$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8cpIGjOvkwDtEao8-stqEY7t2ew.roa File: 8cpIGjOvkwDtEao8-stqEY7t2ew.roa (raw, json) Hash identifier: Ry0GCQQ9W5083O6HV1o7UktrudxsUcvUb+n8YnSTsFQ= Subject key identifier: F1:CA:48:1A:33:AF:93:00:ED:11:AA:3C:FA:CB:6A:11:8E:ED:D9:EC Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1859 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8cpIGjOvkwDtEao8-stqEY7t2ew.roa Signing time: Fri 17 Jan 2025 01:24:57 +0000 ROA not before: Fri 17 Jan 2025 01:24:57 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6233 (0x1859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:57 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F1CA481A33AF9300ED11AA3CFACB6A118EEDD9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:ae:1c:fb:32:d1:59:01:4f:67:92:2a:41: 46:54:d1:95:b1:aa:61:bc:a0:62:97:8f:a6:d0:50: 02:6f:a9:00:52:47:20:09:ab:9e:a5:13:d2:35:f0: d1:5f:21:88:16:18:7d:ad:0d:18:41:ff:ba:d2:e1: 62:eb:0a:8e:1d:5a:c5:c4:3c:52:d1:88:c6:d3:48: 76:77:24:bf:52:52:7a:c7:16:47:94:67:12:c2:92: 4a:8c:34:3e:c1:64:44:75:74:a1:eb:fb:c3:a4:f1: 4c:b1:a3:de:fe:99:50:e0:07:c8:3b:22:63:f3:cd: 40:cb:2b:96:fe:41:42:98:3f:6b:42:a2:f2:7e:5e: 25:66:4c:5a:df:7a:6c:9a:ca:a4:1a:4d:40:46:5c: 3e:0d:4d:06:ed:f9:ae:fb:08:fe:cd:e8:94:a7:7e: 7a:4e:87:6e:75:3f:d7:50:1e:fa:c1:4d:8e:c5:66: 05:0e:f8:68:cc:ef:35:c5:e4:49:4c:fb:de:75:38: 97:b8:a4:2d:73:9f:ae:09:79:16:5b:2b:de:78:22: c8:50:bd:20:fe:ca:ec:e4:e9:c2:92:63:17:80:39: b4:c1:4b:2c:f4:3e:49:92:fc:63:b9:c8:5d:ea:a5: 98:fd:3f:08:18:83:01:3a:08:40:2c:a0:7f:06:8f: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CA:48:1A:33:AF:93:00:ED:11:AA:3C:FA:CB:6A:11:8E:ED:D9:EC X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8cpIGjOvkwDtEao8-stqEY7t2ew.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.40.0/22 Signature Algorithm: sha256WithRSAEncryption d1:4f:8b:e6:f9:16:2d:aa:80:5b:a8:73:52:c1:6b:7a:83:37: d8:53:06:5c:38:92:8e:58:8f:85:a1:8b:5a:b0:65:12:bc:ca: 0c:30:4f:4f:da:26:6b:13:80:aa:e0:9f:55:9e:21:05:7d:7f: d7:a7:30:66:7e:13:ee:43:fc:aa:ed:86:ba:ba:0a:fd:cd:65: 73:12:34:c8:00:90:70:1f:64:99:26:34:15:bf:00:d1:28:57: 6f:83:bd:eb:d2:40:0c:61:f9:84:11:5f:d4:03:21:67:ed:ff: 5b:d7:1d:8f:75:1b:32:1d:0d:aa:ba:11:84:91:bf:3d:83:4c: 35:b2:c4:59:1e:92:ae:0a:2c:a7:d6:56:bd:a5:5a:1b:ba:0f: 36:f7:b2:17:ef:f5:b3:da:eb:17:27:1f:33:1d:1c:44:29:99: b8:b8:1e:28:d3:19:2f:e8:b3:da:c5:e9:55:c1:ab:c9:d3:4b: 01:c4:76:76:7d:cd:ec:92:91:a3:00:51:de:8b:28:4c:b0:5c: 89:b0:d5:0b:96:42:af:84:de:49:a4:26:85:b8:e4:c3:5c:15: 0b:6e:21:ef:13:08:e3:2d:1e:d9:99:e7:d9:56:b5:81:4a:96: 59:2a:97:df:e4:c4:c9:b7:dd:b1:08:bf:d8:5d:32:f3:af:e0: 86:60:e7:23 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYxQ0E0ODFBMzNBRjkz MDBFRDExQUEzQ0ZBQ0I2QTExOEVFREQ5RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3Wa4c+zLRWQFPZ5IqQUZU0ZWxqmG8oGKXj6bQUAJvqQBSRyAJ q56lE9I18NFfIYgWGH2tDRhB/7rS4WLrCo4dWsXEPFLRiMbTSHZ3JL9SUnrHFkeU ZxLCkkqMND7BZER1dKHr+8Ok8Uyxo97+mVDgB8g7ImPzzUDLK5b+QUKYP2tCovJ+ XiVmTFrfemyayqQaTUBGXD4NTQbt+a77CP7N6JSnfnpOh251P9dQHvrBTY7FZgUO +GjM7zXF5ElM+951OJe4pC1zn64JeRZbK954IshQvSD+yuzk6cKSYxeAObTBSyz0 PkmS/GO5yF3qpZj9PwgYgwE6CEAsoH8Gj9oLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8cpIGjOvkwDtEao8+stqEY7t2ewwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhjcElHak92a3dEdEVh bzgtc3RxRVk3dDJldy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CgwDQYJKoZIhvcNAQELBQADggEBANFPi+b5Fi2qgFuoc1LBa3qDN9hTBlw4 ko5Yj4Whi1qwZRK8ygwwT0/aJmsTgKrgn1WeIQV9f9enMGZ+E+5D/Krthrq6Cv3N ZXMSNMgAkHAfZJkmNBW/ANEoV2+DvevSQAxh+YQRX9QDIWft/1vXHY91GzIdDaq6 EYSRvz2DTDWyxFkekq4KLKfWVr2lWhu6Dzb3shfv9bPa6xcnHzMdHEQpmbi4HijT GS/os9rF6VXBq8nTSwHEdnZ9zeySkaMAUd6LKEywXImw1QuWQq+E3kmkJoW45MNc FQtuIe8TCOMtHtmZ59lWtYFKllkql9/kxMm33bEIv9hdMvOv4IZg5yM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:36:59 2025 by rpki-client