$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa File: tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa (raw, json) Hash identifier: SXZrx4Q4IxBEYib/DtnwGYISea4XlmC7x5pSx7JcMyc= Subject key identifier: B6:24:63:2D:66:EA:61:41:5D:AD:D1:B6:7F:06:26:5B:5F:EA:64:80 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 1BCC Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa Signing time: Fri 17 Jan 2025 01:27:35 +0000 ROA not before: Fri 17 Jan 2025 01:27:35 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139021 IP address blocks: 218.247.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7116 (0x1bcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Jan 17 01:27:35 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B624632D66EA61415DADD1B67F06265B5FEA6480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:79:58:71:80:ab:c3:6a:b0:7e:25:0b:6c: e1:24:5d:7d:4c:7d:d7:7d:2f:3f:51:05:42:35:c6: 68:9e:54:b6:82:23:ab:a6:6c:ee:64:8b:63:5a:1c: 67:9d:18:87:2d:0a:24:d6:a8:8d:40:61:66:d2:01: b3:10:4a:25:eb:69:b3:e9:fb:d6:72:d3:67:50:5a: 85:95:bc:c3:07:b3:53:cd:10:e7:11:a8:1e:b0:6d: 43:05:8b:4a:e9:2d:2d:92:ac:9a:6d:51:38:50:3e: c7:de:fc:33:65:55:9d:7a:75:a7:8e:d5:36:62:df: 43:54:6a:26:9c:96:a9:57:44:7c:fa:e2:83:bb:6c: 13:d8:e8:bc:80:3f:0d:5b:71:3d:f2:3c:50:3b:33: 77:a8:d1:49:a1:30:c9:3d:93:4f:53:c7:f3:b6:02: b4:7c:5a:2f:cd:21:1c:4c:65:8d:5d:72:c1:a2:56: 2a:40:ab:81:49:f8:d3:38:26:b5:64:cc:c2:2f:a0: 42:e1:dc:84:e0:8c:76:82:37:dd:95:2a:b0:a0:9e: 90:4c:63:b2:c8:0c:c1:c9:fe:04:de:4b:ae:56:61: be:f4:65:d5:2b:62:24:3c:e3:d4:a5:05:6e:34:d9: 63:a3:bb:a1:fd:ff:c7:6c:ad:bf:d1:dd:f3:c3:82: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:24:63:2D:66:EA:61:41:5D:AD:D1:B6:7F:06:26:5B:5F:EA:64:80 X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.247.64.0/19 Signature Algorithm: sha256WithRSAEncryption 3a:49:6d:7c:1d:e4:cf:6e:0c:cb:43:8e:18:e4:73:c9:2f:da: a3:1e:71:e8:f5:05:7b:07:ee:af:42:1e:c5:63:6c:3b:5e:b9: 64:f8:af:b1:a7:91:7b:fb:a7:f9:b2:1c:09:25:c3:a1:89:65: 82:6a:c0:c2:b1:c9:64:90:e2:c8:c3:2a:64:d1:03:ff:95:a5: 48:fb:d0:77:ea:2a:07:9c:a1:81:a8:3a:dc:15:b7:16:6f:5d: b9:7b:d5:8a:d6:c1:b7:bc:3b:09:cd:31:79:0a:54:96:c1:43: 88:49:85:64:60:40:8d:09:9d:de:e5:5d:c5:66:66:a9:ae:0f: f9:00:a6:a2:04:b3:f9:7e:eb:bf:76:0e:31:04:46:39:28:1d: 63:af:9b:40:34:d2:20:24:5d:33:fb:2a:76:cf:c2:18:6f:a2: 26:4e:e5:21:df:45:0f:77:94:ef:92:40:55:42:91:d5:26:cc: 09:83:82:71:9d:93:c9:1d:bb:24:ef:30:44:d9:84:c2:b9:34: e9:ed:32:cf:38:d2:7c:72:b7:86:7a:4a:e2:eb:5c:3f:0b:ab: ce:df:fc:b7:50:74:fd:06:5a:64:5a:bf:8e:66:93:d4:1a:08: b9:5c:39:d1:35:fe:ac:07:95:b7:92:9d:a1:9d:24:2d:c5:57: 92:1d:ec:8d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICG8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNTAxMTcw MTI3MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI2MjQ2MzJENjZFQTYx NDE1REFERDFCNjdGMDYyNjVCNUZFQTY0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/yXlYcYCrw2qwfiULbOEkXX1Mfdd9Lz9RBUI1xmieVLaCI6um bO5ki2NaHGedGIctCiTWqI1AYWbSAbMQSiXrabPp+9Zy02dQWoWVvMMHs1PNEOcR qB6wbUMFi0rpLS2SrJptUThQPsfe/DNlVZ16daeO1TZi30NUaiaclqlXRHz64oO7 bBPY6LyAPw1bcT3yPFA7M3eo0UmhMMk9k09Tx/O2ArR8Wi/NIRxMZY1dcsGiVipA q4FJ+NM4JrVkzMIvoELh3ITgjHaCN92VKrCgnpBMY7LIDMHJ/gTeS65WYb70ZdUr YiQ849SlBW402WOju6H9/8dsrb/R3fPDgmN1AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUtiRjLWbqYUFdrdG2fwYmW1/qZIAwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvdGlSakxXYnFZVUZk cmRHMmZ3WW1XMV9xWklBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdr3QDANBgkqhkiG9w0BAQsFAAOCAQEAOkltfB3kz24My0OOGORzyS/aox5x 6PUFewfur0IexWNsO165ZPivsaeRe/un+bIcCSXDoYllgmrAwrHJZJDiyMMqZNED /5WlSPvQd+oqB5yhgag63BW3Fm9duXvVitbBt7w7Cc0xeQpUlsFDiEmFZGBAjQmd 3uVdxWZmqa4P+QCmogSz+X7rv3YOMQRGOSgdY6+bQDTSICRdM/sqds/CGG+iJk7l Id9FD3eU75JAVUKR1SbMCYOCcZ2TyR27JO8wRNmEwrk06e0yzzjSfHK3hnpK4utc Pwurzt/8t1B0/QZaZFq/jmaT1BoIuVw50TX+rAeVt5KdoZ0kLcVXkh3sjQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:28 2025 by rpki-client