$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa File: CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa (raw, json) Hash identifier: Trtzulm/j2T7BIz8SGw5HZG1RoROM033pJTOnxMqxs8= Subject key identifier: 09:99:0F:DD:6D:D9:18:86:6F:DD:13:E6:56:B2:8A:8F:2C:05:5D:B4 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1870 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa Signing time: Fri 17 Jan 2025 01:25:03 +0000 ROA not before: Fri 17 Jan 2025 01:25:03 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 2406:1e80::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6256 (0x1870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:03 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=09990FDD6DD918866FDD13E656B28A8F2C055DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:bb:3b:8d:4d:17:cb:0f:7f:f8:f1:da:ae: 29:af:84:29:6a:1d:f3:f9:3c:60:0e:75:39:45:51: f2:e7:d6:ea:f8:7b:67:20:90:5f:0b:8b:87:40:59: 0b:e6:5b:99:71:37:21:1d:38:d8:3f:c6:a5:eb:30: 4a:f7:0a:53:5a:58:4c:d8:5c:13:85:28:45:72:68: 01:a2:2f:90:84:b2:d9:f3:8c:3d:78:f7:06:1c:60: ea:f8:db:aa:2d:83:90:97:e5:19:18:0b:a3:d1:0b: e8:25:60:ed:06:ed:87:34:1e:a0:a8:8b:20:6d:bf: a7:7e:fe:5f:5c:6a:17:5c:fe:d3:de:c0:fb:46:63: cf:bc:bf:88:ca:69:46:79:4b:b0:5c:20:3a:24:53: 73:26:12:a3:e3:49:98:25:ef:a5:33:bb:1d:79:fd: 30:72:c9:8f:e5:56:cd:74:b7:2c:5c:b6:3c:d5:dc: d8:a1:3d:5e:01:f8:4c:34:73:13:4f:27:3f:2d:9b: a6:e5:c9:d7:e2:09:9a:cf:e8:08:03:82:35:ca:8b: f5:4e:aa:50:01:fa:01:6b:4e:b6:4e:2c:fe:fe:5a: c1:97:fc:61:38:92:11:0e:21:56:0c:5d:8f:8b:b3: 41:f4:02:19:51:c3:45:1a:0f:b6:46:24:57:80:b3: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:99:0F:DD:6D:D9:18:86:6F:DD:13:E6:56:B2:8A:8F:2C:05:5D:B4 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/CZkP3W3ZGIZv3RPmVrKKjywFXbQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:1e80::/48 Signature Algorithm: sha256WithRSAEncryption 29:b8:b3:2a:9a:d8:84:e6:f9:e8:83:0b:41:80:be:fd:68:d5: 21:be:f1:e6:53:74:78:90:65:a7:55:5c:2d:65:e5:a5:7c:9b: 7a:01:7b:3a:a8:bc:cc:7a:da:69:29:e0:c6:a9:60:82:87:6a: 4b:65:a5:37:7f:89:cb:66:8f:d4:df:5f:18:3d:56:89:55:50: 0c:27:d9:26:f9:af:e3:26:35:b4:9f:42:b7:ee:55:97:20:16: 82:60:84:be:10:b0:f4:63:58:81:02:7b:61:36:d6:cb:6b:55: f4:51:79:fc:41:ef:de:af:4a:bc:dc:10:71:ff:fc:01:f5:ac: 33:02:aa:62:36:56:4e:1e:91:ab:d6:0d:ad:94:ec:38:ef:0e: e6:2e:f4:8b:17:12:92:f9:bb:c0:05:4f:b9:0e:bb:d9:f8:5c: 1d:09:9d:7d:96:75:9f:93:4f:13:76:51:91:64:73:09:90:6e: ef:70:8f:1b:2a:43:65:fd:40:a0:0f:89:bc:1e:db:01:59:f5: 74:58:a9:0d:ff:24:05:e8:07:e9:68:37:9c:4c:e7:42:45:15: 4c:dc:98:e1:9e:d6:d3:6c:c8:aa:3f:d0:fe:44:fe:55:68:34: 76:7b:5b:ee:15:07:2c:72:5d:f9:f3:b6:6e:9a:0d:5a:29:da: ee:bd:16:c6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICGHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA5OTkwRkRENkREOTE4 ODY2RkREMTNFNjU2QjI4QThGMkMwNTVEQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs7rs7jU0Xyw9/+PHarimvhClqHfP5PGAOdTlFUfLn1ur4e2cg kF8Li4dAWQvmW5lxNyEdONg/xqXrMEr3ClNaWEzYXBOFKEVyaAGiL5CEstnzjD14 9wYcYOr426otg5CX5RkYC6PRC+glYO0G7Yc0HqCoiyBtv6d+/l9cahdc/tPewPtG Y8+8v4jKaUZ5S7BcIDokU3MmEqPjSZgl76Uzux15/TByyY/lVs10tyxctjzV3Nih PV4B+Ew0cxNPJz8tm6blydfiCZrP6AgDgjXKi/VOqlAB+gFrTrZOLP7+WsGX/GE4 khEOIVYMXY+Ls0H0AhlRw0UaD7ZGJFeAs/czAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUCZkP3W3ZGIZv3RPmVrKKjywFXbQwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0Naa1AzVzNaR0ladjNS UG1WcktLanl3RlhiUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkBh6AAAAwDQYJKoZIhvcNAQELBQADggEBACm4syqa2ITm+eiDC0GAvv1o1SG+ 8eZTdHiQZadVXC1l5aV8m3oBezqovMx62mkp4MapYIKHaktlpTd/ictmj9TfXxg9 VolVUAwn2Sb5r+MmNbSfQrfuVZcgFoJghL4QsPRjWIECe2E21strVfRRefxB796v SrzcEHH//AH1rDMCqmI2Vk4ekavWDa2U7DjvDuYu9IsXEpL5u8AFT7kOu9n4XB0J nX2WdZ+TTxN2UZFkcwmQbu9wjxsqQ2X9QKAPibwe2wFZ9XRYqQ3/JAXoB+loN5xM 50JFFUzcmOGe1tNsyKo/0P5E/lVoNHZ7W+4VByxyXfnztm6aDVop2u69FsY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:47 2025 by rpki-client