$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/LylqXhwzuKsaknP5d7sNvnGLHGo.roa File: LylqXhwzuKsaknP5d7sNvnGLHGo.roa (raw, json) Hash identifier: ih6PXOSKM2bFVDBxp6aryMqYAp04slHKb8512BmkZTU= Subject key identifier: 2F:29:6A:5E:1C:33:B8:AB:1A:92:73:F9:77:BB:0D:BE:71:8B:1C:6A Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434 Certificate serial: 14B5 Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/LylqXhwzuKsaknP5d7sNvnGLHGo.roa Signing time: Fri 17 Jan 2025 01:27:23 +0000 ROA not before: Fri 17 Jan 2025 01:27:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 37963 IP address blocks: 47.113.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5301 (0x14b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434 Validity Not Before: Jan 17 01:27:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=2F296A5E1C33B8AB1A9273F977BB0DBE718B1C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:97:4e:a8:85:93:81:0c:e2:02:89:6d:03: 95:e6:df:bd:1e:5a:30:b0:01:80:a0:03:b2:a8:e3: 42:1f:d6:eb:eb:ea:af:15:e0:43:b0:54:c9:e5:06: 4f:03:41:60:39:bc:3b:82:a7:67:46:fc:0b:b7:06: 80:1a:65:53:72:19:ad:7b:0d:cd:72:96:b0:cb:be: 69:ad:77:f8:7d:ca:1d:2f:09:71:ee:fa:20:2f:c4: 23:59:b1:e1:89:0a:f7:12:a8:97:56:24:66:da:8c: b0:ec:83:2a:1a:03:90:9d:01:50:64:21:19:99:ed: 51:e4:ad:9a:a2:95:66:6e:84:77:37:4b:3c:21:c0: 12:40:dc:ce:e7:8b:30:a5:b5:c2:1b:ec:cf:f0:af: be:ed:15:86:d2:34:c0:9b:e5:53:56:e0:bb:3e:a1: e4:99:a4:a2:c4:4a:7d:91:3f:45:2c:9d:6b:66:b5: aa:a3:21:ea:6d:67:a3:af:99:8a:07:5d:e5:ce:47: cb:21:e3:c7:84:c9:24:ac:ce:79:1c:b3:9e:29:bf: 13:41:c6:30:87:87:87:26:a5:c0:f8:a7:d6:a3:74: e3:d0:d9:40:86:30:80:c7:f6:b7:ca:aa:70:14:89: bf:f2:32:4b:ec:26:49:eb:39:43:5b:f7:83:97:97: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:29:6A:5E:1C:33:B8:AB:1A:92:73:F9:77:BB:0D:BE:71:8B:1C:6A X509v3 Authority Key Identifier: keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/LylqXhwzuKsaknP5d7sNvnGLHGo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 47.113.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:18:10:93:ac:2d:d8:5b:d7:e8:8f:0e:66:2f:10:ab:68:29: 55:fa:33:ff:f7:73:0f:0b:07:ec:91:15:d6:35:0d:30:3b:06: 0c:3a:de:7a:70:90:7b:3d:4f:5b:a0:0c:77:2e:62:06:a3:00: a3:17:1e:6b:fd:61:51:87:af:73:70:e2:a1:26:83:8d:4d:83: bb:e4:08:b0:8c:0a:9a:4e:8f:de:86:af:39:42:aa:c0:25:d6: d9:2b:63:b5:a4:cc:04:09:2d:85:1a:b6:5a:9c:cc:b1:02:ed: e8:fd:4d:23:dc:31:b2:b6:82:b2:40:c9:f2:19:6e:cd:6f:dc: ab:b3:e2:d2:58:6c:8b:2a:1f:3c:07:0c:54:28:ee:08:59:64: 4c:28:e4:b7:80:59:e7:0f:54:b9:cb:6a:fb:84:a6:17:48:41: ae:8e:78:31:26:f7:da:14:9d:6c:08:b1:37:3a:33:bc:d7:de: 11:57:6b:a2:49:d1:3b:4a:42:09:4c:bc:c2:0f:aa:3a:09:30: b2:d7:9f:4c:16:36:39:03:a5:f5:dd:76:a0:42:74:7b:4a:07: ac:94:2f:d8:1e:56:ba:62:75:7a:de:5a:94:55:89:f3:ad:0c: eb:49:1f:1b:a1:3c:f3:a4:fb:79:a9:a3:36:dd:72:1e:72:01: d6:5c:42:5d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uw QTlDQjAyOTM3QjU3RENFNjZBMTdGQjg0MjE2RDdBQkU3NjQzNDAeFw0yNTAxMTcw MTI3MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJGMjk2QTVFMUMzM0I4 QUIxQTkyNzNGOTc3QkIwREJFNzE4QjFDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkKpdOqIWTgQziAoltA5Xm370eWjCwAYCgA7Ko40If1uvr6q8V 4EOwVMnlBk8DQWA5vDuCp2dG/Au3BoAaZVNyGa17Dc1ylrDLvmmtd/h9yh0vCXHu +iAvxCNZseGJCvcSqJdWJGbajLDsgyoaA5CdAVBkIRmZ7VHkrZqilWZuhHc3Szwh wBJA3M7nizCltcIb7M/wr77tFYbSNMCb5VNW4Ls+oeSZpKLESn2RP0UsnWtmtaqj IeptZ6OvmYoHXeXOR8sh48eEySSsznkcs54pvxNBxjCHh4cmpcD4p9ajdOPQ2UCG MIDH9rfKqnAUib/yMkvsJknrOUNb94OXl2pRAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQULylqXhwzuKsaknP5d7sNvnGLHGowHwYDVR0jBBgwFoAUzgqcsCk3tX3OZqF/ uEIW16vnZDQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3pncWNzQ2szdFgzT1pxRl91RUlXMTZ2blpEUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvemdxY3NDazN0WDNPWnFGX3VFSVcxNnZuWkRRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L0x5bHFYaHd6dUtzYWtu UDVkN3NOdm5HTEhHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAvcTANBgkqhkiG9w0BAQsFAAOCAQEAKBgQk6wt2FvX6I8OZi8Qq2gpVfoz//dz DwsH7JEV1jUNMDsGDDreenCQez1PW6AMdy5iBqMAoxcea/1hUYevc3DioSaDjU2D u+QIsIwKmk6P3oavOUKqwCXW2StjtaTMBAkthRq2WpzMsQLt6P1NI9wxsraCskDJ 8hluzW/cq7Pi0lhsiyofPAcMVCjuCFlkTCjkt4BZ5w9Uuctq+4SmF0hBro54MSb3 2hSdbAixNzozvNfeEVdroknRO0pCCUy8wg+qOgkwstefTBY2OQOl9d12oEJ0e0oH rJQv2B5WumJ1et5alFWJ860M60kfG6E886T7eamjNt1yHnIB1lxCXQ== -----END CERTIFICATE-----Generated at Sun Jun 22 03:06:05 2025 by rpki-client