$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/T4ko1N2lHkyz823L9IwdZGgyn9Q.roa File: T4ko1N2lHkyz823L9IwdZGgyn9Q.roa (raw, json) Hash identifier: TAy0RoevF3V5TgKxQmj/uV/rfFWvfa5ZEp6hD9fvdxg= Subject key identifier: 4F:89:28:D4:DD:A5:1E:4C:B3:F3:6D:CB:F4:8C:1D:64:68:32:9F:D4 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1843 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/T4ko1N2lHkyz823L9IwdZGgyn9Q.roa Signing time: Fri 17 Jan 2025 01:24:48 +0000 ROA not before: Fri 17 Jan 2025 01:24:48 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 43.254.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6211 (0x1843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:24:48 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=4F8928D4DDA51E4CB3F36DCBF48C1D6468329FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:23:8c:8b:a6:66:4e:68:47:45:2d:f0:3e:01: 92:0f:c0:36:e8:91:7c:5f:b2:0b:f4:80:30:65:71: a8:92:54:91:03:9c:28:3d:69:3d:56:6c:74:04:67: c6:22:d3:05:a1:89:ad:7b:1c:e9:14:55:9e:52:a3: f7:8c:ed:a0:94:8b:dd:55:29:ff:80:9e:a5:1f:34: a3:60:97:03:74:f6:50:9e:c7:2f:8b:d6:97:ff:e1: 51:3c:cf:86:15:14:e7:a9:75:96:9a:0d:c9:5a:49: ad:bb:49:e6:b5:98:6d:56:4a:1c:41:7a:6d:fa:2a: f2:7f:f2:5f:1c:72:83:66:c4:ae:f4:5c:71:cb:d8: fc:3e:42:9d:26:54:70:7b:ab:4b:36:24:3c:60:9d: 5f:24:e1:e7:6f:a8:50:b1:12:50:77:e7:60:ba:f4: 63:11:dc:1f:40:b0:60:a9:24:73:d1:49:45:f8:f2: 72:ac:db:32:4a:1a:5b:ef:97:11:ba:88:15:91:55: f9:3a:e7:54:53:ab:e1:02:a2:d4:9f:9f:d8:bf:0e: 23:5c:be:57:7c:72:b1:f1:ac:f9:47:62:8b:ed:86: 71:fc:d6:7b:9e:3d:62:ff:16:72:4c:bf:82:92:e8: 03:7d:40:66:ea:6d:25:6d:f3:43:ea:2a:39:f9:05: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:89:28:D4:DD:A5:1E:4C:B3:F3:6D:CB:F4:8C:1D:64:68:32:9F:D4 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/T4ko1N2lHkyz823L9IwdZGgyn9Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.155.0/24 Signature Algorithm: sha256WithRSAEncryption d6:b0:d2:82:e9:41:8b:18:df:83:51:f0:50:4a:4d:6b:66:19: 80:56:43:a6:ad:5b:f9:0b:ce:38:55:77:c6:1d:3b:6c:d8:14: 71:c2:88:49:eb:5a:43:11:b7:11:eb:b1:a0:b1:73:8a:5b:e8: 86:9a:ca:30:e0:94:6c:ab:6e:ec:41:b1:4e:60:d8:b0:2e:d1: 41:c5:6b:70:b5:b3:ec:7b:7d:59:ef:bc:03:47:41:d0:77:8e: c6:c1:e9:e6:d6:0b:e0:ad:b2:ab:02:64:3b:b7:9c:56:58:b1: dc:99:7b:94:cb:d8:dc:5d:67:db:a9:9f:e2:3f:bb:c6:39:32: 70:ec:b1:ed:f8:ca:29:e3:98:50:ce:ed:af:80:ca:1f:e7:9f: 0a:58:c2:93:1d:35:c5:35:82:32:49:38:9a:e7:98:68:d3:51: eb:2d:cb:35:52:5f:9f:c0:07:cb:fe:c5:42:db:5d:74:22:1d: 12:73:59:76:2c:e1:a6:9b:ff:48:55:49:9c:8a:66:5f:86:bf: ac:65:e3:01:8e:89:45:6d:34:7c:95:bb:e5:8a:f8:62:6e:34: 28:8d:e5:b3:24:53:6e:be:19:cc:26:66:e3:a1:26:42:ab:a5: 13:8b:90:0a:60:05:ef:f9:ab:09:49:7f:c1:a4:9a:b0:60:0a: 3f:86:d6:6a -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI0NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRGODkyOEQ0RERBNTFF NENCM0YzNkRDQkY0OEMxRDY0NjgzMjlGRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdI4yLpmZOaEdFLfA+AZIPwDbokXxfsgv0gDBlcaiSVJEDnCg9 aT1WbHQEZ8Yi0wWhia17HOkUVZ5So/eM7aCUi91VKf+AnqUfNKNglwN09lCexy+L 1pf/4VE8z4YVFOepdZaaDclaSa27Sea1mG1WShxBem36KvJ/8l8ccoNmxK70XHHL 2Pw+Qp0mVHB7q0s2JDxgnV8k4edvqFCxElB352C69GMR3B9AsGCpJHPRSUX48nKs 2zJKGlvvlxG6iBWRVfk651RTq+ECotSfn9i/DiNcvld8crHxrPlHYovthnH81nue PWL/FnJMv4KS6AN9QGbqbSVt80PqKjn5BUXbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUT4ko1N2lHkyz823L9IwdZGgyn9QwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1Q0a28xTjJsSGt5ejgy M0w5SXdkWkdneW45US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr/pswDQYJKoZIhvcNAQELBQADggEBANaw0oLpQYsY34NR8FBKTWtmGYBWQ6at W/kLzjhVd8YdO2zYFHHCiEnrWkMRtxHrsaCxc4pb6IaayjDglGyrbuxBsU5g2LAu 0UHFa3C1s+x7fVnvvANHQdB3jsbB6ebWC+CtsqsCZDu3nFZYsdyZe5TL2NxdZ9up n+I/u8Y5MnDsse34yinjmFDO7a+Ayh/nnwpYwpMdNcU1gjJJOJrnmGjTUestyzVS X5/AB8v+xULbXXQiHRJzWXYs4aab/0hVSZyKZl+Gv6xl4wGOiUVtNHyVu+WK+GJu NCiN5bMkU26+GcwmZuOhJkKrpROLkApgBe/5qwlJf8GkmrBgCj+G1mo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:26 2025 by rpki-client