$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/4hnlvNimMC0u2UvZzaWPlpefK7o.roa File: 4hnlvNimMC0u2UvZzaWPlpefK7o.roa (raw, json) Hash identifier: wRxqGnpNxRuhu9cnJcTokP52MTEQGk5Hv03x5UtiZTM= Subject key identifier: E2:19:E5:BC:D8:A6:30:2D:2E:D9:4B:D9:CD:A5:8F:96:97:9F:2B:BA Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CC6 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/4hnlvNimMC0u2UvZzaWPlpefK7o.roa Signing time: Thu 02 Jan 2025 13:58:27 +0000 ROA not before: Thu 02 Jan 2025 13:58:27 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7366 (0x1cc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:27 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=E219E5BCD8A6302D2ED94BD9CDA58F96979F2BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:03:ab:ed:cf:2b:28:2f:7a:78:1a:93:7d: 30:81:8b:0d:8b:9b:5a:70:86:6c:43:f5:3c:a7:ba: ef:02:0a:5f:86:7c:e6:f4:5e:86:0b:c8:ab:37:91: 3d:ba:b8:28:c7:3f:7c:79:51:ee:c2:6e:2a:16:94: 46:2f:96:c5:84:2b:2d:93:2e:07:7d:18:fb:36:20: 30:b4:c3:29:8c:e2:b6:82:20:76:41:a9:94:37:70: e5:2f:40:3c:bf:bb:b4:b7:79:43:ae:2b:16:69:37: f6:01:c4:b6:f2:27:f1:5e:fb:80:de:33:49:e8:61: 24:da:cf:5b:c8:a2:14:99:1c:42:81:67:dd:59:ae: df:fb:5e:26:ec:d6:fe:3f:6c:8f:87:56:6c:db:38: 03:00:c3:0c:90:df:bc:60:69:4b:44:e9:9e:d1:4d: 37:4b:bf:b1:b3:5d:bb:da:87:e5:77:34:2b:43:70: e9:e9:8d:5c:99:11:41:ae:18:93:53:0f:7a:23:af: 74:d5:cc:14:ed:ba:d9:bf:8d:3c:af:fe:2d:27:92: 31:d5:6c:d3:e2:db:3f:b1:07:49:de:e0:63:dd:68: f5:8d:26:9b:b4:7d:0e:6b:cb:86:b8:eb:fa:f4:cd: a6:4f:67:66:ec:29:6a:ce:ea:51:58:b7:d1:ff:3b: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:19:E5:BC:D8:A6:30:2D:2E:D9:4B:D9:CD:A5:8F:96:97:9F:2B:BA X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/4hnlvNimMC0u2UvZzaWPlpefK7o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption 06:b5:c4:4f:2a:df:61:af:aa:3d:05:63:5b:db:0d:a4:da:4c: 4c:ff:0a:8d:82:e2:f8:22:07:ae:95:9c:d3:cb:e9:1f:c5:b9: b3:dd:e0:86:54:bd:bb:59:0c:f2:dd:e2:7d:86:12:c4:c7:61: 2d:8a:18:68:ae:30:65:fc:ed:4f:77:9e:5c:68:cb:46:b8:e1: b8:0b:2f:b1:23:35:73:fe:e4:20:e0:e3:73:ae:58:13:cd:c2: 39:78:63:e7:72:fc:fb:1e:f4:04:44:58:7a:4c:e1:87:c2:78: 03:57:fe:1b:5b:be:b0:33:22:ef:c3:b0:7a:9b:17:76:31:09: 18:87:99:bf:3d:36:7b:05:51:0d:13:be:04:80:61:ef:2f:b2: 4b:cf:77:bd:4a:7c:41:eb:41:c2:8e:d2:2f:25:e0:94:fa:68: bd:52:cf:d4:1b:7f:ec:0d:a8:9f:11:cc:76:65:03:46:2c:5a: f4:3b:66:b1:84:f0:ee:5d:07:7d:7e:50:0f:6a:8b:c8:49:68: 67:9e:8f:c8:4e:50:24:30:9b:21:ad:59:ed:95:7b:6e:18:d9: fd:41:66:e6:27:34:d6:80:b7:06:f8:37:6a:93:09:e2:55:0a: 02:4e:f2:81:8a:27:2c:ef:a0:06:c5:2f:bf:35:21:6e:0f:2e: ef:8c:c7:d7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEUyMTlFNUJDRDhBNjMw MkQyRUQ5NEJEOUNEQTU4Rjk2OTc5RjJCQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZFQOr7c8rKC96eBqTfTCBiw2Lm1pwhmxD9Tynuu8CCl+GfOb0 XoYLyKs3kT26uCjHP3x5Ue7CbioWlEYvlsWEKy2TLgd9GPs2IDC0wymM4raCIHZB qZQ3cOUvQDy/u7S3eUOuKxZpN/YBxLbyJ/Fe+4DeM0noYSTaz1vIohSZHEKBZ91Z rt/7Xibs1v4/bI+HVmzbOAMAwwyQ37xgaUtE6Z7RTTdLv7GzXbvah+V3NCtDcOnp jVyZEUGuGJNTD3ojr3TVzBTtutm/jTyv/i0nkjHVbNPi2z+xB0ne4GPdaPWNJpu0 fQ5ry4a46/r0zaZPZ2bsKWrO6lFYt9H/O/xvAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU4hnlvNimMC0u2UvZzaWPlpefK7owHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvNGhubHZOaW1NQzB1 MlV2WnphV1BscGVmSzdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEABrXETyrfYa+qPQVjW9sNpNpMTP8K jYLi+CIHrpWc08vpH8W5s93ghlS9u1kM8t3ifYYSxMdhLYoYaK4wZfztT3eeXGjL RrjhuAsvsSM1c/7kIODjc65YE83COXhj53L8+x70BERYekzhh8J4A1f+G1u+sDMi 78OwepsXdjEJGIeZvz02ewVRDRO+BIBh7y+yS893vUp8QetBwo7SLyXglPpovVLP 1Bt/7A2onxHMdmUDRixa9DtmsYTw7l0HfX5QD2qLyEloZ56PyE5QJDCbIa1Z7ZV7 bhjZ/UFm5ic01oC3Bvg3apMJ4lUKAk7ygYonLO+gBsUvvzUhbg8u74zH1w== -----END CERTIFICATE-----Generated at Sat Apr 26 15:12:10 2025 by rpki-client