$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa File: wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa (raw, json) Hash identifier: 3UUSZj4EE6g7iwWFskgE2wH0pWTu3Li4PZOPkm9Vn2o= Subject key identifier: C0:E3:B5:21:4B:74:6F:84:29:1B:0B:07:14:5D:43:08:31:57:2F:67 Certificate issuer: /CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Certificate serial: 105D Authority key identifier: C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa Signing time: Fri 17 Jan 2025 01:28:51 +0000 ROA not before: Fri 17 Jan 2025 01:28:51 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 136907 IP address blocks: 139.9.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4189 (0x105d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D31291638F4A4040CD3D52DEC3FF2B9709C5F2 Validity Not Before: Jan 17 01:28:51 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C0E3B5214B746F84291B0B07145D430831572F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:5f:ab:c7:81:31:c2:78:91:36:c7:c3:6e: 78:3e:7b:1d:4f:0e:61:e0:52:37:58:46:0f:68:2d: e3:a5:f0:fb:02:ce:dd:f2:53:5c:8d:0d:28:52:36: 01:16:76:26:2e:1e:8a:9e:43:a1:44:64:a8:1b:ba: fc:db:da:f5:80:a0:f1:d1:1c:49:bc:b0:b8:ed:67: 93:42:35:da:09:60:89:6c:4e:27:c7:09:f9:d4:c0: 4a:a0:0d:58:88:69:da:0b:19:ca:ba:8a:5b:94:1b: a5:e0:26:41:ae:ca:a0:a2:c5:9d:a6:f6:8a:08:f9: ad:cf:ea:a5:ba:b9:95:c5:46:cb:9b:7a:b9:29:a1: f6:9f:4d:3a:e3:37:f7:71:5c:91:03:59:8e:e4:2c: 6a:8b:4a:29:2e:51:69:6b:45:97:68:c3:48:a1:fc: 32:0d:12:6e:64:38:33:08:73:54:73:b2:d7:27:b4: db:7d:a7:b3:9d:f6:2e:9f:a9:66:81:f0:65:78:a9: a0:4b:20:36:70:5e:9f:67:09:e7:f2:6f:91:d4:17: 56:c1:9f:6a:3e:90:e8:16:c0:58:a4:0c:dd:71:3d: 56:51:77:24:ae:df:a8:fe:32:08:98:fa:09:c9:70: ae:a0:c3:b8:7f:ca:4f:da:4f:af:ce:92:58:89:4a: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E3:B5:21:4B:74:6F:84:29:1B:0B:07:14:5D:43:08:31:57:2F:67 X509v3 Authority Key Identifier: keyid:C1:D3:12:91:63:8F:4A:40:40:CD:3D:52:DE:C3:FF:2B:97:09:C5:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wdMSkWOPSkBAzT1S3sP_K5cJxfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wdMSkWOPSkBAzT1S3sP_K5cJxfI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/wOO1IUt0b4QpGwsHFF1DCDFXL2c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.9.98.0/24 Signature Algorithm: sha256WithRSAEncryption 11:26:a5:ec:66:f7:24:8e:a7:e4:27:68:68:d7:55:1b:77:a3: fd:bb:54:e6:31:08:db:4d:13:ab:55:20:7e:2d:24:3f:86:70: fd:ab:9f:8c:bd:a7:7a:2c:2b:9a:51:9b:f0:9d:03:46:15:6f: 09:71:3b:2e:26:a8:b5:7b:fd:22:4a:83:9a:04:bf:83:e1:af: 73:0e:40:73:db:e2:c8:4a:70:60:6a:0c:32:46:78:f7:18:11: c1:1f:3e:41:81:2e:1c:0c:0e:dd:03:e4:2f:16:6f:09:3f:56: e9:86:3e:ab:27:b2:da:53:f9:cd:d5:04:6a:48:46:38:3b:90: 6a:f4:1e:ed:f3:27:a8:dc:2a:be:fb:72:c1:28:64:a6:2d:29: 73:78:c4:35:a8:7c:62:6c:43:98:13:71:54:7f:38:02:9c:a8: 59:e6:e7:70:bd:97:15:4c:a3:59:b0:84:34:59:9d:ed:95:d2: 5b:79:e0:dc:d7:78:4d:95:a2:1a:a2:c9:9d:26:fc:72:4d:7a: 85:db:02:24:62:fb:37:33:2c:27:64:83:fc:20:35:71:18:e7: c4:40:01:a0:5d:8f:df:0e:44:6d:db:4c:1d:e5:35:21:3a:6b: fb:b5:39:07:8c:bb:3b:be:a0:7c:8f:d0:19:b2:b9:9f:3b:cc: 6b:fb:49:59 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzFE MzEyOTE2MzhGNEE0MDQwQ0QzRDUyREVDM0ZGMkI5NzA5QzVGMjAeFw0yNTAxMTcw MTI4NTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMwRTNCNTIxNEI3NDZG ODQyOTFCMEIwNzE0NUQ0MzA4MzE1NzJGNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCss1+rx4ExwniRNsfDbng+ex1PDmHgUjdYRg9oLeOl8PsCzt3y U1yNDShSNgEWdiYuHoqeQ6FEZKgbuvzb2vWAoPHRHEm8sLjtZ5NCNdoJYIlsTifH CfnUwEqgDViIadoLGcq6iluUG6XgJkGuyqCixZ2m9ooI+a3P6qW6uZXFRsuberkp ofafTTrjN/dxXJEDWY7kLGqLSikuUWlrRZdow0ih/DINEm5kODMIc1RzstcntNt9 p7Od9i6fqWaB8GV4qaBLIDZwXp9nCefyb5HUF1bBn2o+kOgWwFikDN1xPVZRdySu 36j+MgiY+gnJcK6gw7h/yk/aT6/OkliJSmPTAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUwOO1IUt0b4QpGwsHFF1DCDFXL2cwHwYDVR0jBBgwFoAUwdMSkWOPSkBAzT1S 3sP/K5cJxfIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NC93ZE1Ta1dPUFNrQkF6VDFTM3NQX0s1Y0p4ZkkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dkTVNrV09QU2tCQXpUMVMzc1BfSzVjSnhmSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvd09PMUlVdDBiNFFw R3dzSEZGMURDREZYTDJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIsJYjANBgkqhkiG9w0BAQsFAAOCAQEAESal7Gb3JI6n5CdoaNdVG3ej/btU 5jEI200Tq1Ugfi0kP4Zw/aufjL2neiwrmlGb8J0DRhVvCXE7LiaotXv9IkqDmgS/ g+Gvcw5Ac9viyEpwYGoMMkZ49xgRwR8+QYEuHAwO3QPkLxZvCT9W6YY+qyey2lP5 zdUEakhGODuQavQe7fMnqNwqvvtywShkpi0pc3jENah8YmxDmBNxVH84ApyoWebn cL2XFUyjWbCENFmd7ZXSW3ng3Nd4TZWiGqLJnSb8ck16hdsCJGL7NzMsJ2SD/CA1 cRjnxEABoF2P3w5EbdtMHeU1ITpr+7U5B4y7O76gfI/QGbK5nzvMa/tJWQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:18 2025 by rpki-client