$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa File: RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa (raw, json) Hash identifier: 0/rtIA/CyHWaNlCG1HaTHIQcMOksE7XMp+JwopuZVL4= Subject key identifier: 45:23:E1:66:0C:D9:67:0E:7F:7F:D4:02:E4:57:54:4C:39:AF:FE:99 Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB Certificate serial: 21DD Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa Signing time: Fri 17 Jan 2025 01:28:44 +0000 ROA not before: Fri 17 Jan 2025 01:28:44 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139139 IP address blocks: 2406:3340::/36 maxlen: 36 2406:3340:1000::/36 maxlen: 36 2406:3340:2000::/36 maxlen: 36 2406:3340:3000::/36 maxlen: 36 2406:3340:4000::/36 maxlen: 36 2406:3340:5000::/36 maxlen: 36 2406:3340:6000::/36 maxlen: 36 2406:3340:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8669 (0x21dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB Validity Not Before: Jan 17 01:28:44 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4523E1660CD9670E7F7FD402E457544C39AFFE99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:fe:b4:e3:7a:a5:62:c0:b9:d9:a8:98:08: 2f:a6:99:be:17:b7:70:49:6c:f3:0f:68:0d:20:88: a8:4d:7f:83:6f:a9:50:18:9f:67:0a:d9:da:7a:fa: 1c:1d:21:c1:43:c6:02:25:7e:2f:1a:d9:7c:2a:6d: 84:f3:ea:99:65:a9:f7:19:5e:f2:f3:a2:74:4b:40: a9:27:c6:be:ab:37:1b:e7:7b:3f:8a:73:b1:70:bc: 4f:1e:4c:e8:9e:27:c8:4a:96:04:4c:55:9a:78:57: 38:55:39:d7:9d:12:5d:48:5b:5c:4a:71:7d:f7:87: a9:14:dc:e6:5d:9b:3c:96:ef:d3:ad:e4:25:4f:18: 2e:9a:b3:41:8f:80:61:cd:9e:92:4b:12:b3:d4:25: 69:b5:ee:10:d4:bf:ae:79:77:1e:a0:3f:9a:49:ae: bc:3c:3c:03:94:38:a6:bb:34:3c:49:28:95:db:82: 41:12:a5:3d:c8:6c:70:74:e0:54:5c:cf:0f:8b:93: bb:2b:2b:02:34:71:a8:c2:ff:56:ac:fe:9e:3e:d5: ca:c4:1b:7d:f5:fe:ae:6f:65:99:8c:97:17:20:09: 6e:4b:f0:c7:d8:04:8b:f2:5c:1d:6d:63:bc:e0:55: 15:57:d8:18:f1:0f:12:5a:e6:98:59:6e:50:ac:62: 91:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:23:E1:66:0C:D9:67:0E:7F:7F:D4:02:E4:57:54:4C:39:AF:FE:99 X509v3 Authority Key Identifier: keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/RSPhZgzZZw5_f9QC5FdUTDmv_pk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3340::/33 Signature Algorithm: sha256WithRSAEncryption 79:fd:b1:0f:95:4b:94:3b:78:be:5d:0e:33:cb:42:34:d6:f4: e2:09:31:24:5e:d3:80:61:35:4b:04:1c:cc:54:e6:93:04:f6: ba:4c:74:c0:5f:91:d4:aa:28:99:1e:3e:6b:50:05:92:07:b8: 07:a4:4f:f9:95:c9:22:f6:2a:2a:6c:51:32:c8:1b:ae:89:b2: 81:1f:58:92:92:6e:92:ed:27:a0:d4:ba:ed:b5:44:0a:28:1e: b1:1d:c6:6a:45:6d:0f:66:18:7c:03:b4:3c:90:14:8a:11:0f: cb:42:cc:b3:32:1a:9b:49:57:47:b7:67:21:de:e3:76:a2:3a: c9:99:33:b9:91:08:6f:30:8e:f9:fb:b4:11:a3:4f:e3:68:cb: d0:77:f1:3a:04:9f:db:83:dd:31:37:ef:a8:e1:59:7c:0a:91: be:02:21:d8:78:4b:46:e5:79:0e:95:1a:5a:a6:48:c3:39:ac: 7f:be:c1:b6:64:53:cd:bc:f3:e6:63:0c:97:2a:a6:51:01:5d: 08:b4:16:6d:0c:31:47:89:7e:87:2e:a9:2a:40:4e:29:9d:9c: 89:75:a0:1a:0f:6f:b4:e6:19:11:c3:1e:36:31:9a:83:66:d4: 30:a3:65:2b:e2:0a:72:53:1a:21:2b:d1:4d:b4:c1:b9:ea:17: 25:8f:97:95 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICId0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yNTAxMTcw MTI4NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ1MjNFMTY2MENEOTY3 MEU3RjdGRDQwMkU0NTc1NDRDMzlBRkZFOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYD/6043qlYsC52aiYCC+mmb4Xt3BJbPMPaA0giKhNf4NvqVAY n2cK2dp6+hwdIcFDxgIlfi8a2XwqbYTz6pllqfcZXvLzonRLQKknxr6rNxvnez+K c7FwvE8eTOieJ8hKlgRMVZp4VzhVOdedEl1IW1xKcX33h6kU3OZdmzyW79Ot5CVP GC6as0GPgGHNnpJLErPUJWm17hDUv655dx6gP5pJrrw8PAOUOKa7NDxJKJXbgkES pT3IbHB04FRczw+Lk7srKwI0cajC/1as/p4+1crEG331/q5vZZmMlxcgCW5L8MfY BIvyXB1tY7zgVRVX2BjxDxJa5phZblCsYpENAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQURSPhZgzZZw5/f9QC5FdUTDmv/pkwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4 OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvUlNQaFpnelpadzVf ZjlRQzVGZFVURG12X3BrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGByQGM0AAMA0GCSqGSIb3DQEBCwUAA4IBAQB5/bEPlUuUO3i+XQ4zy0I01vTi CTEkXtOAYTVLBBzMVOaTBPa6THTAX5HUqiiZHj5rUAWSB7gHpE/5lcki9ioqbFEy yBuuibKBH1iSkm6S7Seg1LrttUQKKB6xHcZqRW0PZhh8A7Q8kBSKEQ/LQsyzMhqb SVdHt2ch3uN2ojrJmTO5kQhvMI75+7QRo0/jaMvQd/E6BJ/bg90xN++o4Vl8CpG+ AiHYeEtG5XkOlRpapkjDOax/vsG2ZFPNvPPmYwyXKqZRAV0ItBZtDDFHiX6HLqkq QE4pnZyJdaAaD2+05hkRwx42MZqDZtQwo2Ur4gpyUxohK9FNtMG56hclj5eV -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:01 2025 by rpki-client