$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/j0lceDqimBFMjj6SCVfSPQ_-l4s.roa File: j0lceDqimBFMjj6SCVfSPQ_-l4s.roa (raw, json) Hash identifier: avagv37er0dpOMP1yMbBgHySi1GPxEoRyP4pVbwgahI= Subject key identifier: 8F:49:5C:78:3A:A2:98:11:4C:8E:3E:92:09:57:D2:3D:0F:FE:97:8B Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 186C Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/j0lceDqimBFMjj6SCVfSPQ_-l4s.roa Signing time: Fri 17 Jan 2025 01:25:02 +0000 ROA not before: Fri 17 Jan 2025 01:25:02 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 139259 IP address blocks: 45.252.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6252 (0x186c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:02 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=8F495C783AA298114C8E3E920957D23D0FFE978B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:b5:c2:d1:d7:8d:ba:b8:a0:a0:98:a6:f0: c2:c0:27:c7:99:de:0c:f2:5f:7a:6b:af:d6:55:44: a9:b8:b8:c7:be:65:91:e0:b5:d6:9d:e5:2f:b8:fd: 43:40:4e:4a:fc:1f:35:2b:3a:38:a2:5e:98:80:85: 62:e9:8e:d5:af:ec:32:2b:ea:82:1a:21:3c:d9:6d: 20:9d:8f:86:69:89:0a:5d:a3:0f:0b:1c:6c:6e:d9: 78:a5:98:fa:82:ea:5f:6d:5f:4c:70:bc:6b:9e:8f: 59:25:8d:f4:30:9d:d4:22:ff:89:91:e9:3a:03:f3: 1c:c3:03:6e:ff:3b:57:7d:20:ea:b0:32:59:ac:94: 2d:d2:04:13:38:fb:7b:ee:7b:fc:3a:4c:63:4b:29: 8b:47:3c:8e:24:1e:25:aa:f2:be:02:62:8f:c0:ab: 06:ab:b3:6c:df:f3:d5:92:f9:ad:3a:92:4e:10:6f: 23:3f:99:f5:f4:a0:69:f0:4a:c1:3c:23:c3:19:6a: d2:62:4c:20:ed:fd:40:36:98:12:d3:1d:ef:ae:c3: 96:ad:63:6a:7f:6b:ce:a0:12:a5:21:da:18:be:22: e0:21:96:dd:26:0f:d9:ed:42:46:30:d1:6a:9e:64: ed:03:b4:47:b3:57:1e:cc:f7:3a:e5:34:3a:bf:d8: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:49:5C:78:3A:A2:98:11:4C:8E:3E:92:09:57:D2:3D:0F:FE:97:8B X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/j0lceDqimBFMjj6SCVfSPQ_-l4s.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.16.0/22 Signature Algorithm: sha256WithRSAEncryption 14:ba:5d:0c:cd:28:fb:b7:2b:b3:99:ea:74:0c:ac:28:cd:bc: 41:70:cc:43:8a:40:9a:2e:2c:6c:44:e6:92:96:02:8b:ba:7a: 2d:7c:2b:22:76:7c:a9:06:e3:27:43:86:f8:6a:94:83:59:3e: 39:04:e8:c8:1e:fe:fa:ba:ca:23:a3:b4:87:8a:7d:44:1c:13: 86:5e:7b:14:30:2d:82:c0:c1:44:7a:20:5a:25:8d:06:04:c6: 03:06:94:70:1c:22:b6:5f:a8:ad:48:82:8d:3b:8a:0b:fd:a9: 86:57:21:ae:b9:7f:c7:fa:34:df:94:4f:fe:26:93:bf:6a:71: 9a:a9:39:a3:20:05:a8:16:6e:b0:65:ff:ba:ef:67:36:5e:23: f2:6e:90:4e:ae:bd:2d:81:24:9a:a7:a8:99:aa:3f:72:a5:b3: 68:c6:52:c2:a5:2d:af:16:a2:ef:91:0d:ea:68:1f:25:28:09: eb:ae:c9:57:40:71:dc:13:9d:30:79:3c:e2:7c:94:a3:68:97: a1:e4:af:a0:4e:49:ee:85:86:55:f3:e6:4d:82:e2:fa:69:c9: ed:a6:7b:e7:e2:97:2c:da:fd:64:ab:96:a6:57:73:36:e9:18: e9:d7:55:95:42:58:68:c2:a9:39:e9:d4:be:44:f9:30:6a:1d: 9e:74:00:81 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhGNDk1Qzc4M0FBMjk4 MTE0QzhFM0U5MjA5NTdEMjNEMEZGRTk3OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGAbXC0deNurigoJim8MLAJ8eZ3gzyX3prr9ZVRKm4uMe+ZZHg tdad5S+4/UNATkr8HzUrOjiiXpiAhWLpjtWv7DIr6oIaITzZbSCdj4ZpiQpdow8L HGxu2XilmPqC6l9tX0xwvGuej1kljfQwndQi/4mR6ToD8xzDA27/O1d9IOqwMlms lC3SBBM4+3vue/w6TGNLKYtHPI4kHiWq8r4CYo/Aqwars2zf89WS+a06kk4QbyM/ mfX0oGnwSsE8I8MZatJiTCDt/UA2mBLTHe+uw5atY2p/a86gEqUh2hi+IuAhlt0m D9ntQkYw0WqeZO0DtEezVx7M9zrlNDq/2NgpAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUj0lceDqimBFMjj6SCVfSPQ/+l4swHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2owbGNlRHFpbUJGTWpq NlNDVmZTUFFfLWw0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/BAwDQYJKoZIhvcNAQELBQADggEBABS6XQzNKPu3K7OZ6nQMrCjNvEFwzEOK QJouLGxE5pKWAou6ei18KyJ2fKkG4ydDhvhqlINZPjkE6Mge/vq6yiOjtIeKfUQc E4ZeexQwLYLAwUR6IFoljQYExgMGlHAcIrZfqK1Igo07igv9qYZXIa65f8f6NN+U T/4mk79qcZqpOaMgBagWbrBl/7rvZzZeI/JukE6uvS2BJJqnqJmqP3Kls2jGUsKl La8Wou+RDepoHyUoCeuuyVdAcdwTnTB5POJ8lKNol6Hkr6BOSe6FhlXz5k2C4vpp ye2me+filyza/WSrlqZXczbpGOnXVZVCWGjCqTnp1L5E+TBqHZ50AIE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:39:52 2025 by rpki-client