$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa File: Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa (raw, json) Hash identifier: G8U6WpOoXxyCIvR3Qov2kIsl7D1dAnMsD7qgdAWLkBU= Subject key identifier: 63:1C:FF:7D:CB:62:B9:5F:62:31:BD:C1:85:DF:86:93:8E:5F:1E:3A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1909 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa Signing time: Fri 17 Jan 2025 01:25:59 +0000 ROA not before: Fri 17 Jan 2025 01:25:59 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 45.252.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6409 (0x1909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:59 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=631CFF7DCB62B95F6231BDC185DF86938E5F1E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:71:0d:7f:56:43:61:d6:c2:5f:6a:1f:1f:76: f7:83:dd:a0:ad:94:d8:da:02:fd:be:a9:08:26:eb: 12:94:92:d0:3f:eb:8e:0c:de:cf:10:40:d8:40:18: 0a:dc:1a:2e:7b:36:ed:3c:3a:09:5d:08:cf:f0:5c: 34:d9:9f:f7:94:d8:17:5e:0f:b7:86:3f:1b:39:39: 18:03:cb:9c:cd:1e:e1:35:30:51:c3:f3:64:68:05: 12:77:5a:a8:af:7a:66:0b:0a:12:ef:a3:9c:31:c6: 35:c6:5e:74:b0:f3:c8:3e:85:f4:20:f5:8a:c1:89: 0d:d9:69:2f:94:5b:60:82:5f:42:60:a9:75:e2:b4: 96:32:f5:c0:5a:3d:de:05:f7:45:2e:6a:50:1e:ae: 1a:ab:25:ce:94:03:bf:b7:20:5e:9f:26:86:13:c8: 7c:47:1c:bf:e1:29:2d:31:43:bd:a0:98:b1:47:7c: 3e:7f:54:88:a2:24:f3:ea:bd:ac:1f:d5:16:7a:17: 77:2e:56:5d:7f:98:c3:03:12:90:63:5c:3b:c6:35: a5:a2:40:a1:7e:22:5b:6c:84:55:e5:a8:bb:59:db: 65:aa:6d:44:19:46:21:05:cd:9b:93:78:44:70:83: 69:7d:6b:69:49:19:65:2f:d4:ac:c4:ec:e1:fa:59: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1C:FF:7D:CB:62:B9:5F:62:31:BD:C1:85:DF:86:93:8E:5F:1E:3A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Yxz_fctiuV9iMb3Bhd-Gk45fHjo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.144.0/22 Signature Algorithm: sha256WithRSAEncryption c1:d7:be:9c:e3:c4:75:7b:9a:d4:88:e7:fc:a3:cc:3c:b3:4f: 9c:74:e7:09:16:2e:98:63:70:6d:6d:62:7a:16:9f:91:e1:a5: a2:d8:00:81:bd:15:6c:79:65:a2:48:83:ba:61:4d:64:d1:98: 84:33:08:fd:02:aa:d6:1d:c8:24:93:03:31:b9:25:db:88:61: d7:bb:43:15:c6:5f:09:60:6f:12:b3:9c:90:20:96:a8:70:11: 86:ef:25:9f:93:3a:55:08:f1:0d:40:ca:91:70:ae:61:70:37: 1f:55:3d:c6:f0:4b:7e:31:10:f0:93:82:9f:60:26:ca:86:36: b8:51:3a:3a:bb:27:c4:ef:b0:5c:b7:73:00:d2:8e:b6:99:d8: 7c:e2:24:5d:f0:d6:20:b9:c4:9f:50:0a:d8:d0:4e:2d:7f:f8: ef:ee:85:9c:8f:54:bd:6b:ea:33:ae:4e:f6:9e:14:12:fe:59: f5:b7:d6:94:5c:e4:50:b0:e4:74:54:1a:23:f1:07:8e:cb:d9: 48:7b:51:93:74:8d:7a:d4:a9:6f:30:c4:18:68:1b:5a:43:16: a0:3d:10:53:dd:ba:2e:d6:d6:3a:94:2e:34:05:b3:e4:be:b4: 6c:d3:71:f7:27:c6:da:df:ab:a3:e1:56:51:c6:27:a6:5a:57: 94:da:c5:5e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYzMUNGRjdEQ0I2MkI5 NUY2MjMxQkRDMTg1REY4NjkzOEU1RjFFM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDscQ1/VkNh1sJfah8fdveD3aCtlNjaAv2+qQgm6xKUktA/644M 3s8QQNhAGArcGi57Nu08OgldCM/wXDTZn/eU2BdeD7eGPxs5ORgDy5zNHuE1MFHD 82RoBRJ3WqivemYLChLvo5wxxjXGXnSw88g+hfQg9YrBiQ3ZaS+UW2CCX0JgqXXi tJYy9cBaPd4F90UualAerhqrJc6UA7+3IF6fJoYTyHxHHL/hKS0xQ72gmLFHfD5/ VIiiJPPqvawf1RZ6F3cuVl1/mMMDEpBjXDvGNaWiQKF+IltshFXlqLtZ22WqbUQZ RiEFzZuTeERwg2l9a2lJGWUv1KzE7OH6WbRnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUYxz/fctiuV9iMb3Bhd+Gk45fHjowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1l4el9mY3RpdVY5aU1i M0JoZC1HazQ1Zkhqby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/JAwDQYJKoZIhvcNAQELBQADggEBAMHXvpzjxHV7mtSI5/yjzDyzT5x05wkW LphjcG1tYnoWn5HhpaLYAIG9FWx5ZaJIg7phTWTRmIQzCP0CqtYdyCSTAzG5JduI Yde7QxXGXwlgbxKznJAglqhwEYbvJZ+TOlUI8Q1AypFwrmFwNx9VPcbwS34xEPCT gp9gJsqGNrhROjq7J8TvsFy3cwDSjraZ2HziJF3w1iC5xJ9QCtjQTi1/+O/uhZyP VL1r6jOuTvaeFBL+WfW31pRc5FCw5HRUGiPxB47L2Uh7UZN0jXrUqW8wxBhoG1pD FqA9EFPdui7W1jqULjQFs+S+tGzTcfcnxtrfq6PhVlHGJ6ZaV5TaxV4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:52 2025 by rpki-client