$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/KH1fBgdHgQMes9MIjuirH1qec0U.roa File: KH1fBgdHgQMes9MIjuirH1qec0U.roa (raw, json) Hash identifier: UBlXnmdFuAyfJiihIokjYSAwJin04WrdXKEE2oteD9k= Subject key identifier: 28:7D:5F:06:07:47:81:03:1E:B3:D3:08:8E:E8:AB:1F:5A:9E:73:45 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 1364 Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/KH1fBgdHgQMes9MIjuirH1qec0U.roa Signing time: Mon 21 Apr 2025 07:31:48 +0000 ROA not before: Mon 21 Apr 2025 07:31:48 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 146806 IP address blocks: 45.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4964 (0x1364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Apr 21 07:31:48 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=287D5F06074781031EB3D3088EE8AB1F5A9E7345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:f8:c7:d7:5c:47:31:30:8f:4b:ac:ab:9c: 2f:6f:4b:23:f3:5c:43:66:81:d4:a1:4d:96:e9:09: e5:5f:e4:21:4a:bb:15:91:82:e2:7f:6c:ec:1a:09: 23:1f:6c:91:bd:d3:a9:22:74:e3:4f:72:64:7e:63: fc:8a:8e:eb:ac:b0:ef:89:85:12:90:98:27:cc:4e: 1f:e4:26:42:f3:ab:04:52:65:6e:cc:cc:f8:0d:fa: 3b:65:6a:39:48:a0:d2:bf:ad:3e:b9:fc:dd:85:54: 7d:8f:82:28:b2:37:4e:a6:a6:c5:4c:f3:8b:e6:a3: ba:73:a0:26:fc:25:09:65:32:ca:c1:b7:31:07:c2: 3f:f3:cd:ec:59:d6:bc:dd:c9:3b:c2:4c:46:fa:5b: b4:09:4f:0c:97:57:23:67:be:ff:d2:5c:d4:fe:7e: 31:15:99:f6:f4:b7:30:b7:df:1f:8c:bc:39:77:d6: 8c:20:37:48:d5:9f:19:63:c2:d0:c5:e0:a4:3c:bc: e3:75:0f:e4:73:9d:49:da:8c:8b:40:9e:0d:b6:59: 10:cc:86:9b:00:77:07:e4:22:43:73:0f:f3:d0:0c: b0:17:a4:e4:e4:2d:f4:6d:21:ad:28:12:59:3e:4c: 50:f4:50:42:73:8a:0e:1e:de:32:52:23:71:a1:bf: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7D:5F:06:07:47:81:03:1E:B3:D3:08:8E:E8:AB:1F:5A:9E:73:45 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/KH1fBgdHgQMes9MIjuirH1qec0U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.250.152.0/24 Signature Algorithm: sha256WithRSAEncryption c8:a6:cb:2c:c8:f9:fd:06:2e:b5:7b:9f:5e:1f:27:38:50:ac: bc:14:de:52:7b:97:45:39:cb:b4:92:60:4b:3a:3f:70:20:44: 26:ab:40:4c:cf:31:7d:2f:21:aa:b7:61:89:48:5d:90:50:ea: 3e:4f:f1:63:f9:ec:40:6f:ff:ab:32:19:63:87:c6:38:bb:a1: be:c1:ef:6f:a4:e0:e8:b1:19:72:c4:56:ab:68:f3:ab:84:b8: e5:45:aa:84:33:86:3f:82:ff:19:8e:ee:30:ae:98:d2:7c:31: 6a:f8:70:37:a4:d6:ec:cc:2f:c4:8a:4d:14:19:4f:f3:29:1a: fd:ad:ba:d9:9e:bc:40:11:47:cb:28:0b:be:2e:9c:4a:38:da: 6d:99:68:d6:89:a7:6e:34:85:67:b9:5c:6c:b8:3a:0d:d4:d3: f8:19:4c:5d:dd:dc:67:2a:bf:15:40:d5:29:c4:f7:62:a7:36: 94:5a:6d:61:8a:cc:0d:df:08:97:f2:9f:06:84:f9:3d:c6:fc: 3e:01:34:c4:7b:24:da:5c:b1:e4:f8:4f:84:ae:0f:02:84:ac: 6e:d9:58:45:b7:b0:aa:38:9a:be:52:b4:05:64:f0:d8:13:25: 3c:2b:7f:9f:f7:9a:47:b3:96:9a:90:b9:9e:2d:a1:47:9f:68: af:f6:98:c3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICE2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA0MjEw NzMxNDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDI4N0Q1RjA2MDc0Nzgx MDMxRUIzRDMwODhFRThBQjFGNUE5RTczNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJmPjH11xHMTCPS6yrnC9vSyPzXENmgdShTZbpCeVf5CFKuxWR guJ/bOwaCSMfbJG906kidONPcmR+Y/yKjuussO+JhRKQmCfMTh/kJkLzqwRSZW7M zPgN+jtlajlIoNK/rT65/N2FVH2PgiiyN06mpsVM84vmo7pzoCb8JQllMsrBtzEH wj/zzexZ1rzdyTvCTEb6W7QJTwyXVyNnvv/SXNT+fjEVmfb0tzC33x+MvDl31owg N0jVnxljwtDF4KQ8vON1D+RznUnajItAng22WRDMhpsAdwfkIkNzD/PQDLAXpOTk LfRtIa0oElk+TFD0UEJzig4e3jJSI3Ghv6WtAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUKH1fBgdHgQMes9MIjuirH1qec0UwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvS0gxZkJnZEhnUU1l czlNSWp1aXJIMXFlYzBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAC36mDANBgkqhkiG9w0BAQsFAAOCAQEAyKbLLMj5/QYutXufXh8nOFCsvBTe UnuXRTnLtJJgSzo/cCBEJqtATM8xfS8hqrdhiUhdkFDqPk/xY/nsQG//qzIZY4fG OLuhvsHvb6Tg6LEZcsRWq2jzq4S45UWqhDOGP4L/GY7uMK6Y0nwxavhwN6TW7Mwv xIpNFBlP8yka/a262Z68QBFHyygLvi6cSjjabZlo1omnbjSFZ7lcbLg6DdTT+BlM Xd3cZyq/FUDVKcT3Yqc2lFptYYrMDd8Il/KfBoT5Pcb8PgE0xHsk2lyx5PhPhK4P AoSsbtlYRbewqjiavlK0BWTw2BMlPCt/n/eaR7OWmpC5ni2hR59or/aYww== -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:02 2025 by rpki-client