$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/QwBxhiT85xA9JjGUMPVI-B_gdQo.roa File: QwBxhiT85xA9JjGUMPVI-B_gdQo.roa (raw, json) Hash identifier: XYLqUOTrZBHv6Wp122a0nWalEMQ23uJjnC+m5gxRx0A= Subject key identifier: 43:00:71:86:24:FC:E7:10:3D:26:31:94:30:F5:48:F8:1F:E0:75:0A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18E2 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QwBxhiT85xA9JjGUMPVI-B_gdQo.roa Signing time: Fri 17 Jan 2025 01:25:44 +0000 ROA not before: Fri 17 Jan 2025 01:25:44 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 45.252.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6370 (0x18e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:44 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4300718624FCE7103D26319430F548F81FE0750A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:87:8c:de:e2:a0:2a:53:72:90:85:54:96: 47:cc:f8:bd:3b:2a:7c:61:2c:76:68:68:78:62:67: 69:a8:84:2b:9b:4b:6c:59:02:20:a1:dc:b9:2e:5f: 2b:9b:cb:a4:c3:00:df:7f:23:e1:58:a1:9a:f2:12: 56:93:76:87:9f:41:39:86:66:d3:5b:07:63:dc:06: 9e:56:2e:24:f3:69:36:89:8c:02:a1:58:57:7c:a0: 5a:b0:44:c8:7d:32:b6:97:cc:cd:2d:fc:56:67:02: cf:bc:af:71:54:3a:89:93:ea:c8:a9:df:e3:33:f4: 01:78:76:18:90:22:ca:22:de:8b:d2:fc:d5:44:26: 44:f3:78:c2:8c:ca:62:b6:a9:fb:f4:73:d1:0a:d0: e0:39:dc:7a:ce:41:14:8c:66:ca:df:f0:a2:cf:ff: 62:b6:7f:80:c6:05:67:80:bc:04:e4:d7:9c:9a:07: 09:f5:91:a4:1e:08:60:9b:6a:89:4b:74:3b:9b:84: c8:98:23:b6:66:17:08:44:f3:c4:fd:a5:15:26:11: 57:d6:77:3d:55:2c:5c:2b:93:ff:9b:46:e0:cf:34: e9:d7:62:cc:c3:6d:9d:2c:08:06:1a:88:ad:4e:4e: f7:3a:e7:a8:ae:0f:d6:36:91:3d:2c:5e:39:4b:f0: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:71:86:24:FC:E7:10:3D:26:31:94:30:F5:48:F8:1F:E0:75:0A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/QwBxhiT85xA9JjGUMPVI-B_gdQo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.24.0/22 Signature Algorithm: sha256WithRSAEncryption 25:cc:79:02:61:79:b5:2e:18:36:4d:b9:30:85:dc:2b:9d:30: 17:8e:a0:a3:10:52:de:84:06:b2:01:21:15:1d:8b:67:ed:b3: 21:92:98:b9:4d:a9:aa:0b:57:5e:43:91:1a:45:e6:56:15:c7: 9b:44:11:5e:e0:d3:4b:c1:94:a2:6e:4b:a8:6a:5f:12:8e:ef: 02:6b:24:c5:98:4d:44:26:bf:c9:3d:55:fa:b1:f2:67:45:2a: 90:09:44:ad:0c:af:21:8c:2e:6d:b2:d2:2f:29:b8:a5:e1:8f: 97:3a:fb:87:67:1f:56:15:96:c6:d7:37:cd:cd:69:fc:d6:72: e1:77:1b:01:2c:3e:ad:e5:ad:8a:b0:7e:e2:b2:65:14:be:17: 21:d7:ab:56:1d:92:b8:63:ef:1a:2d:15:d4:8b:87:cd:bb:df: 29:ed:d8:8d:ed:e5:db:20:47:c1:ce:63:9a:d7:1e:94:5c:9e: bf:7f:05:7a:f7:6b:c6:c2:88:76:98:3a:ad:73:bf:75:3c:bf: 75:05:fb:80:95:de:17:b6:b7:f5:67:48:97:01:c6:07:de:d3: 68:02:a5:cf:15:fe:d1:eb:c0:33:09:bd:6a:32:fd:42:6c:57: 52:e9:c5:f3:21:bd:48:d8:6e:a0:30:be:7e:c3:20:bd:20:50: 1e:30:84:93 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQzMDA3MTg2MjRGQ0U3 MTAzRDI2MzE5NDMwRjU0OEY4MUZFMDc1MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNT4eM3uKgKlNykIVUlkfM+L07KnxhLHZoaHhiZ2mohCubS2xZ AiCh3LkuXyuby6TDAN9/I+FYoZryElaTdoefQTmGZtNbB2PcBp5WLiTzaTaJjAKh WFd8oFqwRMh9MraXzM0t/FZnAs+8r3FUOomT6sip3+Mz9AF4dhiQIsoi3ovS/NVE JkTzeMKMymK2qfv0c9EK0OA53HrOQRSMZsrf8KLP/2K2f4DGBWeAvATk15yaBwn1 kaQeCGCbaolLdDubhMiYI7ZmFwhE88T9pRUmEVfWdz1VLFwrk/+bRuDPNOnXYszD bZ0sCAYaiK1OTvc656iuD9Y2kT0sXjlL8GtVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUQwBxhiT85xA9JjGUMPVI+B/gdQowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1F3QnhoaVQ4NXhBOUpq R1VNUFZJLUJfZ2RRby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BgwDQYJKoZIhvcNAQELBQADggEBACXMeQJhebUuGDZNuTCF3CudMBeOoKMQ Ut6EBrIBIRUdi2ftsyGSmLlNqaoLV15DkRpF5lYVx5tEEV7g00vBlKJuS6hqXxKO 7wJrJMWYTUQmv8k9Vfqx8mdFKpAJRK0MryGMLm2y0i8puKXhj5c6+4dnH1YVlsbX N83NafzWcuF3GwEsPq3lrYqwfuKyZRS+FyHXq1Ydkrhj7xotFdSLh8273ynt2I3t 5dsgR8HOY5rXHpRcnr9/BXr3a8bCiHaYOq1zv3U8v3UF+4CV3he2t/VnSJcBxgfe 02gCpc8V/tHrwDMJvWoy/UJsV1LpxfMhvUjYbqAwvn7DIL0gUB4whJM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:16 2025 by rpki-client