$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2815/JSD6su-8GmSdAloMCdElkEvt0AM.roa File: JSD6su-8GmSdAloMCdElkEvt0AM.roa (raw, json) Hash identifier: byIajotq4oMDlZPGW2paVqqfxYBJgKLLUDwL6wPkwLA= Subject key identifier: 25:20:FA:B2:EF:BC:1A:64:9D:02:5A:0C:09:D1:25:90:4B:ED:D0:03 Certificate issuer: /CN=1FCAD722567791FD73A091FE891C948F1914D672 Certificate serial: 05A4 Authority key identifier: 1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/JSD6su-8GmSdAloMCdElkEvt0AM.roa Signing time: Wed 09 Apr 2025 06:48:44 +0000 ROA not before: Wed 09 Apr 2025 06:48:44 +0000 ROA not after: Thu 09 Apr 2026 06:41:32 +0000 asID: 132019 IP address blocks: 2405:f580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCAD722567791FD73A091FE891C948F1914D672 Validity Not Before: Apr 9 06:48:44 2025 GMT Not After : Apr 9 06:41:32 2026 GMT Subject: CN=2520FAB2EFBC1A649D025A0C09D125904BEDD003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:30:f2:f3:9f:d6:49:70:cd:12:2e:81:27: 21:08:4a:4e:77:e5:03:cb:73:56:a1:5c:71:bc:5b: 3d:ef:7e:43:8c:1b:dc:a0:b8:3e:f3:9d:50:0a:29: 3b:79:5b:96:22:76:84:41:af:2c:55:5e:b9:b0:c1: 40:95:86:a6:25:95:23:90:71:10:ae:e2:a8:2e:f8: 84:d0:c8:6e:93:a2:b2:4b:47:1e:8f:ec:ec:fd:5a: 5a:f6:84:53:6c:54:b7:f8:7b:27:a3:bf:e5:6e:d9: 44:ed:1c:b1:9a:1a:bd:95:7d:6b:2e:5b:89:dc:7c: dd:bb:19:b8:fd:87:8c:50:d9:91:aa:35:9b:f9:56: cf:63:bd:0e:c8:84:63:30:70:87:92:b1:1e:ee:d4: d5:6a:44:84:2e:34:ab:4d:34:9a:2f:1d:5c:1c:1f: 66:f4:1d:d0:60:32:54:93:e6:97:6b:e3:04:5e:39: b7:80:29:89:c4:ab:5e:f7:6c:73:e2:05:f3:9f:02: aa:be:12:c4:1d:84:4b:05:b3:78:8c:90:61:6a:b7: c6:48:8f:e7:c3:d6:b7:69:14:71:1f:b7:53:9f:6c: bb:ef:6a:21:c3:48:0e:7e:6f:71:29:f3:31:7b:a3: 15:20:96:ff:86:4e:03:5e:0f:b7:a2:d6:2e:7d:82: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:20:FA:B2:EF:BC:1A:64:9D:02:5A:0C:09:D1:25:90:4B:ED:D0:03 X509v3 Authority Key Identifier: keyid:1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/JSD6su-8GmSdAloMCdElkEvt0AM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:f580::/32 Signature Algorithm: sha256WithRSAEncryption 53:0a:7f:f3:d0:18:12:71:dd:26:b7:6d:5f:25:0d:20:e5:cd: c7:6c:b1:13:0a:b0:fb:6e:c0:5e:5b:7b:c0:16:80:10:2f:b3: 58:4f:e6:c8:6c:29:1f:f0:fe:52:d3:5e:25:3a:d0:80:c4:7e: c0:93:91:13:f9:ce:5b:e6:60:3e:2b:95:7e:c8:c2:21:7d:0e: ef:4f:99:50:7f:9b:53:bd:4b:12:44:f6:20:ed:d1:71:54:72: 30:ad:15:2b:c7:cc:91:82:e2:28:cd:23:78:ec:ff:0d:e6:d9: 85:72:82:07:e3:5f:8b:95:12:ce:38:89:56:71:ec:5c:60:b2: 7f:38:d1:a7:29:7f:f3:26:7a:33:98:a0:0d:94:f9:c1:b7:a3: 9a:e8:d1:81:8e:1b:61:1d:04:d8:38:83:90:45:1a:d9:b7:85: 6a:40:84:55:54:10:69:35:d5:83:5c:51:2b:d2:f1:1f:4f:2d: f2:b0:fa:58:91:ae:da:4f:66:f6:53:6b:df:ab:3c:74:aa:68: e9:a1:2d:c5:55:b4:c1:93:0a:7e:85:5c:62:ce:4e:f4:ea:3a: cf:11:6a:dc:e0:ef:2b:b7:60:06:6a:e3:13:27:b7:25:5e:60: 00:b3:a4:ea:55:bc:14:5d:3c:93:e7:fa:14:70:2f:bb:2c:f2: 8c:d3:a3:40 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUZD QUQ3MjI1Njc3OTFGRDczQTA5MUZFODkxQzk0OEYxOTE0RDY3MjAeFw0yNTA0MDkw NjQ4NDRaFw0yNjA0MDkwNjQxMzJaMDMxMTAvBgNVBAMTKDI1MjBGQUIyRUZCQzFB NjQ5RDAyNUEwQzA5RDEyNTkwNEJFREQwMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOMDDy85/WSXDNEi6BJyEISk535QPLc1ahXHG8Wz3vfkOMG9yg uD7znVAKKTt5W5YidoRBryxVXrmwwUCVhqYllSOQcRCu4qgu+ITQyG6TorJLRx6P 7Oz9Wlr2hFNsVLf4eyejv+Vu2UTtHLGaGr2VfWsuW4ncfN27Gbj9h4xQ2ZGqNZv5 Vs9jvQ7IhGMwcIeSsR7u1NVqRIQuNKtNNJovHVwcH2b0HdBgMlST5pdr4wReObeA KYnEq173bHPiBfOfAqq+EsQdhEsFs3iMkGFqt8ZIj+fD1rdpFHEft1OfbLvvaiHD SA5+b3Ep8zF7oxUglv+GTgNeD7ei1i59gtEBAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUJSD6su+8GmSdAloMCdElkEvt0AMwHwYDVR0jBBgwFoAUH8rXIlZ3kf1zoJH+ iRyUjxkU1nIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgx NS9IOHJYSWxaM2tmMXpvSkgtaVJ5VWp4a1UxbkkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0g4clhJbFoza2Yxem9KSC1pUnlVanhrVTFuSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MTUvSlNENnN1LThHbVNk QWxvTUNkRWxrRXZ0MEFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQF9YAwDQYJKoZIhvcNAQELBQADggEBAFMKf/PQGBJx3Sa3bV8lDSDlzcds sRMKsPtuwF5be8AWgBAvs1hP5shsKR/w/lLTXiU60IDEfsCTkRP5zlvmYD4rlX7I wiF9Du9PmVB/m1O9SxJE9iDt0XFUcjCtFSvHzJGC4ijNI3js/w3m2YVyggfjX4uV Es44iVZx7Fxgsn840acpf/MmejOYoA2U+cG3o5ro0YGOG2EdBNg4g5BFGtm3hWpA hFVUEGk11YNcUSvS8R9PLfKw+liRrtpPZvZTa9+rPHSqaOmhLcVVtMGTCn6FXGLO TvTqOs8Ratzg7yu3YAZq4xMntyVeYACzpOpVvBRdPJPn+hRwL7ss8ozTo0A= -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:56 2025 by rpki-client