$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/399/yRv45j_V8yZD0mg3mBMwAgyc6v0.roa File: yRv45j_V8yZD0mg3mBMwAgyc6v0.roa (raw, json) Hash identifier: SVkZWk3vsGrblaeA8F1LP7i2HY+IMh1t/KzJ1pcsoUQ= Subject key identifier: C9:1B:F8:E6:3F:D5:F3:26:43:D2:68:37:98:13:30:02:0C:9C:EA:FD Certificate issuer: /CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5 Certificate serial: 483D Authority key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/yRv45j_V8yZD0mg3mBMwAgyc6v0.roa Signing time: Fri 17 Jan 2025 01:30:12 +0000 ROA not before: Fri 17 Jan 2025 01:30:12 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 132203 IP address blocks: 203.205.136.0/24 maxlen: 24 203.205.137.0/24 maxlen: 24 203.205.155.0/24 maxlen: 24 203.205.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18493 (0x483d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5 Validity Not Before: Jan 17 01:30:12 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=C91BF8E63FD5F32643D26837981330020C9CEAFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:5a:03:61:b2:d2:ce:b7:b8:63:10:a4:b1: 19:02:45:b0:48:cd:45:3b:8c:1c:59:6a:bc:7f:2d: e7:e9:fe:6c:99:f8:1b:81:d3:d9:87:cc:7c:86:c9: f7:ab:5f:b9:2a:bc:52:c9:02:03:ef:19:f3:b2:43: 9f:1c:48:0f:85:cd:75:e2:46:a1:ce:c6:e6:d3:f4: 59:ae:b8:3e:d5:a3:4a:11:a1:de:e8:75:61:a5:e1: ae:52:1b:2d:f6:43:60:80:9e:81:e5:33:33:04:14: 0c:cf:4f:6c:d3:83:e8:d0:1c:88:98:c4:cf:0d:7d: 8d:ae:54:16:62:0d:0c:29:3f:d5:a4:99:a3:78:ad: cd:53:4f:02:7a:6c:55:2e:7b:0e:59:b5:31:70:9b: 9e:d7:1f:5f:93:1e:72:a3:96:2e:23:f7:0a:39:ee: de:fa:5b:2c:72:11:b7:fe:12:5e:80:cd:92:89:7b: 22:6d:d8:e9:64:db:24:b0:88:85:7c:9d:17:6e:c9: 47:31:4c:7a:50:7d:f7:2d:97:af:a4:d8:19:f9:bc: 54:d0:ff:3f:93:7c:82:f2:ec:6e:a7:58:8e:08:18: 0a:03:05:e2:be:60:bc:d8:bb:3a:35:be:a3:fe:ad: df:25:c5:0f:78:49:37:84:a8:51:1a:a0:e9:6e:5e: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1B:F8:E6:3F:D5:F3:26:43:D2:68:37:98:13:30:02:0C:9C:EA:FD X509v3 Authority Key Identifier: keyid:51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/yRv45j_V8yZD0mg3mBMwAgyc6v0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.205.136.0/23 203.205.155.0/24 203.205.159.0/24 Signature Algorithm: sha256WithRSAEncryption 16:a5:8d:3a:f2:70:ef:d6:a7:b8:30:37:5e:94:5f:ce:c4:a4: 77:74:b8:8f:f4:69:2d:19:97:6a:f4:8e:21:d1:1c:89:ec:99: 3b:b7:61:a7:05:cb:52:92:61:64:45:62:f4:82:86:b5:58:2b: 26:d4:d6:b1:dd:9d:b5:41:11:9d:0e:cd:e4:51:8e:ba:2d:ce: d7:af:3e:f9:a0:38:9f:f4:2a:37:d9:01:dc:dc:bf:d5:a0:a1: 5b:06:a2:88:24:de:45:a4:24:db:38:82:68:1f:8b:16:29:17: 75:e8:6c:38:4b:c1:70:1d:d5:38:e9:34:48:29:37:95:dd:8b: ec:c9:27:c2:c9:fe:1a:0a:e9:43:88:cd:dc:15:d0:35:0e:d8: ec:ea:6f:20:3d:a0:2c:7a:46:1d:34:50:e1:b5:0d:04:38:73: 53:2f:b7:9d:7e:3b:d8:ee:e8:0d:5c:2b:1d:df:40:c5:60:75: fa:58:ac:ab:59:ab:68:90:d3:dd:3b:ac:37:58:c1:1d:b1:e1: 5a:06:87:8a:2c:a0:e8:75:55:84:37:ab:71:90:45:76:7e:86: d0:3b:d3:fc:77:cf:32:0d:1e:e8:35:6e:73:29:e9:8f:66:b5: ec:ef:11:89:a7:37:66:c4:4c:0b:b0:48:bc:be:13:5b:f1:01: 22:99:85:fc -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICSD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTFD NEMxRDUyRDJFM0ZFNkJGM0Q5QkYxQjNENjkyNEI0OUM1RDRFNTAeFw0yNTAxMTcw MTMwMTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM5MUJGOEU2M0ZENUYz MjY0M0QyNjgzNzk4MTMzMDAyMEM5Q0VBRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6yFoDYbLSzre4YxCksRkCRbBIzUU7jBxZarx/Lefp/myZ+BuB 09mHzHyGyferX7kqvFLJAgPvGfOyQ58cSA+FzXXiRqHOxubT9FmuuD7Vo0oRod7o dWGl4a5SGy32Q2CAnoHlMzMEFAzPT2zTg+jQHIiYxM8NfY2uVBZiDQwpP9WkmaN4 rc1TTwJ6bFUuew5ZtTFwm57XH1+THnKjli4j9wo57t76WyxyEbf+El6AzZKJeyJt 2Olk2ySwiIV8nRduyUcxTHpQffctl6+k2Bn5vFTQ/z+TfILy7G6nWI4IGAoDBeK+ YLzYuzo1vqP+rd8lxQ94STeEqFEaoOluXmNhAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUyRv45j/V8yZD0mg3mBMwAgyc6v0wHwYDVR0jBBgwFoAUUcTB1S0uP+a/PZvx s9aSS0nF1OUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzk5 L1VjVEIxUzB1UC1hX1BadnhzOWFTUzBuRjFPVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVWNUQjFTMHVQLWFfUFp2eHM5YVNTMG5GMU9VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzk5L3lSdjQ1al9WOHlaRDBt ZzNtQk13QWd5YzZ2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAHLzYgDBADLzZsDBADLzZ8wDQYJKoZIhvcNAQELBQADggEBABaljTrycO/Wp7gw N16UX87EpHd0uI/0aS0Zl2r0jiHRHInsmTu3YacFy1KSYWRFYvSChrVYKybU1rHd nbVBEZ0OzeRRjrotztevPvmgOJ/0KjfZAdzcv9WgoVsGoogk3kWkJNs4gmgfixYp F3XobDhLwXAd1TjpNEgpN5Xdi+zJJ8LJ/hoK6UOIzdwV0DUO2OzqbyA9oCx6Rh00 UOG1DQQ4c1Mvt51+O9ju6A1cKx3fQMVgdfpYrKtZq2iQ0907rDdYwR2x4VoGh4os oOh1VYQ3q3GQRXZ+htA70/x3zzINHug1bnMp6Y9mtezvEYmnN2bETAuwSLy+E1vx ASKZhfw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:29 2025 by rpki-client