWhPU1FQTDNRdERGWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3NzYvSUpzdEd4WWVYbUQ5 VExmN205cGVJSlBPWjBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHbCOzANBgkqhkiG9w0BAQsFAAOCAQEAcyGqhn2Ff+lgIPkdaklO+IkgT0Fi maM4uap/YR8GtlNM9yhk5ugzLb4s25Hzj5AQe1BzofC7+XTgmdB9CeImph3IscJW I+Sz9w5wlcdE5bePhBp9OdYbhlNMwOM9ey3v/ocqpjiV63t+/JbTFnLBRaut+Yfy yBIdKCA9u7e/fnJmUakVeziKDEibMUymlWk1E0nexlAezVN2HrfZezJrJlymMTMB N/wYWRL6dyLHidA0z3vrcicx/L3LmO3memSnE7c7Jr6l5flsPjDkEUgEfeAbijc8 bdxA0gnnivHUsl0Vc4dT7hpcgvNn9TdeElmuZoMQe9+d7y09m5ymLFtsIg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:12:50 2025 by rpki-client