$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa File: AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa (raw, json) Hash identifier: 39iF2Jn7lVXDSjTvbNz0G7NY4cKMCf8i2iC6rFwWwgQ= Subject key identifier: 02:53:29:55:E0:5F:DC:D8:D6:4C:3E:0F:55:BD:4E:8A:6F:17:52:37 Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 14B6 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa Signing time: Fri 17 Jan 2025 01:27:23 +0000 ROA not before: Fri 17 Jan 2025 01:27:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 37963 IP address blocks: 112.124.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5302 (0x14b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jan 17 01:27:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=02532955E05FDCD8D64C3E0F55BD4E8A6F175237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:12:17:e4:27:d6:db:be:24:63:1d:8c:b7: 0f:11:b6:65:89:cf:99:29:fc:37:d8:d5:e4:69:e4: a5:c2:a7:67:e2:b5:c2:e7:40:44:17:16:6e:f2:93: a7:67:88:3d:a5:66:00:24:b3:6b:a8:fa:2e:c6:26: b2:fa:a7:0b:81:61:4d:8f:23:9e:98:bc:a9:06:c6: a4:3e:b9:87:73:40:b0:4a:7c:82:73:c4:6b:7e:df: 8b:27:02:42:03:1e:76:db:d5:02:e1:9f:47:a6:93: b4:5e:94:39:96:b3:b4:7a:ad:79:29:3c:04:93:c3: 6e:63:da:fe:9a:3f:31:e4:c8:ac:a0:cb:89:42:08: 83:85:bf:81:bb:6f:0f:a0:41:91:d3:cc:37:3c:96: e6:71:42:84:db:8c:86:73:69:cf:9e:fa:8c:d1:21: f8:fd:91:46:9b:a7:cd:05:a9:75:23:84:37:5d:9b: 61:99:a1:57:59:4e:f7:95:d4:58:a5:63:87:d3:dc: 1b:fc:5c:87:b8:20:d0:c9:5b:86:9d:19:85:67:d0: f8:85:21:89:b9:1f:d7:08:2e:69:d4:c2:2e:0a:d4: b3:ce:38:a0:71:06:91:62:60:05:d7:79:16:34:fe: 63:b7:8e:88:e0:9e:5e:e1:16:1e:b6:91:76:b0:5c: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:53:29:55:E0:5F:DC:D8:D6:4C:3E:0F:55:BD:4E:8A:6F:17:52:37 X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.124.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:43:e3:01:e6:81:15:1e:e5:a3:84:d1:7c:8f:48:b9:8e:27: 46:63:cb:8b:65:88:ae:d4:7f:53:0f:5a:7f:d5:da:6c:cf:83: 3c:44:6a:42:d8:eb:2c:00:91:77:a1:59:c8:c6:89:36:97:4b: 19:14:6f:8c:bd:2f:85:be:1e:75:23:62:1a:6b:b3:61:1f:54: e6:e9:f8:8c:62:28:e9:32:23:45:58:2a:db:36:d3:6d:b3:a7: ea:79:5a:5e:a9:97:d6:62:8e:58:df:1f:0d:02:97:48:2d:3f: 5f:8a:1a:82:3f:c3:41:38:45:99:a5:9c:42:aa:bd:b0:83:a8: c2:24:b6:52:a8:23:63:7d:8e:a8:89:55:18:82:db:fe:f2:97: b5:0b:fa:25:84:19:1a:24:3b:08:2a:df:8b:6e:a3:d4:b5:93: 80:a9:72:b2:2a:55:69:4e:70:41:f0:5a:d9:ef:3a:a5:41:50: b8:d3:cb:9b:f1:e3:24:9e:1e:27:e8:1b:6b:87:62:a7:51:e3: fa:04:d1:77:2a:43:94:c8:c5:b2:52:28:97:cf:7f:19:a9:20: 62:46:47:be:2e:72:2a:60:48:63:f5:b9:0b:52:eb:7a:2c:b4: 71:b7:df:e1:39:7d:ad:6a:dc:a9:7e:e3:6a:0f:d7:fe:19:97: 3a:e1:6a:73 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTAxMTcw MTI3MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyNTMyOTU1RTA1RkRD RDhENjRDM0UwRjU1QkQ0RThBNkYxNzUyMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB/RIX5CfW274kYx2Mtw8RtmWJz5kp/DfY1eRp5KXCp2fitcLn QEQXFm7yk6dniD2lZgAks2uo+i7GJrL6pwuBYU2PI56YvKkGxqQ+uYdzQLBKfIJz xGt+34snAkIDHnbb1QLhn0emk7RelDmWs7R6rXkpPASTw25j2v6aPzHkyKygy4lC CIOFv4G7bw+gQZHTzDc8luZxQoTbjIZzac+e+ozRIfj9kUabp80FqXUjhDddm2GZ oVdZTveV1FilY4fT3Bv8XIe4INDJW4adGYVn0PiFIYm5H9cILmnUwi4K1LPOOKBx BpFiYAXXeRY0/mO3jojgnl7hFh62kXawXEYLAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUAlMpVeBf3NjWTD4PVb1Oim8XUjcwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L0FsTXBWZUJmM05qV1RE NFBWYjFPaW04WFVqYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBwfDANBgkqhkiG9w0BAQsFAAOCAQEAXkPjAeaBFR7lo4TRfI9IuY4nRmPLi2WI rtR/Uw9af9XabM+DPERqQtjrLACRd6FZyMaJNpdLGRRvjL0vhb4edSNiGmuzYR9U 5un4jGIo6TIjRVgq2zbTbbOn6nlaXqmX1mKOWN8fDQKXSC0/X4oagj/DQThFmaWc Qqq9sIOowiS2UqgjY32OqIlVGILb/vKXtQv6JYQZGiQ7CCrfi26j1LWTgKlysipV aU5wQfBa2e86pUFQuNPLm/HjJJ4eJ+gba4dip1Hj+gTRdypDlMjFslIol89/Gakg YkZHvi5yKmBIY/W5C1Lreiy0cbff4Tl9rWrcqX7jag/X/hmXOuFqcw== -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:51 2025 by rpki-client