$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8eJ_X95EtXZR3447nAYK9mN40Uw.roa File: 8eJ_X95EtXZR3447nAYK9mN40Uw.roa (raw, json) Hash identifier: YEYtVkj9dbQUTfmiFFTKyX8ezWjKTHvh8MpMgy0fFQ8= Subject key identifier: F1:E2:7F:5F:DE:44:B5:76:51:DF:8E:3B:9C:06:0A:F6:63:78:D1:4C Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1823 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8eJ_X95EtXZR3447nAYK9mN40Uw.roa Signing time: Fri 17 Jan 2025 01:24:38 +0000 ROA not before: Fri 17 Jan 2025 01:24:38 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6179 (0x1823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:38 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F1E27F5FDE44B57651DF8E3B9C060AF66378D14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:e4:8f:d7:3b:d1:dd:46:a4:11:41:de:dd: fa:7d:39:72:2e:73:b1:8a:66:e4:bb:11:09:a7:cb: ce:20:33:08:98:d0:9e:99:d7:c9:77:14:ab:07:39: d3:c1:e9:9b:24:b3:6c:c2:95:95:7f:8c:69:c3:d6: 2e:24:a7:6a:8d:88:5a:4c:85:1c:15:2f:ff:a7:79: 25:ef:f2:3e:9c:65:b0:b0:be:28:0d:5c:15:18:3f: 00:df:5d:f9:c1:be:37:c3:b6:39:f8:01:c0:96:09: 38:b5:d0:7a:82:8e:5f:28:59:e2:d4:7b:be:bf:8e: 39:9b:37:58:7c:3b:84:0a:eb:2f:c0:db:9a:e9:04: 4b:09:6d:dc:17:fb:85:8a:e0:ea:df:52:6b:02:fe: 42:e9:03:90:63:1f:5c:76:03:08:42:e5:55:3c:c7: fd:ba:e9:2c:22:27:6e:b5:52:f3:78:43:29:02:80: 0a:03:d4:25:26:d9:8e:97:5a:7d:5b:ce:6c:af:50: 85:66:63:a6:73:45:a1:3f:18:e2:5a:91:97:47:55: c9:64:d5:a8:43:64:99:8e:8f:43:de:b7:25:40:bc: 28:28:93:ad:46:6c:47:d2:1d:a2:07:20:ef:a4:d6: 5f:7b:93:92:15:e7:78:1c:b0:6e:02:ac:2e:7e:54: f7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E2:7F:5F:DE:44:B5:76:51:DF:8E:3B:9C:06:0A:F6:63:78:D1:4C X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8eJ_X95EtXZR3447nAYK9mN40Uw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.100.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:fb:f3:54:ff:5d:38:15:23:24:14:8f:f8:eb:13:f2:fd:7b: c0:b9:34:2b:4d:3d:97:80:27:a3:de:84:1b:7c:0f:b3:a2:d1: fb:17:e3:05:88:b1:35:f5:37:38:88:89:3a:4f:c5:68:d4:7b: 12:2e:8f:b2:03:5e:0b:81:97:c5:f5:60:f5:d1:5f:54:fd:c4: d5:6b:63:a8:0c:43:f2:20:c1:2b:26:6a:87:0e:6d:27:5d:7c: 08:6f:a4:0a:10:b6:75:3e:65:2e:ca:ac:73:69:82:9f:c6:e1: 6e:4a:3c:fa:4f:09:cf:63:5b:2f:3d:bd:51:ec:fd:e8:e5:af: 21:93:9b:9a:a8:2a:b6:98:13:a3:a0:f5:1d:29:ff:d6:73:25: 9d:f3:6a:f6:7d:69:ef:ae:27:d1:cf:94:6c:bb:3c:11:9a:f3: b4:80:17:b8:58:2f:8c:fe:d3:ad:e3:96:5b:56:fa:05:c3:6f: 11:80:4d:af:00:db:8c:66:87:24:7d:05:24:24:83:ad:4e:64: 9f:a7:92:99:18:59:14:33:0a:2f:c3:d9:4e:c9:d7:f7:a2:33: 0a:f9:4d:93:38:ac:dc:c2:1d:b3:7f:e4:28:d6:e6:1a:de:6f: 6e:72:67:d5:f3:4d:c3:bf:f0:4c:d0:8b:de:07:74:72:b1:56: 57:72:3b:05 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYxRTI3RjVGREU0NEI1 NzY1MURGOEUzQjlDMDYwQUY2NjM3OEQxNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzLOSP1zvR3UakEUHe3fp9OXIuc7GKZuS7EQmny84gMwiY0J6Z 18l3FKsHOdPB6Zsks2zClZV/jGnD1i4kp2qNiFpMhRwVL/+neSXv8j6cZbCwvigN XBUYPwDfXfnBvjfDtjn4AcCWCTi10HqCjl8oWeLUe76/jjmbN1h8O4QK6y/A25rp BEsJbdwX+4WK4OrfUmsC/kLpA5BjH1x2AwhC5VU8x/266SwiJ261UvN4QykCgAoD 1CUm2Y6XWn1bzmyvUIVmY6ZzRaE/GOJakZdHVclk1ahDZJmOj0PetyVAvCgok61G bEfSHaIHIO+k1l97k5IV53gcsG4CrC5+VPeLAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8eJ/X95EtXZR3447nAYK9mN40UwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhlSl9YOTVFdFhaUjM0 NDduQVlLOW1ONDBVdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/GQwDQYJKoZIhvcNAQELBQADggEBAF/781T/XTgVIyQUj/jrE/L9e8C5NCtN PZeAJ6PehBt8D7Oi0fsX4wWIsTX1NziIiTpPxWjUexIuj7IDXguBl8X1YPXRX1T9 xNVrY6gMQ/IgwSsmaocObSddfAhvpAoQtnU+ZS7KrHNpgp/G4W5KPPpPCc9jWy89 vVHs/ejlryGTm5qoKraYE6Og9R0p/9ZzJZ3zavZ9ae+uJ9HPlGy7PBGa87SAF7hY L4z+063jlltW+gXDbxGATa8A24xmhyR9BSQkg61OZJ+nkpkYWRQzCi/D2U7J1/ei Mwr5TZM4rNzCHbN/5CjW5hreb25yZ9XzTcO/8EzQi94HdHKxVldyOwU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:57 2025 by rpki-client