$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa File: mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa (raw, json) Hash identifier: M/gdvDHnDrhqievFFLGf7QWDvV7SvnpgKtGqTQamE3A= Subject key identifier: 98:DB:05:90:A8:C7:CD:07:D8:3A:48:13:31:D6:BD:09:C6:7E:31:3E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18FE Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa Signing time: Fri 17 Jan 2025 01:25:54 +0000 ROA not before: Fri 17 Jan 2025 01:25:54 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 24373 IP address blocks: 45.252.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6398 (0x18fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:54 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=98DB0590A8C7CD07D83A481331D6BD09C67E313E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:58:6a:09:3b:81:95:41:ca:b7:db:69:2c: 68:b5:e9:de:de:27:31:73:03:16:ff:49:ba:6b:72: 58:0b:ae:95:70:e3:8f:90:50:45:85:c9:4c:ae:8e: fb:d8:4e:47:8b:28:a0:ed:21:f0:b8:42:49:1f:1a: b7:ea:bd:cb:51:1b:c2:a3:d7:27:f8:99:e9:3d:85: c1:f7:b7:2d:65:e8:6b:66:80:53:21:5b:0b:cd:cb: 3c:73:02:d3:58:e6:f7:a2:20:75:0f:0a:a7:cc:39: eb:d8:8a:20:9e:75:e6:8e:fb:70:e1:60:01:29:45: 30:50:9e:b8:0f:63:f1:d8:79:9b:21:f9:b3:93:6b: 34:30:3f:1e:8a:b7:3b:78:40:34:77:6f:f6:91:e6: bb:d8:6b:fe:89:f8:0e:90:de:04:ea:d0:32:61:13: db:ac:2a:d2:a1:ca:a2:e9:6a:fb:05:23:ad:2a:14: 76:03:07:8d:bb:06:6f:48:13:0b:1f:38:15:b7:6e: 63:52:b7:82:fc:45:3c:70:17:87:b6:4d:7a:85:38: fc:95:8d:b4:6c:09:ef:6c:fa:99:93:e8:ce:78:3a: 16:84:6a:ac:03:16:d7:ee:20:be:73:be:4f:cf:97: 6a:45:fd:bf:fa:f4:e8:7d:e1:55:5c:9f:f7:1f:fb: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DB:05:90:A8:C7:CD:07:D8:3A:48:13:31:D6:BD:09:C6:7E:31:3E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/mNsFkKjHzQfYOkgTMda9CcZ-MT4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:fe:e1:41:22:f7:e5:75:b1:79:d0:70:43:4d:c0:ab:80:1e: 9b:a0:74:0c:cd:3d:be:13:0b:2c:a8:4c:09:7a:9d:3c:7f:d1: 90:75:1a:ce:34:36:29:eb:2c:a1:bf:57:27:89:3f:f8:18:63: 1a:17:25:be:08:c9:30:a8:ab:f7:fb:c4:23:6e:86:5b:53:d8: 6a:06:8c:e3:be:fc:58:dc:65:5f:5d:9b:44:86:2e:b4:49:98: d4:92:96:1d:d0:ff:f1:5d:df:56:41:43:cd:18:bc:bc:b0:26: 03:18:dd:25:90:7e:d0:36:96:82:d0:ef:c9:20:5b:e8:57:22: 55:45:96:f6:b3:cd:d6:fb:50:3d:a9:3c:4d:46:36:f4:81:e7: 47:62:fc:3a:24:51:fa:35:7d:3f:6c:34:5f:ff:9e:2a:37:16: 9a:87:23:74:c6:a6:6e:aa:1b:52:f2:9a:3f:fb:5b:8c:c6:08: 9b:c4:04:bd:5d:ea:45:1e:06:07:f9:d3:6b:57:07:0a:ef:e9: 04:cd:c4:b0:86:b8:05:17:15:16:69:c9:66:c8:3a:f3:04:06: aa:af:7f:4f:bb:42:89:4e:0f:a7:41:eb:b8:5a:5c:e3:9e:2e: c9:9d:98:ea:0e:51:32:2d:4b:46:cd:0f:13:3d:d7:3d:01:02: 20:db:49:6e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk4REIwNTkwQThDN0NE MDdEODNBNDgxMzMxRDZCRDA5QzY3RTMxM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB1lhqCTuBlUHKt9tpLGi16d7eJzFzAxb/SbprclgLrpVw44+Q UEWFyUyujvvYTkeLKKDtIfC4QkkfGrfqvctRG8Kj1yf4mek9hcH3ty1l6GtmgFMh WwvNyzxzAtNY5veiIHUPCqfMOevYiiCedeaO+3DhYAEpRTBQnrgPY/HYeZsh+bOT azQwPx6Ktzt4QDR3b/aR5rvYa/6J+A6Q3gTq0DJhE9usKtKhyqLpavsFI60qFHYD B427Bm9IEwsfOBW3bmNSt4L8RTxwF4e2TXqFOPyVjbRsCe9s+pmT6M54OhaEaqwD FtfuIL5zvk/Pl2pF/b/69Oh94VVcn/cf+6rNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmNsFkKjHzQfYOkgTMda9CcZ+MT4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L21Oc0ZrS2pIelFmWU9r Z1RNZGE5Q2NaLU1UNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/CQwDQYJKoZIhvcNAQELBQADggEBAAr+4UEi9+V1sXnQcENNwKuAHpugdAzN Pb4TCyyoTAl6nTx/0ZB1Gs40NinrLKG/VyeJP/gYYxoXJb4IyTCoq/f7xCNuhltT 2GoGjOO+/FjcZV9dm0SGLrRJmNSSlh3Q//Fd31ZBQ80YvLywJgMY3SWQftA2loLQ 78kgW+hXIlVFlvazzdb7UD2pPE1GNvSB50di/DokUfo1fT9sNF//nio3FpqHI3TG pm6qG1Lymj/7W4zGCJvEBL1d6kUeBgf502tXBwrv6QTNxLCGuAUXFRZpyWbIOvME Bqqvf0+7QolOD6dB67haXOOeLsmdmOoOUTItS0bNDxM91z0BAiDbSW4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:24 2025 by rpki-client