$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/bCACi8IYyPR19jU-7QrGH4JnDNk.roa File: bCACi8IYyPR19jU-7QrGH4JnDNk.roa (raw, json) Hash identifier: FUCJRFUzYz1fX9WYuE9LFGdGrjfMp5t6U9c8etdt6dc= Subject key identifier: 6C:20:02:8B:C2:18:C8:F4:75:F6:35:3E:ED:0A:C6:1F:82:67:0C:D9 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CB8 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/bCACi8IYyPR19jU-7QrGH4JnDNk.roa Signing time: Thu 02 Jan 2025 13:58:22 +0000 ROA not before: Thu 02 Jan 2025 13:58:22 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 4811 IP address blocks: 118.196.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7352 (0x1cb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:22 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=6C20028BC218C8F475F6353EED0AC61F82670CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:44:4b:53:00:9a:c6:49:41:3d:71:8f:64: 5d:73:39:3b:41:e5:93:26:de:1c:4b:27:ec:2c:31: d5:1a:a2:e3:b5:68:6f:a3:79:ed:79:dd:75:65:77: 50:f7:b8:32:44:4a:e5:bf:df:52:9d:4e:e5:df:bc: 7c:29:b8:f4:cd:2b:d1:de:97:77:ad:0e:64:d6:cc: 52:32:2d:97:68:e6:8c:b5:91:e3:06:c6:05:ff:0b: 72:2e:40:0b:39:19:cf:4c:8a:12:7e:d2:b7:42:7e: a8:42:d2:96:44:9c:bd:4d:40:50:59:11:63:22:45: 03:07:1e:eb:ad:a4:cb:6f:4a:0b:cd:00:87:e0:40: 3f:64:ac:1a:13:5b:44:e7:50:bb:f2:ad:68:0d:3a: 66:de:3c:f6:b0:5e:96:2a:39:d5:ff:f4:b7:f0:25: 78:b4:73:92:8c:b9:3f:68:77:b1:65:57:24:55:16: 8a:1a:8f:2f:f3:68:73:8c:0a:28:24:b2:28:ff:4d: 8d:bd:90:8a:c5:c4:8d:af:4a:03:d5:07:2f:df:9d: f2:2b:92:f0:a8:2a:f0:c3:da:f3:39:b9:a5:cb:3d: 9f:00:1f:a1:01:11:d7:0d:ec:48:5f:f4:6e:55:52: a8:48:ec:20:3a:09:cf:4d:af:d3:cb:79:28:de:c7: 39:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:20:02:8B:C2:18:C8:F4:75:F6:35:3E:ED:0A:C6:1F:82:67:0C:D9 X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/bCACi8IYyPR19jU-7QrGH4JnDNk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.196.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6f:78:57:25:44:84:c5:98:06:cb:9d:36:85:1a:61:19:ac:43: 49:33:95:27:90:5b:fe:9d:98:c4:eb:26:d6:d9:66:cb:e0:87: b7:12:12:54:21:9f:33:e7:24:85:3c:df:72:53:b4:54:a8:56: aa:92:83:fe:f3:95:71:ec:bb:1f:3a:ff:bb:6a:3d:8f:9a:5d: 74:96:9b:4c:a4:a2:3e:ec:40:d1:73:d5:c1:1d:37:e1:6e:9e: 39:eb:ad:3d:95:bb:60:8f:36:a2:25:7c:e4:62:d6:23:50:8d: ff:a9:7d:32:dc:29:be:09:94:70:47:69:71:59:80:b5:8a:af: a2:ca:4a:46:1e:32:42:a1:9b:3f:1e:60:44:69:80:50:51:f0: 72:38:0f:12:db:e4:52:b1:64:26:7d:d8:5a:f2:7b:49:ff:88: e4:3d:9d:b0:38:70:d1:42:b0:27:b7:d6:ad:26:07:e9:6c:7e: 76:57:ef:d8:93:14:8c:46:22:5e:59:6b:79:4f:ef:84:01:3c: 91:1d:f4:99:2c:6e:49:9c:7c:14:f0:7b:0a:34:1d:4a:b7:6d: ff:db:ce:11:6c:5d:f0:b3:45:65:8f:c2:fa:26:94:4c:30:cf: 45:e8:69:55:9f:e5:b9:38:63:44:7c:60:49:ac:bf:57:78:25: e3:64:36:92 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICHLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZDMjAwMjhCQzIxOEM4 RjQ3NUY2MzUzRUVEMEFDNjFGODI2NzBDRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH8ERLUwCaxklBPXGPZF1zOTtB5ZMm3hxLJ+wsMdUaouO1aG+j ee153XVld1D3uDJESuW/31KdTuXfvHwpuPTNK9Hel3etDmTWzFIyLZdo5oy1keMG xgX/C3IuQAs5Gc9MihJ+0rdCfqhC0pZEnL1NQFBZEWMiRQMHHuutpMtvSgvNAIfg QD9krBoTW0TnULvyrWgNOmbePPawXpYqOdX/9LfwJXi0c5KMuT9od7FlVyRVFooa jy/zaHOMCigksij/TY29kIrFxI2vSgPVBy/fnfIrkvCoKvDD2vM5uaXLPZ8AH6EB EdcN7Ehf9G5VUqhI7CA6Cc9Nr9PLeSjexznlAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUbCACi8IYyPR19jU+7QrGH4JnDNkwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvYkNBQ2k4SVl5UFIx OWpVLTdRckdINEpuRE5rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAXbEMA0GCSqGSIb3DQEBCwUAA4IBAQBveFclRITFmAbLnTaFGmEZrENJM5Un kFv+nZjE6ybW2WbL4Ie3EhJUIZ8z5ySFPN9yU7RUqFaqkoP+85Vx7LsfOv+7aj2P ml10lptMpKI+7EDRc9XBHTfhbp456609lbtgjzaiJXzkYtYjUI3/qX0y3Cm+CZRw R2lxWYC1iq+iykpGHjJCoZs/HmBEaYBQUfByOA8S2+RSsWQmfdha8ntJ/4jkPZ2w OHDRQrAnt9atJgfpbH52V+/YkxSMRiJeWWt5T++EATyRHfSZLG5JnHwU8HsKNB1K t23/284RbF3ws0Vlj8L6JpRMMM9F6GlVn+W5OGNEfGBJrL9XeCXjZDaS -----END CERTIFICATE-----Generated at Sat Apr 26 15:09:05 2025 by rpki-client