$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nwsW2ATeY8tUz3_tumHqJ-W4I34.roa File: nwsW2ATeY8tUz3_tumHqJ-W4I34.roa (raw, json) Hash identifier: RBpY3lCg0Rx4XdUrQKBDTw5OaQI8UXP8rzElFvms9Jg= Subject key identifier: 9F:0B:16:D8:04:DE:63:CB:54:CF:7F:ED:BA:61:EA:27:E5:B8:23:7E Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18C9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nwsW2ATeY8tUz3_tumHqJ-W4I34.roa Signing time: Fri 17 Jan 2025 01:25:34 +0000 ROA not before: Fri 17 Jan 2025 01:25:34 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 138527 IP address blocks: 45.252.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6345 (0x18c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:34 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=9F0B16D804DE63CB54CF7FEDBA61EA27E5B8237E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:03:e2:0a:ba:e0:93:9a:4b:eb:c6:72:f9: c4:5d:55:04:46:aa:b0:89:1f:9b:1b:bc:0f:71:be: ec:b1:81:80:cd:1c:35:c9:2c:73:00:69:53:cd:4c: e0:28:2b:da:e2:6d:b5:4c:22:51:08:25:17:ef:45: fc:8b:e1:f9:34:a9:a4:a8:5d:ce:10:19:47:b8:5e: c7:9f:ee:2f:a8:29:52:60:c0:9a:01:1e:1d:4e:b5: 2b:79:92:36:f0:a5:83:e8:3a:c0:70:30:cd:46:93: 46:3f:1f:b0:d7:c0:ef:58:e9:60:ed:de:79:c7:98: 36:a1:2d:d3:eb:11:24:0e:7f:56:c5:4d:b7:21:01: a2:5e:00:dc:01:14:3e:f0:56:6d:2f:65:d4:94:ee: 87:08:20:87:2c:cc:31:eb:f7:a9:50:de:b2:01:e3: 8d:0f:15:79:56:d7:39:7c:37:13:f9:f6:9c:3c:f0: 1f:36:fa:fd:d5:d9:40:5b:bd:12:f5:e0:f4:69:29: 0c:49:e2:0b:b8:8a:3b:d6:53:91:ad:fb:ff:50:e3: 9d:cd:e1:dc:e1:44:7e:07:e7:0c:2f:ae:8c:70:34: f8:5e:ba:dd:21:a3:21:ad:61:19:2a:5d:72:6b:6a: e7:93:94:af:9f:1f:dd:b2:a4:92:26:e1:6f:ae:92: 4f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0B:16:D8:04:DE:63:CB:54:CF:7F:ED:BA:61:EA:27:E5:B8:23:7E X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nwsW2ATeY8tUz3_tumHqJ-W4I34.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.8.0/22 Signature Algorithm: sha256WithRSAEncryption bb:72:bb:3a:b5:91:3a:fa:93:26:37:8e:4b:b3:2a:87:80:cd: 08:9f:c4:e5:c6:83:07:15:cd:2a:51:8b:cb:97:71:08:28:a7: 23:f8:5a:f6:3f:66:cf:55:1d:f9:fd:bb:ba:d1:37:55:61:25: 57:0f:7c:fe:c0:da:39:d5:da:b1:9d:78:a4:f2:8b:97:65:54: 69:9b:9e:c5:b8:03:33:aa:9c:b2:43:d2:56:7d:4d:96:f0:7e: 26:62:e5:cb:4e:2d:de:fc:82:c0:cd:92:9d:f7:53:a3:6f:86: dd:e3:d5:0c:69:16:9b:5e:b8:dc:ae:08:ba:00:dc:ce:9b:da: 12:be:4b:58:d8:ed:c5:b6:67:fe:d8:2a:32:77:40:ca:c2:d7: 78:fa:45:c2:d2:98:bc:ed:08:f9:30:2a:40:69:42:6b:e7:1c: 82:95:7b:ae:8c:02:bd:e1:b1:9e:8c:65:d9:d9:10:aa:35:0e: aa:87:b9:85:f4:6f:82:a3:69:a1:fe:b0:1c:8c:03:44:a0:ee: 18:6b:52:6d:6a:c6:f4:9c:b4:d7:8c:5d:66:d2:73:61:c7:f7: 93:91:96:27:56:37:8e:6f:d6:d5:14:27:38:f1:da:f1:d2:93: 51:af:32:24:77:6e:31:ff:49:f3:e3:95:6c:19:89:81:bb:82: 6f:b2:31:14 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1MzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlGMEIxNkQ4MDRERTYz Q0I1NENGN0ZFREJBNjFFQTI3RTVCODIzN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY8APiCrrgk5pL68Zy+cRdVQRGqrCJH5sbvA9xvuyxgYDNHDXJ LHMAaVPNTOAoK9ribbVMIlEIJRfvRfyL4fk0qaSoXc4QGUe4Xsef7i+oKVJgwJoB Hh1OtSt5kjbwpYPoOsBwMM1Gk0Y/H7DXwO9Y6WDt3nnHmDahLdPrESQOf1bFTbch AaJeANwBFD7wVm0vZdSU7ocIIIcszDHr96lQ3rIB440PFXlW1zl8NxP59pw88B82 +v3V2UBbvRL14PRpKQxJ4gu4ijvWU5Gt+/9Q453N4dzhRH4H5wwvroxwNPheut0h oyGtYRkqXXJraueTlK+fH92ypJIm4W+ukk/bAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUnwsW2ATeY8tUz3/tumHqJ+W4I34wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L253c1cyQVRlWTh0VXoz X3R1bUhxSi1XNEkzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/AgwDQYJKoZIhvcNAQELBQADggEBALtyuzq1kTr6kyY3jkuzKoeAzQifxOXG gwcVzSpRi8uXcQgopyP4WvY/Zs9VHfn9u7rRN1VhJVcPfP7A2jnV2rGdeKTyi5dl VGmbnsW4AzOqnLJD0lZ9TZbwfiZi5ctOLd78gsDNkp33U6Nvht3j1QxpFpteuNyu CLoA3M6b2hK+S1jY7cW2Z/7YKjJ3QMrC13j6RcLSmLztCPkwKkBpQmvnHIKVe66M Ar3hsZ6MZdnZEKo1DqqHuYX0b4KjaaH+sByMA0Sg7hhrUm1qxvSctNeMXWbSc2HH 95ORlidWN45v1tUUJzjx2vHSk1GvMiR3bjH/SfPjlWwZiYG7gm+yMRQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:50 2025 by rpki-client