$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/313/0juefDmvXwTk-netHWxtCMJsE0c.roa File: 0juefDmvXwTk-netHWxtCMJsE0c.roa (raw, json) Hash identifier: 3//WRvtSOdT2nxGrSxEiliu2nBg9gHf53d3i2T+f07k= Subject key identifier: D2:3B:9E:7C:39:AF:5F:04:E4:FA:77:AD:1D:6C:6D:08:C2:6C:13:47 Certificate issuer: /CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47 Certificate serial: 1DB0 Authority key identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/0juefDmvXwTk-netHWxtCMJsE0c.roa Signing time: Sat 26 Apr 2025 04:18:33 +0000 ROA not before: Sat 26 Apr 2025 04:18:33 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 38365 IP address blocks: 117.58.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7600 (0x1db0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47 Validity Not Before: Apr 26 04:18:33 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=D23B9E7C39AF5F04E4FA77AD1D6C6D08C26C1347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:19:aa:8e:96:8d:12:58:44:4d:83:84:c3: d8:88:ba:44:46:ab:f2:1b:f8:f2:e8:f7:e3:6d:28: 69:e8:7f:f8:d8:77:7e:05:76:21:f7:dc:6a:7d:b7: 62:17:62:94:40:c4:e7:88:af:6e:3e:1a:fe:be:10: ef:06:00:4f:3c:72:84:05:3d:84:02:ce:4b:ed:55: 82:a2:b3:e4:62:ad:ee:2a:cf:41:14:24:68:f7:a0: 8d:0e:96:a6:40:2d:48:8f:47:26:79:3b:cc:dd:0b: 9f:1d:a5:74:3d:7e:fd:c8:23:a4:db:5c:c4:17:1e: f8:69:1a:15:ae:8e:21:04:5e:81:5e:8d:aa:41:14: 47:7a:ce:b0:c6:f4:58:21:e2:34:ea:dc:8c:19:13: 1c:40:2c:ee:e3:64:f0:19:e1:01:b5:90:2e:f6:85: 0c:44:12:67:33:2c:89:c9:1f:16:b3:7e:bf:e5:dd: d3:05:c0:79:95:d5:c2:79:cd:30:d4:6d:59:0a:cb: d7:6d:34:0e:bd:d2:11:95:44:bd:f7:1e:b2:00:cb: 5c:63:26:41:ad:de:db:51:db:95:50:51:52:a7:16: 3f:b6:14:44:21:c1:84:e9:56:78:ca:55:a0:fb:cb: bd:da:39:f6:02:ac:76:0b:e0:49:dc:dd:52:7b:90: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3B:9E:7C:39:AF:5F:04:E4:FA:77:AD:1D:6C:6D:08:C2:6C:13:47 X509v3 Authority Key Identifier: keyid:F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/0juefDmvXwTk-netHWxtCMJsE0c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.58.0.0/17 Signature Algorithm: sha256WithRSAEncryption 05:38:da:2f:16:00:28:7d:c3:7e:36:7c:da:9c:cc:4c:9f:5a: 32:4e:13:95:1c:be:c3:5a:da:f9:72:50:ae:8a:95:14:65:60: e7:33:30:eb:c6:c4:0b:be:99:de:3c:31:a7:0a:2b:f5:22:ca: d2:2a:9c:ec:ae:61:e1:45:8b:2f:66:a3:c8:cd:f8:65:c3:97: 50:aa:50:86:cf:94:b4:36:85:32:56:a9:07:3a:87:e7:f9:48: c4:5d:1f:ff:c0:05:87:53:3f:30:f7:bd:5b:70:87:4d:b5:c0: 7a:3c:26:7c:2a:ef:32:58:60:77:9c:52:82:a9:cb:52:57:8d: f2:a3:36:ab:a7:87:d5:d4:ee:a2:88:8f:f6:4b:9b:70:36:2e: 52:15:03:b1:98:ac:4d:e6:b7:78:72:dd:66:6a:be:4b:1a:4a: 95:9b:d5:b7:9e:34:fe:6a:2a:ec:89:ad:7f:16:c4:93:fc:28: ce:1d:a0:1e:c8:05:4e:b7:75:7f:cb:d6:06:e9:dd:c9:ce:db: 5c:76:cd:a2:5b:4b:5e:6a:e1:34:8a:24:cc:6d:96:b1:55:79: d3:ab:c0:b0:a5:62:23:96:9b:07:b4:24:33:9c:2e:60:09:8b: f8:cd:60:ea:af:2e:8f:65:1a:c8:2e:42:41:76:23:6e:51:aa: 46:b9:31:a3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVF QjhGQ0E5OEZFNTMzMjI3NUJBOTREODVFNjkzOTc5NTZDQkU0NzAeFw0yNTA0MjYw NDE4MzNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQyM0I5RTdDMzlBRjVG MDRFNEZBNzdBRDFENkM2RDA4QzI2QzEzNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGrhmqjpaNElhETYOEw9iIukRGq/Ib+PLo9+NtKGnof/jYd34F diH33Gp9t2IXYpRAxOeIr24+Gv6+EO8GAE88coQFPYQCzkvtVYKis+Rire4qz0EU JGj3oI0OlqZALUiPRyZ5O8zdC58dpXQ9fv3II6TbXMQXHvhpGhWujiEEXoFejapB FEd6zrDG9Fgh4jTq3IwZExxALO7jZPAZ4QG1kC72hQxEEmczLInJHxazfr/l3dMF wHmV1cJ5zTDUbVkKy9dtNA690hGVRL33HrIAy1xjJkGt3ttR25VQUVKnFj+2FEQh wYTpVnjKVaD7y73aOfYCrHYL4Enc3VJ7kOfLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0juefDmvXwTk+netHWxtCMJsE0cwHwYDVR0jBBgwFoAU9euPypj+UzInW6lN heaTl5VsvkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz LzlldVB5cGotVXpJblc2bE5oZWFUbDVWc3ZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvOWV1UHlwai1VekluVzZsTmhlYVRsNVZzdmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEzLzBqdWVmRG12WHdUay1u ZXRIV3h0Q01Kc0UwYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAd1OgAwDQYJKoZIhvcNAQELBQADggEBAAU42i8WACh9w342fNqczEyfWjJOE5Uc vsNa2vlyUK6KlRRlYOczMOvGxAu+md48MacKK/UiytIqnOyuYeFFiy9mo8jN+GXD l1CqUIbPlLQ2hTJWqQc6h+f5SMRdH//ABYdTPzD3vVtwh021wHo8Jnwq7zJYYHec UoKpy1JXjfKjNqunh9XU7qKIj/ZLm3A2LlIVA7GYrE3mt3hy3WZqvksaSpWb1bee NP5qKuyJrX8WxJP8KM4doB7IBU63dX/L1gbp3cnO21x2zaJbS15q4TSKJMxtlrFV edOrwLClYiOWmwe0JDOcLmAJi/jNYOqvLo9lGsguQkF2I25Rqka5MaM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:13:04 2025 by rpki-client