$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ItoUPdYPi9A9xTaog3UP3IWmjC8.roa File: ItoUPdYPi9A9xTaog3UP3IWmjC8.roa (raw, json) Hash identifier: o1gw1qFOr5ea54P/l41tHKyYtWiZlFgP6le+Id7mjjE= Subject key identifier: 22:DA:14:3D:D6:0F:8B:D0:3D:C5:36:A8:83:75:0F:DC:85:A6:8C:2F Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1800 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ItoUPdYPi9A9xTaog3UP3IWmjC8.roa Signing time: Fri 17 Jan 2025 01:24:25 +0000 ROA not before: Fri 17 Jan 2025 01:24:25 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6144 (0x1800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:25 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=22DA143DD60F8BD03DC536A883750FDC85A68C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:5e:f4:1a:fc:a3:46:04:1d:2b:a5:1e:e4: 9d:c4:93:2b:3e:89:4f:0e:d7:65:4e:fb:17:d2:56: 1c:c2:dc:e8:62:ad:a8:f9:2b:77:12:7d:9b:85:f9: 60:c9:ac:25:ab:64:b3:8f:64:41:30:9e:6a:5b:c8: c9:c3:3b:23:3a:1e:dd:2b:ef:ee:38:39:2f:3d:40: 11:7b:14:be:a6:12:73:81:91:1f:8a:bf:46:a4:3d: 3b:17:d4:0a:3a:ff:b9:38:f3:73:22:1e:67:eb:48: 8d:e3:a5:de:aa:13:18:80:6e:20:a2:dc:c8:7d:1e: 14:ec:81:46:7e:9b:c9:86:e2:bf:72:59:5d:30:25: f1:b1:b2:c0:86:94:1b:d6:45:fa:d6:9e:52:33:e2: 13:b4:81:7e:e9:01:35:26:11:43:ed:57:a6:73:3c: 85:e4:0e:49:0a:07:28:c5:f6:7b:fb:25:98:22:0a: 3d:31:4a:5c:66:dc:a1:04:fc:db:fa:32:50:64:b5: 32:d0:ac:22:ad:13:27:16:ce:4f:6a:b5:a7:a7:6e: ad:27:2e:fd:86:41:5c:50:4f:5b:72:f0:9d:96:43: 8c:07:0d:2f:cc:06:2e:58:e3:36:9f:92:71:c9:eb: 65:32:39:2b:ce:3f:02:d1:ed:dd:67:1f:5b:f2:f6: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DA:14:3D:D6:0F:8B:D0:3D:C5:36:A8:83:75:0F:DC:85:A6:8C:2F X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ItoUPdYPi9A9xTaog3UP3IWmjC8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.102.0/24 Signature Algorithm: sha256WithRSAEncryption c2:de:1c:0c:a9:19:bd:94:9e:84:91:47:0d:19:82:9a:81:ab: 24:0c:72:44:78:04:ee:71:88:f6:7c:9a:47:e0:91:a7:b6:49: ed:16:b6:01:31:ef:3c:e7:82:88:85:6f:25:c2:2e:c1:52:a6: 4f:94:07:66:54:8f:03:ec:e0:93:ad:66:ee:73:d2:fb:0f:dd: 5c:6d:ac:5c:c0:00:ec:00:1e:cf:2a:6d:75:38:11:0d:32:dc: c8:0d:b5:be:f8:62:c0:91:95:02:48:54:73:d8:4a:98:bf:6f: e0:4d:13:9c:e8:f8:60:77:22:6c:d3:1e:a4:04:13:85:26:cf: 0b:01:04:79:ba:f7:b8:2c:b1:2c:5c:43:2a:2d:47:e7:8d:e0: 8f:ee:4a:db:0e:87:09:1c:3f:a9:7a:43:ad:45:d9:17:47:8e: 37:c1:d1:9f:ef:ad:34:6a:7d:36:15:8d:bb:20:04:6b:c7:3a: c7:67:39:e0:9d:96:c9:be:70:f7:b6:17:8b:bf:07:19:71:6a: 83:af:b3:7b:4c:f4:a2:c1:50:4b:d5:39:47:1a:4b:10:eb:16: 74:34:0b:c7:a6:e6:57:7c:32:6c:4d:9c:f3:28:1e:72:21:70: 37:1c:99:22:33:55:a6:b6:05:65:7c:98:49:ad:29:72:32:bd: 10:2c:1c:03 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIyREExNDNERDYwRjhC RDAzREM1MzZBODgzNzUwRkRDODVBNjhDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/7l70GvyjRgQdK6Ue5J3Ekys+iU8O12VO+xfSVhzC3Ohiraj5 K3cSfZuF+WDJrCWrZLOPZEEwnmpbyMnDOyM6Ht0r7+44OS89QBF7FL6mEnOBkR+K v0akPTsX1Ao6/7k483MiHmfrSI3jpd6qExiAbiCi3Mh9HhTsgUZ+m8mG4r9yWV0w JfGxssCGlBvWRfrWnlIz4hO0gX7pATUmEUPtV6ZzPIXkDkkKByjF9nv7JZgiCj0x Slxm3KEE/Nv6MlBktTLQrCKtEycWzk9qtaenbq0nLv2GQVxQT1ty8J2WQ4wHDS/M Bi5Y4zafknHJ62UyOSvOPwLR7d1nH1vy9kxhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUItoUPdYPi9A9xTaog3UP3IWmjC8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0l0b1VQZFlQaTlBOXhU YW9nM1VQM0lXbWpDOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GYwDQYJKoZIhvcNAQELBQADggEBAMLeHAypGb2UnoSRRw0ZgpqBqyQMckR4 BO5xiPZ8mkfgkae2Se0WtgEx7zzngoiFbyXCLsFSpk+UB2ZUjwPs4JOtZu5z0vsP 3VxtrFzAAOwAHs8qbXU4EQ0y3MgNtb74YsCRlQJIVHPYSpi/b+BNE5zo+GB3ImzT HqQEE4UmzwsBBHm697gssSxcQyotR+eN4I/uStsOhwkcP6l6Q61F2RdHjjfB0Z/v rTRqfTYVjbsgBGvHOsdnOeCdlsm+cPe2F4u/BxlxaoOvs3tM9KLBUEvVOUcaSxDr FnQ0C8em5ld8MmxNnPMoHnIhcDccmSIzVaa2BWV8mEmtKXIyvRAsHAM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:01 2025 by rpki-client