$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/1GotaIHUlave344Vv3f1oTlFPYc.roa File: 1GotaIHUlave344Vv3f1oTlFPYc.roa (raw, json) Hash identifier: ptuylA8GYqg0O3dHGuo7x69vl98Xg+rfpFcaOB3+nys= Subject key identifier: D4:6A:2D:68:81:D4:95:AB:DE:DF:8E:15:BF:77:F5:A1:39:45:3D:87 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1842 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1GotaIHUlave344Vv3f1oTlFPYc.roa Signing time: Fri 17 Jan 2025 01:24:48 +0000 ROA not before: Fri 17 Jan 2025 01:24:48 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6210 (0x1842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:48 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=D46A2D6881D495ABDEDF8E15BF77F5A139453D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:4a:5f:33:d1:8a:76:68:71:63:d9:66:0f: f6:eb:57:75:f6:e7:00:1e:b2:ad:b2:2c:8f:6b:9b: cd:8c:84:7d:2e:5d:67:6c:a6:f5:4e:08:c9:83:dd: a0:e6:1e:1c:4f:60:b0:f1:24:8f:3d:b7:60:ae:6a: a6:ab:68:22:e4:63:50:d5:df:92:e8:12:25:c8:d9: 78:1b:b8:2f:54:21:03:86:9e:76:be:6c:95:33:da: 7b:96:0c:d2:68:61:e8:06:31:0a:7f:db:e9:d6:2d: db:c8:b8:7a:98:58:94:25:f8:b3:11:17:91:e9:67: 6c:41:aa:1e:3b:a0:de:03:81:36:3e:ac:fd:ca:22: f5:d3:e3:ba:ab:60:fd:25:82:6c:09:51:88:9d:c3: 4d:87:8e:3b:8c:38:6f:f7:5d:76:8c:39:54:3c:04: 1b:c6:7e:76:39:43:8b:02:98:6e:b5:47:f8:2d:2b: 8f:5c:ca:3f:9d:8f:e1:2e:82:83:05:a0:1d:00:62: a4:28:14:60:a1:fc:d0:05:68:dc:dc:87:a1:d8:50: 51:4a:0b:1b:ef:71:20:0f:20:4a:4b:41:4c:8a:77: e8:e7:14:d4:7b:cb:c9:60:ed:81:be:da:73:44:88: 5c:2c:44:ca:1a:3b:22:73:fd:5c:50:e5:41:02:3f: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6A:2D:68:81:D4:95:AB:DE:DF:8E:15:BF:77:F5:A1:39:45:3D:87 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1GotaIHUlave344Vv3f1oTlFPYc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.48.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:75:47:a4:8d:c5:d9:03:e2:a1:34:50:6b:32:f5:17:11:37: f0:9b:44:54:31:c6:68:29:bc:40:3d:43:4e:5c:c0:eb:eb:c7: 0f:bf:6f:a6:35:de:b8:16:f7:3a:ab:7c:5e:ae:4b:da:9a:43: 4b:d2:2b:63:06:6c:05:29:c6:62:28:52:3c:af:55:19:e2:e5: 04:68:27:d9:90:cb:fe:5c:d6:ed:88:0e:33:2d:2a:38:1f:15: fd:56:41:c0:25:f2:7a:6d:84:c7:1b:9b:e9:1a:46:4b:f4:68: 36:13:83:20:17:4f:69:8f:ef:13:c7:14:27:5b:83:0c:03:60: 0c:bc:e6:99:db:3a:97:85:04:5a:81:95:e0:ef:ed:29:82:dc: 07:69:b5:48:0d:cd:71:4e:5e:7c:88:8e:c7:9b:c5:f0:54:5e: 1f:a2:db:cb:de:b2:39:9c:64:9b:15:fe:18:c4:c5:bb:a1:59: dd:c9:8c:5a:84:c6:6b:59:48:18:3f:53:4d:53:ed:09:b6:d5: d6:f5:b8:78:d9:98:c5:ca:9e:6a:a3:53:de:b9:58:dc:2a:d4: 7c:18:d2:4f:c7:90:00:04:74:a2:e2:cd:1d:f9:c7:b8:41:3c: d3:a3:f2:e7:8a:f6:2d:99:42:be:4e:7f:66:73:5d:42:08:90: 24:a3:ce:10 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ0NkEyRDY4ODFENDk1 QUJERURGOEUxNUJGNzdGNUExMzk0NTNEODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7ckpfM9GKdmhxY9lmD/brV3X25wAesq2yLI9rm82MhH0uXWds pvVOCMmD3aDmHhxPYLDxJI89t2CuaqaraCLkY1DV35LoEiXI2XgbuC9UIQOGnna+ bJUz2nuWDNJoYegGMQp/2+nWLdvIuHqYWJQl+LMRF5HpZ2xBqh47oN4DgTY+rP3K IvXT47qrYP0lgmwJUYidw02HjjuMOG/3XXaMOVQ8BBvGfnY5Q4sCmG61R/gtK49c yj+dj+EugoMFoB0AYqQoFGCh/NAFaNzch6HYUFFKCxvvcSAPIEpLQUyKd+jnFNR7 y8lg7YG+2nNEiFwsRMoaOyJz/VxQ5UECPxADAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU1GotaIHUlave344Vv3f1oTlFPYcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzFHb3RhSUhVbGF2ZTM0 NFZ2M2Yxb1RsRlBZYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/DAwDQYJKoZIhvcNAQELBQADggEBAE11R6SNxdkD4qE0UGsy9RcRN/CbRFQx xmgpvEA9Q05cwOvrxw+/b6Y13rgW9zqrfF6uS9qaQ0vSK2MGbAUpxmIoUjyvVRni 5QRoJ9mQy/5c1u2IDjMtKjgfFf1WQcAl8npthMcbm+kaRkv0aDYTgyAXT2mP7xPH FCdbgwwDYAy85pnbOpeFBFqBleDv7SmC3AdptUgNzXFOXnyIjsebxfBUXh+i28ve sjmcZJsV/hjExbuhWd3JjFqExmtZSBg/U01T7Qm21db1uHjZmMXKnmqjU965WNwq 1HwY0k/HkAAEdKLizR35x7hBPNOj8ueK9i2ZQr5Of2ZzXUIIkCSjzhA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:05 2025 by rpki-client