$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/p5exbNsYSmDiln-g7yIyKvynhwU.roa File: p5exbNsYSmDiln-g7yIyKvynhwU.roa (raw, json) Hash identifier: n2w8Ek5ok0RMeIpd650AJAP9TYepbKHwFbnAgmfM7Bs= Subject key identifier: A7:97:B1:6C:DB:18:4A:60:E2:96:7F:A0:EF:22:32:2A:FC:A7:87:05 Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 1DA3 Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/p5exbNsYSmDiln-g7yIyKvynhwU.roa Signing time: Thu 24 Apr 2025 09:10:06 +0000 ROA not before: Thu 24 Apr 2025 09:10:06 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 131314 IP address blocks: 111.118.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7587 (0x1da3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Apr 24 09:10:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A797B16CDB184A60E2967FA0EF22322AFCA78705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:69:4e:bc:1d:e7:a4:16:67:69:bf:f7:d6: 2b:15:50:8d:f5:c4:8a:59:95:ed:69:80:74:35:28: 75:51:b5:41:d9:db:f5:76:2a:29:39:b4:9c:85:34: e3:47:87:0c:03:e7:86:a4:59:f2:19:70:59:c8:8a: db:fc:a7:a1:81:08:e2:05:fe:8a:8f:32:ed:46:68: 4f:1e:09:97:65:e5:e1:a0:03:87:5e:32:c2:15:83: 07:47:62:5e:2d:4c:d2:3e:d1:3d:0a:15:42:10:3c: 78:66:e1:c5:72:8a:3c:d8:46:dd:47:67:f7:0d:62: db:a3:44:90:ff:53:53:83:25:ce:1d:f6:9c:df:57: 36:9e:58:24:61:00:99:f5:bc:0a:5d:83:cf:25:99: 99:bc:16:ff:33:49:9e:58:5a:53:ae:28:77:49:86: cb:0f:67:64:c3:29:6a:6b:cb:ef:0d:12:83:91:dd: f6:e3:bd:44:0c:96:85:cf:87:8a:19:53:98:28:ce: 37:1c:1a:7e:1d:34:cd:a4:e2:79:6b:2e:f6:83:4b: c3:d0:4f:70:ea:c3:19:c0:72:a9:65:7a:a0:00:03: c6:6d:d5:fd:23:f0:56:c8:da:88:d9:0b:72:24:e3: a0:a4:99:be:7c:f4:39:4a:83:3d:4c:2e:9b:17:fd: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:97:B1:6C:DB:18:4A:60:E2:96:7F:A0:EF:22:32:2A:FC:A7:87:05 X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/p5exbNsYSmDiln-g7yIyKvynhwU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 111.118.200.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:63:39:33:de:2b:1f:9d:04:ac:ef:ac:10:6c:26:ce:60:3d: 49:1e:2d:7e:08:71:c6:cc:9e:2d:eb:64:10:6c:31:cf:0b:a8: 59:85:4e:c3:c3:ef:83:b5:9e:63:bd:b2:3e:18:22:ac:8c:a1: 39:12:29:ad:dd:51:ce:45:19:96:d6:e7:7e:d6:41:6c:e0:11: 9c:83:d1:dd:a6:1d:8a:c7:ae:ad:27:13:e2:72:89:e0:e5:ec: b2:9c:d9:29:c0:da:08:db:11:1b:89:e7:b7:ce:bd:c0:c4:ed: c5:82:bb:f8:88:0d:5e:b6:39:27:07:c9:a2:99:6c:57:9d:02: b7:9b:08:ed:19:49:37:70:bf:f9:12:f4:ee:ed:70:31:f5:8d: 31:17:fb:97:c4:25:07:3c:4a:6f:d3:da:ee:71:62:4c:d7:41: 3c:9b:a0:f2:00:f6:9b:b4:1b:de:ce:a1:d5:45:c5:35:8e:d8: a4:74:cd:3c:07:e5:8b:6b:7f:53:bc:07:d6:8e:3c:c0:d0:f5: 8d:dd:a4:7c:65:87:0c:0e:0d:0e:b2:70:27:67:d4:8e:b7:56: f1:35:96:ce:7e:da:87:68:9e:ee:27:98:51:7a:a2:01:ac:9a: 76:5c:6c:fb:ec:07:b5:43:da:c6:ae:b3:0b:39:79:f4:f3:a3: fd:ca:13:ff -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTA0MjQw OTEwMDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEE3OTdCMTZDREIxODRB NjBFMjk2N0ZBMEVGMjIzMjJBRkNBNzg3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKKWlOvB3npBZnab/31isVUI31xIpZle1pgHQ1KHVRtUHZ2/V2 Kik5tJyFNONHhwwD54akWfIZcFnIitv8p6GBCOIF/oqPMu1GaE8eCZdl5eGgA4de MsIVgwdHYl4tTNI+0T0KFUIQPHhm4cVyijzYRt1HZ/cNYtujRJD/U1ODJc4d9pzf VzaeWCRhAJn1vApdg88lmZm8Fv8zSZ5YWlOuKHdJhssPZ2TDKWpry+8NEoOR3fbj vUQMloXPh4oZU5gozjccGn4dNM2k4nlrLvaDS8PQT3DqwxnAcqlleqAAA8Zt1f0j 8FbI2ojZC3Ik46Ckmb589DlKgz1MLpsX/eihAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUp5exbNsYSmDiln+g7yIyKvynhwUwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL3A1ZXhiTnNZU21EaWxu LWc3eUl5S3Z5bmh3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABvdsgwDQYJKoZIhvcNAQELBQADggEBAC9jOTPeKx+dBKzvrBBsJs5gPUkeLX4I ccbMni3rZBBsMc8LqFmFTsPD74O1nmO9sj4YIqyMoTkSKa3dUc5FGZbW537WQWzg EZyD0d2mHYrHrq0nE+JyieDl7LKc2SnA2gjbERuJ57fOvcDE7cWCu/iIDV62OScH yaKZbFedArebCO0ZSTdwv/kS9O7tcDH1jTEX+5fEJQc8Sm/T2u5xYkzXQTyboPIA 9pu0G97OodVFxTWO2KR0zTwH5Ytrf1O8B9aOPMDQ9Y3dpHxlhwwODQ6ycCdn1I63 VvE1ls5+2odonu4nmFF6ogGsmnZcbPvsB7VD2sausws5efTzo/3KE/8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:41 2025 by rpki-client