$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/kwaMABID7VZ3vhqUa6NN9HTB4IM.roa File: kwaMABID7VZ3vhqUa6NN9HTB4IM.roa (raw, json) Hash identifier: rpQP4YRanoobvWexfIEHGhwB/NQyi9B7w33c0ZabsrM= Subject key identifier: 93:06:8C:00:12:03:ED:56:77:BE:1A:94:6B:A3:4D:F4:74:C1:E0:83 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18B8 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kwaMABID7VZ3vhqUa6NN9HTB4IM.roa Signing time: Fri 17 Jan 2025 01:25:28 +0000 ROA not before: Fri 17 Jan 2025 01:25:28 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 59083 IP address blocks: 43.254.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6328 (0x18b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:28 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=93068C001203ED5677BE1A946BA34DF474C1E083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:f0:bc:63:f6:de:2f:02:a8:6d:5b:2a:ab: 8b:1d:95:24:9a:79:d5:a5:a4:51:5f:c0:af:fd:1e: 5a:09:88:30:67:41:e9:8d:92:2f:3b:f5:ff:ab:36: 40:cc:1f:6a:9d:ef:b4:cb:a7:e6:64:fe:33:16:38: 9b:8b:d9:26:40:86:4a:d0:ad:0a:eb:61:35:d3:43: d3:d7:ce:5a:e5:7c:a8:4f:82:4a:6e:81:e9:71:e8: 76:a7:4a:0d:ee:43:dc:49:3b:1e:33:53:1e:18:db: f5:22:55:bd:dd:3d:33:69:4e:ef:9a:e8:d7:ee:35: 15:2e:44:4d:30:5c:ca:04:e0:ed:79:d0:67:f9:f8: a1:62:ae:ae:a0:42:65:1a:6f:c9:9a:94:a4:ea:f1: fb:9c:b2:08:9e:a9:8b:59:2f:7e:63:fe:3a:a9:cb: 3a:3d:20:2a:14:d3:58:e1:80:9f:2a:7b:bb:30:ad: ed:25:00:0c:71:17:92:77:83:4c:d4:4a:83:3f:70: 10:8b:26:3c:9f:b4:8a:a5:d5:30:9d:9e:4b:93:10: 5d:84:85:ef:20:b4:aa:36:ca:f9:75:c0:df:f1:e6: 57:4a:8c:e5:8c:2f:5f:5e:fa:c4:9f:f4:52:9f:de: 8c:14:b9:85:58:8b:8a:65:8b:ba:0a:d7:7a:91:8d: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:06:8C:00:12:03:ED:56:77:BE:1A:94:6B:A3:4D:F4:74:C1:E0:83 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/kwaMABID7VZ3vhqUa6NN9HTB4IM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.153.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:a5:93:ff:a7:84:58:26:68:31:48:21:7a:d1:b9:70:d1:81: d8:45:53:b7:81:0f:e0:57:a2:22:24:79:02:f1:4b:28:38:ae: b4:55:a8:e0:39:d8:a2:d7:94:de:34:3c:c6:ba:eb:54:a2:e4: 8d:c2:9f:3f:12:e3:9b:c6:c6:23:a5:84:fe:30:9a:a5:0b:13: ee:ee:4b:4b:18:8b:5c:24:e2:68:18:0d:b4:35:64:e6:ea:b0: 5f:d3:e2:a9:71:39:9e:74:d5:0e:e4:67:06:30:f1:79:be:9c: 09:a8:72:88:05:28:d8:89:a9:90:9a:d4:df:f6:f2:0d:93:13: 90:05:2d:a2:5d:f6:2b:a2:b6:20:44:a1:80:08:d0:b9:e8:2f: 61:ba:61:84:22:1d:b6:b5:64:18:9c:9d:37:b8:bc:ee:f7:97: 0b:5f:95:02:67:ad:19:d7:a0:85:b5:08:7f:6d:64:8d:97:dd: 01:19:ed:73:e3:3e:69:ef:e7:85:54:4c:7b:c1:01:fc:6e:97: b8:fc:6d:bd:58:9b:ac:e0:84:58:e1:e4:fb:da:bf:a9:3f:62: 87:41:68:fd:19:db:20:84:9c:88:a5:0e:de:64:b9:35:18:d5: e6:a3:47:73:60:cd:39:fe:98:5a:9f:05:73:9f:cd:8f:fa:8b: d1:5e:2f:71 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkzMDY4QzAwMTIwM0VE NTY3N0JFMUE5NDZCQTM0REY0NzRDMUUwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPyvC8Y/beLwKobVsqq4sdlSSaedWlpFFfwK/9HloJiDBnQemN ki879f+rNkDMH2qd77TLp+Zk/jMWOJuL2SZAhkrQrQrrYTXTQ9PXzlrlfKhPgkpu gelx6HanSg3uQ9xJOx4zUx4Y2/UiVb3dPTNpTu+a6NfuNRUuRE0wXMoE4O150Gf5 +KFirq6gQmUab8malKTq8fucsgieqYtZL35j/jqpyzo9ICoU01jhgJ8qe7swre0l AAxxF5J3g0zUSoM/cBCLJjyftIql1TCdnkuTEF2Ehe8gtKo2yvl1wN/x5ldKjOWM L19e+sSf9FKf3owUuYVYi4pli7oK13qRjecfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUkwaMABID7VZ3vhqUa6NN9HTB4IMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2t3YU1BQklEN1ZaM3Zo cVVhNk5OOUhUQjRJTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr/pkwDQYJKoZIhvcNAQELBQADggEBAA6lk/+nhFgmaDFIIXrRuXDRgdhFU7eB D+BXoiIkeQLxSyg4rrRVqOA52KLXlN40PMa661Si5I3Cnz8S45vGxiOlhP4wmqUL E+7uS0sYi1wk4mgYDbQ1ZObqsF/T4qlxOZ501Q7kZwYw8Xm+nAmocogFKNiJqZCa 1N/28g2TE5AFLaJd9iuitiBEoYAI0LnoL2G6YYQiHba1ZBicnTe4vO73lwtflQJn rRnXoIW1CH9tZI2X3QEZ7XPjPmnv54VUTHvBAfxul7j8bb1Ym6zghFjh5Pvav6k/ YodBaP0Z2yCEnIilDt5kuTUY1eajR3NgzTn+mFqfBXOfzY/6i9FeL3E= -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:57 2025 by rpki-client