$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa File: sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa (raw, json) Hash identifier: ngxKseVKfi8DqOacXb8bPALDo4+iahlodNaUjcXtWss= Subject key identifier: B0:65:1E:19:1B:63:22:8D:58:D2:A2:F0:F9:0E:6A:EE:25:C8:A1:35 Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Certificate serial: 14B5 Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa Signing time: Fri 17 Jan 2025 01:27:23 +0000 ROA not before: Fri 17 Jan 2025 01:27:23 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 37963 IP address blocks: 112.126.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5301 (0x14b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Validity Not Before: Jan 17 01:27:23 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=B0651E191B63228D58D2A2F0F90E6AEE25C8A135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:52:87:b1:96:11:f5:0b:1b:e2:3e:f2:d9: 38:43:a8:cc:50:a8:6a:cd:fd:f0:2e:1d:91:3e:6a: ef:cf:f0:7f:51:b3:bc:d7:2c:77:af:40:44:a0:35: 12:3a:71:86:41:04:aa:65:b2:be:f1:84:ab:68:c5: d6:72:05:5d:2f:f8:20:07:2f:4f:f2:73:f0:c0:1c: c3:bc:51:cf:87:16:d8:f9:2c:57:fb:f8:02:a8:fd: 3f:22:1a:83:5b:e5:f2:cb:bc:72:41:a1:10:16:86: 0e:09:f9:cb:e4:29:66:33:d8:4f:f0:aa:df:2f:b1: 6e:c7:3d:0e:cb:9c:6c:05:bc:e9:1f:4d:d3:3e:ee: ce:82:e2:e7:d3:5c:d2:30:dd:23:7f:98:1b:cf:3f: 27:8f:82:34:29:38:2f:60:5d:7f:8f:2b:b7:d2:ef: da:5c:21:4c:d5:9b:2e:ff:40:6c:6d:8c:94:27:04: d2:0d:6f:75:8e:0d:dd:8f:de:bf:ba:a6:03:67:82: 1d:28:48:59:5e:eb:c7:32:39:87:f0:4d:dc:b7:ef: 84:a4:d8:34:5b:12:0a:db:98:a3:cb:49:cf:3e:54: 99:20:01:c9:b6:72:c9:2b:2e:4a:71:a5:1d:e5:db: 27:4a:f3:6a:82:56:f7:0b:f6:3b:47:56:e4:a1:92: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:65:1E:19:1B:63:22:8D:58:D2:A2:F0:F9:0E:6A:EE:25:C8:A1:35 X509v3 Authority Key Identifier: keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.126.0.0/15 Signature Algorithm: sha256WithRSAEncryption 79:db:75:e8:27:68:05:8f:9c:47:3d:d6:87:17:e8:2f:b1:d4: d9:96:45:db:48:62:cd:d7:cd:88:87:53:f4:72:08:4a:e6:a3: 69:3c:d8:c5:c8:9c:74:ae:b2:0e:3b:f5:6f:dd:15:20:94:66: 08:aa:c8:d6:20:cd:fb:b2:34:b6:f2:9b:f4:54:ae:ba:fb:da: 29:b5:88:83:5c:e0:c8:b2:47:f2:16:e8:cf:41:44:6a:78:77: fd:87:9e:39:d8:a5:eb:31:27:98:90:af:b3:80:13:71:f7:a8: a2:be:de:bc:23:53:d9:1a:72:85:1c:df:01:69:e4:73:0e:87: c6:da:23:7c:c8:f9:27:b6:bb:d7:da:ba:02:69:3d:9f:47:ef: 85:e9:2b:bf:d2:3f:a8:e2:73:bf:31:eb:2f:6b:3e:12:77:c1: 5a:9f:50:ac:41:44:a6:8f:87:5e:50:2a:f9:6b:45:a3:3e:ae: b1:9a:09:59:cb:00:23:3a:7a:88:b3:03:12:2e:52:54:0b:2a: cd:99:8f:99:71:9e:ab:57:91:5c:0a:0a:5b:8b:43:63:8a:42: d7:42:3a:3a:95:97:0f:61:c1:fc:0b:44:9a:a4:7b:58:38:de: 3f:ab:7a:47:df:7f:fe:ee:22:2a:09:55:52:31:7c:cf:b6:4d: 00:99:dd:21 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTAxMTcw MTI3MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIwNjUxRTE5MUI2MzIy OEQ1OEQyQTJGMEY5MEU2QUVFMjVDOEExMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdLFKHsZYR9Qsb4j7y2ThDqMxQqGrN/fAuHZE+au/P8H9Rs7zX LHevQESgNRI6cYZBBKplsr7xhKtoxdZyBV0v+CAHL0/yc/DAHMO8Uc+HFtj5LFf7 +AKo/T8iGoNb5fLLvHJBoRAWhg4J+cvkKWYz2E/wqt8vsW7HPQ7LnGwFvOkfTdM+ 7s6C4ufTXNIw3SN/mBvPPyePgjQpOC9gXX+PK7fS79pcIUzVmy7/QGxtjJQnBNIN b3WODd2P3r+6pgNngh0oSFle68cyOYfwTdy374Sk2DRbEgrbmKPLSc8+VJkgAcm2 cskrLkpxpR3l2ydK82qCVvcL9jtHVuShkodFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUsGUeGRtjIo1Y0qLw+Q5q7iXIoTUwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0 OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3 L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3NHVWVHUnRqSW8xWTBx THctUTVxN2lYSW9UVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwFwfjANBgkqhkiG9w0BAQsFAAOCAQEAedt16CdoBY+cRz3WhxfoL7HU2ZZF20hi zdfNiIdT9HIISuajaTzYxcicdK6yDjv1b90VIJRmCKrI1iDN+7I0tvKb9FSuuvva KbWIg1zgyLJH8hboz0FEanh3/YeeOdil6zEnmJCvs4ATcfeoor7evCNT2RpyhRzf AWnkcw6HxtojfMj5J7a719q6Amk9n0fvhekrv9I/qOJzvzHrL2s+EnfBWp9QrEFE po+HXlAq+WtFoz6usZoJWcsAIzp6iLMDEi5SVAsqzZmPmXGeq1eRXAoKW4tDY4pC 10I6OpWXD2HB/AtEmqR7WDjeP6t6R99//u4iKglVUjF8z7ZNAJndIQ== -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:52 2025 by rpki-client