$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Nh6WxS4YSH33EMROxlNF_G7CLOE.roa File: Nh6WxS4YSH33EMROxlNF_G7CLOE.roa (raw, json) Hash identifier: Iu1GnLh2swPkQSdd+yr/splclZF9P75oftacTYSnfQM= Subject key identifier: 36:1E:96:C5:2E:18:48:7D:F7:10:C4:4E:C6:53:45:FC:6E:C2:2C:E1 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18A6 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Nh6WxS4YSH33EMROxlNF_G7CLOE.roa Signing time: Fri 17 Jan 2025 01:25:21 +0000 ROA not before: Fri 17 Jan 2025 01:25:21 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 45.252.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6310 (0x18a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:21 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=361E96C52E18487DF710C44EC65345FC6EC22CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:dd:f1:20:90:b0:8c:2f:5f:48:ef:b1:70: 26:30:5d:76:69:08:ee:1e:0f:0a:81:5e:00:c4:fa: fd:fb:80:eb:9c:24:27:1a:be:c6:a7:11:b8:2a:5b: 81:12:ec:bb:1d:d9:f5:b6:b9:f8:ba:45:a7:73:c9: 64:ef:f5:d0:37:d8:8d:fb:e0:42:e7:5d:21:71:c2: dc:62:4f:cb:6a:61:b8:72:c4:32:03:a0:57:14:80: 92:43:6c:c9:69:97:bd:8c:6e:a6:8c:29:3f:62:d7: 85:c4:f0:1f:82:fb:21:6a:43:87:eb:5f:d5:bd:38: 3d:ec:1d:f1:64:34:be:44:82:e8:c8:e7:ab:0d:50: 6d:0b:29:a4:5b:4a:b5:10:9b:a8:62:11:8f:18:42: 6f:db:bb:42:1f:e5:60:b6:ac:58:16:0c:74:a3:0f: 66:34:eb:34:94:f3:94:1d:be:9e:cc:aa:41:dd:e7: 5f:b0:72:7d:2e:30:50:9e:52:90:a0:fe:c8:85:57: 3d:1b:6f:a6:42:68:39:7d:57:9f:7c:7b:cc:62:ba: 47:4e:cb:2a:d2:d3:5b:9a:b7:bd:27:bd:8b:72:9b: 0f:15:72:53:a7:63:c2:ff:b2:6b:8b:f8:dd:78:a9: 92:10:ae:9c:f4:75:5c:7d:a7:5d:d0:45:30:0b:96: 87:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:96:C5:2E:18:48:7D:F7:10:C4:4E:C6:53:45:FC:6E:C2:2C:E1 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Nh6WxS4YSH33EMROxlNF_G7CLOE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.24.0/22 Signature Algorithm: sha256WithRSAEncryption cc:34:44:ea:92:8e:7e:bb:86:e4:bf:bb:67:8b:8e:d7:15:2a: 2a:ca:e5:a4:fe:bc:a6:e3:27:ef:f5:5d:0c:a3:f4:47:dd:32: c0:f5:65:85:34:d6:a3:a4:6b:b1:89:52:f3:52:30:44:0f:2d: f0:93:cc:a9:5c:82:f0:cf:9c:c9:2c:8a:03:74:9a:ff:5a:75: 5b:04:32:eb:a3:0d:7b:13:c6:84:49:51:ad:b3:e9:8b:a3:71: 9f:27:33:a1:80:69:4e:f2:c5:19:29:08:7d:ce:43:f3:dd:3f: fa:dc:b6:b3:bb:1c:b4:3b:a2:01:1f:53:eb:be:84:f3:63:ab: ee:51:d6:40:8c:0c:49:ae:9d:8b:4a:fb:41:50:7f:b0:a4:d1: 11:9e:65:3c:16:e9:56:31:fa:17:e4:bd:1e:23:f6:1d:84:31: 24:8b:d3:63:81:6e:07:2d:5e:88:94:87:e4:b5:2e:1f:48:0e: 4b:31:ae:84:73:57:cd:02:cd:6c:7a:85:97:6a:74:20:31:46: fa:02:59:fc:4b:f8:ae:34:e6:54:7e:47:f9:28:97:2a:e7:94: 9f:2b:26:c9:ed:0c:fb:05:fb:2f:08:02:f4:9f:5d:da:00:93: 6a:e4:88:f3:a5:c6:7d:f7:4c:cf:3f:b6:be:1b:29:18:a2:6b: f3:33:01:24 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM2MUU5NkM1MkUxODQ4 N0RGNzEwQzQ0RUM2NTM0NUZDNkVDMjJDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOut3xIJCwjC9fSO+xcCYwXXZpCO4eDwqBXgDE+v37gOucJCca vsanEbgqW4ES7Lsd2fW2ufi6RadzyWTv9dA32I374ELnXSFxwtxiT8tqYbhyxDID oFcUgJJDbMlpl72MbqaMKT9i14XE8B+C+yFqQ4frX9W9OD3sHfFkNL5EgujI56sN UG0LKaRbSrUQm6hiEY8YQm/bu0If5WC2rFgWDHSjD2Y06zSU85Qdvp7MqkHd51+w cn0uMFCeUpCg/siFVz0bb6ZCaDl9V598e8xiukdOyyrS01uat70nvYtymw8VclOn Y8L/smuL+N14qZIQrpz0dVx9p13QRTALlod/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUNh6WxS4YSH33EMROxlNF/G7CLOEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L05oNld4UzRZU0gzM0VN Uk94bE5GX0c3Q0xPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BgwDQYJKoZIhvcNAQELBQADggEBAMw0ROqSjn67huS/u2eLjtcVKirK5aT+ vKbjJ+/1XQyj9EfdMsD1ZYU01qOka7GJUvNSMEQPLfCTzKlcgvDPnMksigN0mv9a dVsEMuujDXsTxoRJUa2z6YujcZ8nM6GAaU7yxRkpCH3OQ/PdP/rctrO7HLQ7ogEf U+u+hPNjq+5R1kCMDEmunYtK+0FQf7Ck0RGeZTwW6VYx+hfkvR4j9h2EMSSL02OB bgctXoiUh+S1Lh9IDksxroRzV80CzWx6hZdqdCAxRvoCWfxL+K405lR+R/kolyrn lJ8rJsntDPsF+y8IAvSfXdoAk2rkiPOlxn33TM8/tr4bKRiia/MzASQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:03 2025 by rpki-client