$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa File: 5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa (raw, json) Hash identifier: 1G9TvIGpOI19k+vNY2vWqyAcGnf/NgnyIFlBuchbsrU= Subject key identifier: E5:94:C0:F4:EA:4B:9C:8C:AB:1F:1C:96:E4:6E:18:43:11:D2:EE:4F Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 1BCE Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa Signing time: Fri 17 Jan 2025 01:27:36 +0000 ROA not before: Fri 17 Jan 2025 01:27:36 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139021 IP address blocks: 218.247.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7118 (0x1bce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 17 01:27:36 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E594C0F4EA4B9C8CAB1F1C96E46E184311D2EE4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:03:23:42:b8:d6:50:f7:19:bf:8a:76:a9: 98:48:fc:4a:46:bb:ec:de:2b:03:d5:0d:bb:5c:c6: ac:f5:c2:d0:53:8d:54:9f:81:44:c2:63:4d:77:0b: 7f:8e:98:0c:ce:48:2e:20:95:cb:de:ff:37:50:58: c6:f7:34:1b:d8:36:71:f8:0e:ac:fb:3f:a9:0f:c3: 2f:4d:da:71:f3:7d:f4:2c:3f:4d:e3:4f:f3:c7:06: 96:da:2a:1d:bd:ce:86:87:4f:88:6b:ae:7e:f7:a5: 07:26:45:d4:01:17:5d:d2:f1:63:37:d3:1c:7a:56: 6d:de:27:c8:b9:48:57:c2:17:51:90:7d:53:c1:fd: ee:1a:d4:0f:ce:84:ec:fa:5c:3d:05:07:e5:48:ca: 78:94:00:ae:1d:60:85:de:37:7c:e0:ae:1c:61:6d: d6:56:7e:df:85:34:7b:92:2e:26:e8:4e:a1:18:65: fa:cf:7a:57:d0:04:fa:6b:85:45:d7:a0:33:3b:67: 5b:09:f4:ec:b5:0d:d1:b5:60:7f:d0:f1:7a:0a:73: 83:43:7b:19:29:51:06:19:eb:b9:b2:ae:18:fa:77: 8b:b7:b6:9a:e9:98:63:07:15:9e:44:86:a2:b2:43: 72:b0:0e:fe:d9:b7:bc:56:0c:58:26:2a:27:c6:57: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:94:C0:F4:EA:4B:9C:8C:AB:1F:1C:96:E4:6E:18:43:11:D2:EE:4F X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.247.64.0/20 Signature Algorithm: sha256WithRSAEncryption 93:be:5e:41:5f:36:3f:eb:92:c4:1d:d8:fb:fb:8a:ac:e2:3e: 59:35:80:47:26:b6:54:57:8c:c8:38:ce:64:1a:ff:43:36:2f: 62:7f:5f:82:05:ef:62:01:24:41:bc:c8:a0:12:45:32:18:f4: 7d:91:b3:42:f1:b8:48:0a:da:ef:83:07:b9:83:98:bb:cd:86: 4b:0f:52:a3:e8:8d:a8:f3:72:ef:dd:ea:aa:39:7e:c8:b4:49: 54:62:35:7f:a2:f8:6b:37:69:26:be:c0:2a:22:06:ac:eb:c9: d3:86:4a:6d:0c:f2:d1:71:28:aa:e5:61:d7:cf:8d:3e:2f:4f: 5f:aa:64:c2:90:40:1d:9d:55:ff:f6:36:5a:6d:4c:93:60:27: 29:16:c0:1b:64:35:43:4f:85:2d:93:e3:a0:cd:25:50:80:f8: 27:16:14:1a:05:b0:11:ab:b8:93:69:ea:bc:9f:bd:81:24:6b: 12:45:38:ba:05:db:e1:e1:96:d6:5e:a4:91:0d:5f:fb:c3:2d: db:e8:81:87:37:16:cd:a7:d6:a1:cc:7f:b4:c2:12:34:68:c8: ce:04:88:6a:ac:04:18:3f:da:0a:f3:47:c3:b9:9f:66:30:4e: 05:f8:3d:a0:35:b8:71:f0:ad:3d:f3:46:e5:03:56:96:94:40: 61:bc:8e:75 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNTAxMTcw MTI3MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU1OTRDMEY0RUE0QjlD OENBQjFGMUM5NkU0NkUxODQzMTFEMkVFNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZfgMjQrjWUPcZv4p2qZhI/EpGu+zeKwPVDbtcxqz1wtBTjVSf gUTCY013C3+OmAzOSC4glcve/zdQWMb3NBvYNnH4Dqz7P6kPwy9N2nHzffQsP03j T/PHBpbaKh29zoaHT4hrrn73pQcmRdQBF13S8WM30xx6Vm3eJ8i5SFfCF1GQfVPB /e4a1A/OhOz6XD0FB+VIyniUAK4dYIXeN3zgrhxhbdZWft+FNHuSLiboTqEYZfrP elfQBPprhUXXoDM7Z1sJ9Oy1DdG1YH/Q8XoKc4NDexkpUQYZ67myrhj6d4u3tprp mGMHFZ5EhqKyQ3KwDv7Zt7xWDFgmKifGV5t1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5ZTA9OpLnIyrHxyW5G4YQxHS7k8wHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvNVpUQTlPcExuSXly SHh5VzVHNFlReEhTN2s4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNr3QDANBgkqhkiG9w0BAQsFAAOCAQEAk75eQV82P+uSxB3Y+/uKrOI+WTWA Rya2VFeMyDjOZBr/QzYvYn9fggXvYgEkQbzIoBJFMhj0fZGzQvG4SAra74MHuYOY u82GSw9So+iNqPNy793qqjl+yLRJVGI1f6L4azdpJr7AKiIGrOvJ04ZKbQzy0XEo quVh18+NPi9PX6pkwpBAHZ1V//Y2Wm1Mk2AnKRbAG2Q1Q0+FLZPjoM0lUID4JxYU GgWwEau4k2nqvJ+9gSRrEkU4ugXb4eGW1l6kkQ1f+8Mt2+iBhzcWzafWocx/tMIS NGjIzgSIaqwEGD/aCvNHw7mfZjBOBfg9oDW4cfCtPfNG5QNWlpRAYbyOdQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:51 2025 by rpki-client