$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa File: As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa (raw, json) Hash identifier: YcryI+M+Yr8nj9pTolk0GXI9Hj2MiVWWTj1KBANjXL4= Subject key identifier: 02:CE:A5:F7:DA:6D:9F:46:2A:DC:02:10:D5:C7:4A:C1:A3:F3:56:40 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18FD Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa Signing time: Fri 17 Jan 2025 01:25:54 +0000 ROA not before: Fri 17 Jan 2025 01:25:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6397 (0x18fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=02CEA5F7DA6D9F462ADC0210D5C74AC1A3F35640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:ba:0b:c1:af:ee:a1:1a:ac:39:35:2e:34: 83:ee:2d:aa:9e:ac:ec:7d:30:28:28:a3:b4:ee:68: 9f:2c:c0:35:4f:c2:e9:eb:9c:46:55:42:cf:77:34: ad:7c:c5:e3:6d:d0:0d:23:04:36:43:22:5b:46:e0: 52:46:16:46:46:b3:eb:31:d3:92:30:04:01:3f:ec: 94:f8:8d:3b:af:f7:4d:20:2e:7a:1c:c2:97:5c:fc: c2:a8:f3:5f:8b:82:21:98:ab:10:d6:bd:1f:9d:20: 0e:6f:a2:3e:f5:2d:f7:05:a8:c5:8f:80:04:59:17: c3:dc:aa:f3:27:4e:db:16:2f:5f:e5:24:e0:fb:80: d9:d9:9a:4d:16:38:cd:0b:eb:16:b1:4a:74:67:5d: 9e:c7:20:a5:84:ce:5b:2d:2d:29:42:cd:3d:69:b7: c4:bf:17:8e:46:1f:5b:b5:36:55:cc:b0:a9:01:a4: d0:6a:a6:73:ae:1c:90:5c:6d:ef:00:77:fe:8f:71: 9e:d3:b3:86:08:d4:37:59:0a:16:e9:c5:99:3e:02: 30:85:ed:ef:dd:dd:71:4e:24:20:1d:5c:7e:42:05: 08:2d:45:b3:9b:b0:64:56:2f:de:6c:b5:5f:ec:07: 46:71:f6:9c:db:c7:69:d0:e4:be:f7:34:57:42:7c: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CE:A5:F7:DA:6D:9F:46:2A:DC:02:10:D5:C7:4A:C1:A3:F3:56:40 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/As6l99ptn0Yq3AIQ1cdKwaPzVkA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.44.0/22 Signature Algorithm: sha256WithRSAEncryption 26:98:a1:cb:91:6b:8b:bb:3b:85:ff:ff:84:d9:ab:aa:d6:0c: 60:4a:95:ba:85:23:70:c9:ec:30:0a:19:52:91:df:aa:0c:00: d8:e9:70:a9:69:64:58:92:dd:73:c7:f1:c8:30:6d:91:1e:ae: 03:3c:3b:3c:f2:b1:58:e7:f0:8d:54:c9:17:17:82:4e:e4:ba: dd:63:b9:6b:79:d5:17:ef:3a:24:b2:7d:52:19:b0:c5:1c:e4: cb:a4:62:3a:b6:19:d2:2a:64:01:ee:dc:f9:88:ef:62:01:de: 69:c1:31:16:13:1e:8f:2e:46:60:d5:ae:8f:15:65:f0:7c:54: fc:c6:8b:51:7a:08:e1:c4:28:26:1a:58:05:d3:71:ca:83:9f: 37:0c:bb:c8:f3:85:25:32:a7:e5:b8:85:ae:52:5c:2b:4a:16: f1:ad:3a:40:17:c8:5a:9d:3f:60:80:77:27:54:7a:28:9c:19: 61:70:e2:ca:b2:f5:d3:6a:47:81:0f:a6:a1:1a:03:d6:76:38: 34:78:de:13:33:4f:eb:e0:7a:13:c2:36:21:63:e2:5b:fa:a7: d4:1f:46:94:54:61:1f:d8:5a:41:b0:16:de:33:62:16:e5:7e: 9b:08:42:ef:83:1c:a5:53:d5:b0:c3:80:60:f7:e6:87:24:af: aa:74:4d:25 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyQ0VBNUY3REE2RDlG NDYyQURDMDIxMEQ1Qzc0QUMxQTNGMzU2NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYrLoLwa/uoRqsOTUuNIPuLaqerOx9MCgoo7TuaJ8swDVPwunr nEZVQs93NK18xeNt0A0jBDZDIltG4FJGFkZGs+sx05IwBAE/7JT4jTuv900gLnoc wpdc/MKo81+LgiGYqxDWvR+dIA5voj71LfcFqMWPgARZF8PcqvMnTtsWL1/lJOD7 gNnZmk0WOM0L6xaxSnRnXZ7HIKWEzlstLSlCzT1pt8S/F45GH1u1NlXMsKkBpNBq pnOuHJBcbe8Ad/6PcZ7Ts4YI1DdZChbpxZk+AjCF7e/d3XFOJCAdXH5CBQgtRbOb sGRWL95stV/sB0Zx9pzbx2nQ5L73NFdCfJkzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUAs6l99ptn0Yq3AIQ1cdKwaPzVkAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0FzNmw5OXB0bjBZcTNB SVExY2RLd2FQelZrQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CwwDQYJKoZIhvcNAQELBQADggEBACaYocuRa4u7O4X//4TZq6rWDGBKlbqF I3DJ7DAKGVKR36oMANjpcKlpZFiS3XPH8cgwbZEergM8OzzysVjn8I1UyRcXgk7k ut1juWt51RfvOiSyfVIZsMUc5MukYjq2GdIqZAHu3PmI72IB3mnBMRYTHo8uRmDV ro8VZfB8VPzGi1F6COHEKCYaWAXTccqDnzcMu8jzhSUyp+W4ha5SXCtKFvGtOkAX yFqdP2CAdydUeiicGWFw4sqy9dNqR4EPpqEaA9Z2ODR43hMzT+vgehPCNiFj4lv6 p9QfRpRUYR/YWkGwFt4zYhblfpsIQu+DHKVT1bDDgGD35ockr6p0TSU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:32 2025 by rpki-client