$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa File: EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa (raw, json) Hash identifier: EaFhRtV4BnHwsAAGBRzJI+c2XQ4NkZ1cVUnDAdOElvI= Subject key identifier: 12:DB:CC:EC:2E:56:3B:1B:E6:90:39:70:B4:6E:C5:6B:9B:2C:F0:E0 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18E8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa Signing time: Fri 17 Jan 2025 01:25:46 +0000 ROA not before: Fri 17 Jan 2025 01:25:46 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 45.252.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6376 (0x18e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:46 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=12DBCCEC2E563B1BE6903970B46EC56B9B2CF0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:4c:b3:ea:d6:ee:89:a4:64:c3:0d:af:44: 86:20:b9:59:ff:07:be:f6:f1:a2:4d:07:52:f7:ef: a1:8b:f7:ab:8b:01:10:40:1e:d6:d0:e5:76:9f:63: 22:b0:a8:ce:31:5b:cf:f5:0c:35:bf:d8:50:6f:a4: eb:8c:a9:db:c0:e6:38:c2:51:94:99:54:2e:50:f2: b0:f9:9c:57:bf:26:19:38:60:d6:e3:35:63:ad:16: 08:56:ed:6c:1f:0a:db:08:61:65:e0:92:af:ca:4b: 1b:5f:02:8f:89:58:14:8e:b7:f6:3d:f5:4e:1d:ae: b6:93:7f:28:1c:86:90:c6:1c:31:39:db:eb:99:c1: c2:76:f3:c0:0b:bc:73:8e:56:2a:4d:e2:c6:4c:ed: c6:cd:25:1a:40:2d:e4:aa:af:8f:7f:dc:68:0b:11: 3f:31:1a:aa:28:7c:dc:41:5a:37:0b:8d:f2:69:17: 85:0f:e6:f5:fd:41:3c:63:2f:a9:50:7e:7e:57:56: 90:0b:a5:65:5b:c1:18:74:8b:cb:69:40:a2:64:ec: 94:69:aa:ec:bd:05:bc:17:9e:97:36:99:b2:ec:2b: 7a:db:f8:30:02:20:61:6e:6a:e9:31:98:a6:43:66: be:93:53:3b:cf:3a:7c:65:73:a5:70:88:69:0d:e0: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:CC:EC:2E:56:3B:1B:E6:90:39:70:B4:6E:C5:6B:9B:2C:F0:E0 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/EtvM7C5WOxvmkDlwtG7Fa5ss8OA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.40.0/22 Signature Algorithm: sha256WithRSAEncryption 87:5c:2e:25:3d:26:e1:d1:ff:d9:0c:19:7d:00:eb:64:7d:39: 2e:34:8d:9d:c6:cd:36:71:68:77:89:c8:1c:ba:55:00:4b:03: a4:d0:0c:22:11:a4:46:7f:d7:c5:ab:f8:08:2b:b5:41:b8:c9: 0f:ef:93:2d:3d:5f:7f:d0:fc:4e:22:d2:2e:74:8d:d9:57:9b: ef:8c:04:c5:83:af:de:10:74:98:ea:d9:f6:38:cd:15:78:22: 1e:dc:2a:aa:8e:15:e7:4b:06:bb:b7:43:a5:0e:b9:d2:22:e3: 9a:f2:3f:66:87:7f:b3:db:16:fd:89:be:d8:9b:ce:8b:33:3d: 32:7d:b5:c5:f4:de:4b:a4:5e:74:c8:fc:25:fe:b6:2d:3d:81: 98:6b:5c:e8:4c:4a:9a:aa:c2:e1:60:4d:4b:20:23:27:36:2f: 02:2b:42:34:12:64:d1:22:f6:e5:5f:dd:9b:9c:40:4b:b1:96: 4b:de:d8:0d:80:9c:fb:01:4c:b5:85:d8:34:42:17:2d:d1:e5: 31:bd:a5:9a:ff:1b:10:1d:a9:ed:07:0a:4a:66:ab:dc:e9:a1: 33:0b:ed:4d:41:00:18:74:3f:57:3d:fe:84:cc:ab:32:c2:46: 47:f7:29:10:97:c1:8f:12:2d:4a:f0:31:11:9e:a3:b1:f3:8c: 38:e2:a3:28 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDEyREJDQ0VDMkU1NjNC MUJFNjkwMzk3MEI0NkVDNTZCOUIyQ0YwRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB5Uyz6tbuiaRkww2vRIYguVn/B7728aJNB1L376GL96uLARBA HtbQ5XafYyKwqM4xW8/1DDW/2FBvpOuMqdvA5jjCUZSZVC5Q8rD5nFe/Jhk4YNbj NWOtFghW7WwfCtsIYWXgkq/KSxtfAo+JWBSOt/Y99U4drraTfygchpDGHDE52+uZ wcJ288ALvHOOVipN4sZM7cbNJRpALeSqr49/3GgLET8xGqoofNxBWjcLjfJpF4UP 5vX9QTxjL6lQfn5XVpALpWVbwRh0i8tpQKJk7JRpquy9BbwXnpc2mbLsK3rb+DAC IGFuaukxmKZDZr6TUzvPOnxlc6VwiGkN4LUPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUEtvM7C5WOxvmkDlwtG7Fa5ss8OAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0V0dk03QzVXT3h2bWtE bHd0RzdGYTVzczhPQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CgwDQYJKoZIhvcNAQELBQADggEBAIdcLiU9JuHR/9kMGX0A62R9OS40jZ3G zTZxaHeJyBy6VQBLA6TQDCIRpEZ/18Wr+AgrtUG4yQ/vky09X3/Q/E4i0i50jdlX m++MBMWDr94QdJjq2fY4zRV4Ih7cKqqOFedLBru3Q6UOudIi45ryP2aHf7PbFv2J vtibzoszPTJ9tcX03kukXnTI/CX+ti09gZhrXOhMSpqqwuFgTUsgIyc2LwIrQjQS ZNEi9uVf3ZucQEuxlkve2A2AnPsBTLWF2DRCFy3R5TG9pZr/GxAdqe0HCkpmq9zp oTML7U1BABh0P1c9/oTMqzLCRkf3KRCXwY8SLUrwMRGeo7HzjDjioyg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:26 2025 by rpki-client