$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/xmSdNw8vTvHxebUKi4UpDpx1CJs.roa File: xmSdNw8vTvHxebUKi4UpDpx1CJs.roa (raw, json) Hash identifier: A1QzeTfVykyXWtMtANpc8bho4vGpwZsb4Z9PkCGSZhE= Subject key identifier: C6:64:9D:37:0F:2F:4E:F1:F1:79:B5:0A:8B:85:29:0E:9C:75:08:9B Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 1CC8 Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xmSdNw8vTvHxebUKi4UpDpx1CJs.roa Signing time: Thu 02 Jan 2025 13:58:27 +0000 ROA not before: Thu 02 Jan 2025 13:58:27 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 137718 IP address blocks: 118.145.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7368 (0x1cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Jan 2 13:58:27 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C6649D370F2F4EF1F179B50A8B85290E9C75089B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:44:50:52:2a:7a:f5:5a:70:c1:83:ad:c7: 24:a7:40:3b:d8:3f:77:ff:77:f7:b2:fe:77:93:10: ba:5f:e5:b6:54:89:af:3b:d9:9e:11:93:ad:4a:ea: 55:bd:5e:ed:28:19:15:54:89:9a:f6:6d:4d:cd:27: 10:71:b9:74:6c:4b:40:7e:1c:52:80:a9:3e:65:5e: cd:59:b1:f0:1a:6c:7c:00:80:d0:17:8f:c6:1c:ad: 7b:37:da:12:39:3b:ab:62:9f:7b:23:ce:8e:51:a8: 31:28:df:a0:24:60:64:3a:59:3c:0c:4b:3e:cd:0b: 8d:e8:12:f8:54:10:91:47:b4:50:a8:6b:96:a1:05: aa:ce:ee:cf:54:a6:43:6b:6d:19:62:68:cc:30:da: ec:e7:a5:2f:9c:36:fb:0b:45:2e:68:84:49:5e:59: c9:7d:56:a5:b8:58:04:30:57:a8:e8:4a:1d:d5:45: 1b:21:55:bf:c7:f2:2d:d6:15:72:89:f5:a9:18:3c: 6c:72:4d:33:96:0d:c3:33:05:c4:26:46:8e:ac:9b: ad:79:53:f3:17:93:92:69:e7:b7:19:4d:ee:3e:2a: 3f:1f:0b:0f:76:a6:c3:4b:fd:6f:21:72:8b:70:e2: 58:b5:15:08:1f:65:1e:7e:04:56:8c:82:4f:2a:27: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:64:9D:37:0F:2F:4E:F1:F1:79:B5:0A:8B:85:29:0E:9C:75:08:9B X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xmSdNw8vTvHxebUKi4UpDpx1CJs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.145.32.0/19 Signature Algorithm: sha256WithRSAEncryption bd:63:9b:04:60:57:65:f9:34:d6:07:53:b7:c6:4d:8d:10:ef: 39:23:86:8e:d7:b5:24:ee:96:43:5c:1b:72:16:f2:f8:c9:27: 6d:26:d1:5d:1c:ba:48:f4:bd:c2:58:fa:08:be:64:c9:fd:0b: 58:40:fe:c9:49:74:6e:b8:5b:f4:66:81:bb:69:ec:f7:c9:f0: ba:89:00:87:5d:ff:e7:97:c7:40:37:7f:2a:66:9a:59:7a:d5: b7:84:fb:01:4c:ee:9c:d5:6c:00:14:15:dc:66:0e:ec:83:fc: 73:95:2b:23:b8:7e:db:3f:bc:96:f1:be:1c:b0:2c:b8:7f:e8: 72:27:d3:16:56:04:08:06:76:7e:8d:2c:be:05:08:6d:ba:9a: 6a:98:02:22:07:df:99:d7:07:95:2f:08:d2:97:c6:c5:65:41: 09:fd:d5:94:d9:f5:b1:13:6f:77:af:a0:e9:ad:89:92:62:c6: 16:be:53:ac:47:b7:f4:99:61:58:bd:7e:e6:8a:66:af:9f:4d: 6d:9b:30:b4:80:7f:c1:a4:33:e1:71:47:56:78:89:db:12:72: 3b:67:0c:23:07:39:6b:52:d6:b5:fa:21:9c:02:ab:d9:f8:37: 4c:21:17:b8:1e:ec:79:76:44:eb:7f:b0:17:28:20:b6:5c:33: c3:ea:c9:7f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICHMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx MzU4MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM2NjQ5RDM3MEYyRjRF RjFGMTc5QjUwQThCODUyOTBFOUM3NTA4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9RERQUip69VpwwYOtxySnQDvYP3f/d/ey/neTELpf5bZUia87 2Z4Rk61K6lW9Xu0oGRVUiZr2bU3NJxBxuXRsS0B+HFKAqT5lXs1ZsfAabHwAgNAX j8YcrXs32hI5O6tin3sjzo5RqDEo36AkYGQ6WTwMSz7NC43oEvhUEJFHtFCoa5ah BarO7s9UpkNrbRliaMww2uznpS+cNvsLRS5ohEleWcl9VqW4WAQwV6joSh3VRRsh Vb/H8i3WFXKJ9akYPGxyTTOWDcMzBcQmRo6sm615U/MXk5Jp57cZTe4+Kj8fCw92 psNL/W8hcotw4li1FQgfZR5+BFaMgk8qJ8rrAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUxmSdNw8vTvHxebUKi4UpDpx1CJswHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQveG1TZE53OHZUdkh4 ZWJVS2k0VXBEcHgxQ0pzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAvWObBGBXZfk01gdTt8ZNjRDvOSOG jte1JO6WQ1wbchby+MknbSbRXRy6SPS9wlj6CL5kyf0LWED+yUl0brhb9GaBu2ns 98nwuokAh13/55fHQDd/KmaaWXrVt4T7AUzunNVsABQV3GYO7IP8c5UrI7h+2z+8 lvG+HLAsuH/ocifTFlYECAZ2fo0svgUIbbqaapgCIgffmdcHlS8I0pfGxWVBCf3V lNn1sRNvd6+g6a2JkmLGFr5TrEe39JlhWL1+5opmr59NbZswtIB/waQz4XFHVniJ 2xJyO2cMIwc5a1LWtfohnAKr2fg3TCEXuB7seXZE63+wFyggtlwzw+rJfw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:12:44 2025 by rpki-client