$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/F6k9KHe4njsQuPJpCS_-3P1u0dY.roa File: F6k9KHe4njsQuPJpCS_-3P1u0dY.roa (raw, json) Hash identifier: XxfTawOdm3gmPSdRS8L60sxdou0rDhTs+BRDBr8w0EA= Subject key identifier: 17:A9:3D:28:77:B8:9E:3B:10:B8:F2:69:09:2F:FE:DC:FD:6E:D1:D6 Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Certificate serial: 1031 Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/F6k9KHe4njsQuPJpCS_-3P1u0dY.roa Signing time: Wed 25 Dec 2024 03:25:04 +0000 ROA not before: Wed 25 Dec 2024 03:25:04 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 55990 IP address blocks: 115.175.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4145 (0x1031) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9 Validity Not Before: Dec 25 03:25:04 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=17A93D2877B89E3B10B8F269092FFEDCFD6ED1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:d8:9d:9f:5c:a4:fa:7d:7d:ad:78:7a:b8: a9:c7:78:01:c2:d6:08:0b:94:e2:65:76:6d:c1:42: 1f:1f:30:55:55:0b:38:be:4e:61:e5:46:1b:e7:a5: 91:1d:dc:ea:f0:ee:e8:04:db:59:be:23:b2:a4:e8: 00:99:c9:eb:06:b6:3e:da:07:6b:4c:27:96:6d:00: c0:60:36:bf:37:3a:63:52:25:13:de:f8:6f:dd:34: 53:9a:18:8f:ed:10:0c:30:cb:9b:1d:9b:91:45:63: 59:7b:e6:1f:11:5d:1b:fb:20:be:0c:f6:d9:ba:76: d2:9b:6f:ad:03:c1:bb:12:de:38:30:d1:6b:33:68: 95:5f:6d:c3:da:be:7c:ad:8f:7a:ca:c9:0c:6e:5d: 34:44:5b:7d:1e:66:8f:3f:50:32:9b:fd:2e:41:d0: 4a:a3:19:95:7d:b5:6e:92:d2:86:3a:21:5f:96:0b: d4:3f:15:0b:e0:50:c5:97:69:2e:9d:67:b6:ca:ef: c3:b7:94:de:f5:81:ad:9a:e4:9f:be:a5:af:1c:3d: ae:cc:1e:9b:09:c0:b0:d6:47:10:de:fb:b3:36:14: cb:71:b5:7b:8f:42:77:1f:23:72:4c:1f:12:7c:b4: 57:8d:0a:af:d2:8f:50:5f:1f:eb:8a:11:9f:f0:40: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A9:3D:28:77:B8:9E:3B:10:B8:F2:69:09:2F:FE:DC:FD:6E:D1:D6 X509v3 Authority Key Identifier: keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/F6k9KHe4njsQuPJpCS_-3P1u0dY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.175.64.0/19 Signature Algorithm: sha256WithRSAEncryption 06:6b:b9:56:05:77:51:3a:a8:d2:d5:fb:3e:af:79:26:25:fb: b6:e2:e7:4d:e9:86:ad:6d:35:04:20:37:99:fc:8d:91:35:6e: 37:7e:e4:b9:e3:60:0c:2d:63:0a:f4:fc:1f:0e:d0:ab:f8:85: f5:0f:c9:2f:ff:55:c0:ce:7a:06:72:20:6a:bd:c8:d1:b0:d4: 13:e8:b8:de:78:d2:89:08:52:ff:0b:0b:dd:32:09:81:8a:1e: 4c:40:c4:1c:c3:01:fb:66:4e:70:65:6b:ea:a5:a4:d3:95:96: 29:1d:23:2d:89:88:c1:b8:8f:1f:16:ca:6d:36:21:eb:1b:bf: 54:f9:99:79:ed:b2:32:3d:ad:c2:b4:1d:88:fb:8d:dc:ce:10: b5:aa:ae:55:da:42:0a:36:26:8b:e0:f6:1d:5e:4c:27:93:94: 84:48:15:49:4d:70:14:15:f7:aa:b4:88:c5:a9:bb:9d:d3:b1: 78:5a:c2:e6:8c:c7:b3:90:73:fd:c1:48:b1:6d:f6:0c:60:0c: 37:97:11:6c:5f:79:c0:a7:c3:df:a0:fb:1a:e6:95:3f:17:47: 6b:31:71:11:5f:df:d7:93:e4:b1:dc:14:e5:34:d5:e5:5d:ec: a2:a3:3c:01:7f:90:4f:a0:4a:4a:ef:50:16:db:64:ff:20:64: 19:62:07:b7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDEyMjUw MzI1MDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3QTkzRDI4NzdCODlF M0IxMEI4RjI2OTA5MkZGRURDRkQ2RUQxRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTptidn1yk+n19rXh6uKnHeAHC1ggLlOJldm3BQh8fMFVVCzi+ TmHlRhvnpZEd3Orw7ugE21m+I7Kk6ACZyesGtj7aB2tMJ5ZtAMBgNr83OmNSJRPe +G/dNFOaGI/tEAwwy5sdm5FFY1l75h8RXRv7IL4M9tm6dtKbb60DwbsS3jgw0Wsz aJVfbcPavnytj3rKyQxuXTREW30eZo8/UDKb/S5B0EqjGZV9tW6S0oY6IV+WC9Q/ FQvgUMWXaS6dZ7bK78O3lN71ga2a5J++pa8cPa7MHpsJwLDWRxDe+7M2FMtxtXuP QncfI3JMHxJ8tFeNCq/Sj1BfH+uKEZ/wQMX5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUF6k9KHe4njsQuPJpCS/+3P1u0dYwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvRjZrOUtIZTRuanNR dVBKcENTXy0zUDF1MGRZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXOvQDANBgkqhkiG9w0BAQsFAAOCAQEABmu5VgV3UTqo0tX7Pq95JiX7tuLn TemGrW01BCA3mfyNkTVuN37kueNgDC1jCvT8Hw7Qq/iF9Q/JL/9VwM56BnIgar3I 0bDUE+i43njSiQhS/wsL3TIJgYoeTEDEHMMB+2ZOcGVr6qWk05WWKR0jLYmIwbiP HxbKbTYh6xu/VPmZee2yMj2twrQdiPuN3M4QtaquVdpCCjYmi+D2HV5MJ5OUhEgV SU1wFBX3qrSIxam7ndOxeFrC5ozHs5Bz/cFIsW32DGAMN5cRbF95wKfD36D7GuaV PxdHazFxEV/f15PksdwU5TTV5V3soqM8AX+QT6BKSu9QFttk/yBkGWIHtw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:14:52 2025 by rpki-client