$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa File: st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa (raw, json) Hash identifier: teKJPwHr+FjeXiLBkvonrKuw/vvZ8PpXoyaipi8yxV4= Subject key identifier: B2:DE:4F:D9:04:C8:5E:D1:A0:9F:1E:24:54:9E:84:27:C6:AA:BD:6C Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Certificate serial: 1DAC Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa Signing time: Thu 24 Apr 2025 09:17:55 +0000 ROA not before: Thu 24 Apr 2025 09:17:55 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 131314 IP address blocks: 119.161.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7596 (0x1dac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Validity Not Before: Apr 24 09:17:55 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=B2DE4FD904C85ED1A09F1E24549E8427C6AABD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:98:65:14:44:d6:0c:30:65:e6:7c:9d:05: 2c:18:9f:e3:9a:32:f2:90:cb:81:7d:93:00:38:30: 83:8c:14:61:c8:a9:bc:5f:91:5d:c7:09:9e:a2:0f: 83:a5:00:85:8c:5a:ee:f5:9e:a9:e4:eb:52:87:f3: 94:23:02:f1:ed:b4:e5:ad:12:f1:7b:3a:e5:94:60: 99:70:cb:9a:fd:29:7c:6d:9a:0d:ca:04:19:4e:d3: 9e:22:20:1c:77:3b:f5:f9:ec:61:87:ec:c1:ae:f0: 8b:02:12:d6:26:8d:52:f6:85:99:1f:cb:c8:60:9d: 24:b2:75:b6:89:f8:2d:c7:8e:98:cb:ce:09:7b:53: 3a:31:5d:2e:db:ea:fb:04:d2:fc:73:57:d3:b0:7d: c6:33:c8:35:d9:d6:f8:95:f0:30:3a:c3:07:c1:b3: 36:89:05:40:84:91:98:bf:51:64:1b:d5:75:a5:31: 31:6c:35:3e:d7:36:30:47:88:c8:ff:4b:f7:9c:b4: bd:71:c3:c6:f2:20:f7:62:80:0d:b8:76:f2:03:b2: 60:79:25:29:81:6e:e8:77:8b:c0:5e:40:6a:c1:58: 79:de:34:a5:7f:9c:48:eb:fa:90:5b:da:fd:26:d4: dd:f0:d3:39:ca:e9:ac:c1:08:1f:d7:e8:1d:f5:ed: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DE:4F:D9:04:C8:5E:D1:A0:9F:1E:24:54:9E:84:27:C6:AA:BD:6C X509v3 Authority Key Identifier: keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.161.124.0/24 Signature Algorithm: sha256WithRSAEncryption 37:7e:39:32:a6:68:a0:d5:3c:c4:01:dc:83:89:10:17:26:1e: 1c:55:b0:b1:57:72:20:aa:71:38:eb:3e:a4:4c:0d:2f:af:cb: 39:bd:ff:71:cb:e5:65:dc:17:77:ef:94:01:c1:03:51:ee:59: 09:88:3d:a5:85:a7:0d:4c:ec:78:2d:9f:25:16:7c:ec:e5:1f: f0:05:6d:a9:c1:cd:22:e2:be:9f:79:97:cb:f4:53:8f:36:77: 64:b6:f8:2b:22:df:fc:92:81:21:f2:3f:05:da:6a:38:9b:24: 10:14:01:d0:d6:d8:06:b4:b4:95:b5:c1:41:47:f2:3e:51:ac: 65:e5:bd:67:5f:54:ad:63:16:e9:77:42:f3:12:06:e1:a9:58: 29:e2:b1:4d:eb:a5:0e:79:bd:3c:d8:a3:17:64:ca:60:51:3a: b4:51:01:79:c8:cd:c4:6a:79:47:eb:5c:b4:68:16:59:56:d4: 23:1e:4e:0a:39:a3:07:75:8e:61:0c:f1:83:03:14:79:b7:a4: b5:85:74:5d:c0:a4:26:35:c3:bf:1b:a2:43:96:6b:d5:36:4a: 5d:d3:a7:b3:99:f0:4b:43:b2:43:ba:fc:f2:c6:dc:0f:a8:76: c3:d4:b6:84:38:81:2d:7f:f5:b1:73:c7:51:51:68:ff:8f:fc: 6a:6c:2c:2f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTg1 MjA2Qzg3NDIwQkU0MkM3QjkwNDJERTNFNUZENTE1OTVGRjE0QjAeFw0yNTA0MjQw OTE3NTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIyREU0RkQ5MDRDODVF RDFBMDlGMUUyNDU0OUU4NDI3QzZBQUJENkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKzphlFETWDDBl5nydBSwYn+OaMvKQy4F9kwA4MIOMFGHIqbxf kV3HCZ6iD4OlAIWMWu71nqnk61KH85QjAvHttOWtEvF7OuWUYJlwy5r9KXxtmg3K BBlO054iIBx3O/X57GGH7MGu8IsCEtYmjVL2hZkfy8hgnSSydbaJ+C3HjpjLzgl7 UzoxXS7b6vsE0vxzV9OwfcYzyDXZ1viV8DA6wwfBszaJBUCEkZi/UWQb1XWlMTFs NT7XNjBHiMj/S/ectL1xw8byIPdigA24dvIDsmB5JSmBbuh3i8BeQGrBWHneNKV/ nEjr+pBb2v0m1N3w0znK6azBCB/X6B317T83AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUst5P2QTIXtGgnx4kVJ6EJ8aqvWwwHwYDVR0jBBgwFoAUWFIGyHQgvkLHuQQt 4+X9UVlf8UswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYx L1dGSUd5SFFndmtMSHVRUXQ0LVg5VVZsZjhVcy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzYxL3N0NVAyUVRJWHRHZ254 NGtWSjZFSjhhcXZXdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAB3oXwwDQYJKoZIhvcNAQELBQADggEBADd+OTKmaKDVPMQB3IOJEBcmHhxVsLFX ciCqcTjrPqRMDS+vyzm9/3HL5WXcF3fvlAHBA1HuWQmIPaWFpw1M7HgtnyUWfOzl H/AFbanBzSLivp95l8v0U482d2S2+Csi3/ySgSHyPwXaajibJBAUAdDW2Aa0tJW1 wUFH8j5RrGXlvWdfVK1jFul3QvMSBuGpWCnisU3rpQ55vTzYoxdkymBROrRRAXnI zcRqeUfrXLRoFllW1CMeTgo5owd1jmEM8YMDFHm3pLWFdF3ApCY1w78bokOWa9U2 Sl3Tp7OZ8EtDskO6/PLG3A+odsPUtoQ4gS1/9bFzx1FRaP+P/GpsLC8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:31:43 2025 by rpki-client