$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa File: oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa (raw, json) Hash identifier: 1AXdpQ8ri3Yw7eXmMLapXlkjmgKBIuAQ7Bgx3cYZJxE= Subject key identifier: A0:F0:11:94:30:99:9E:DE:CC:06:E0:32:AD:8B:4C:6C:EE:C1:D0:4A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1727 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa Signing time: Fri 06 Dec 2024 04:48:52 +0000 ROA not before: Fri 06 Dec 2024 04:48:52 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 45.252.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5927 (0x1727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Dec 6 04:48:52 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A0F0119430999EDECC06E032AD8B4C6CEEC1D04A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:4b:40:0b:6b:ff:20:64:bb:31:57:64:1c: e5:2a:79:30:32:5d:fb:b4:44:86:15:36:0a:ff:74: 15:db:ec:26:89:c1:e8:13:27:88:0e:6b:d4:7f:5b: d8:c1:2f:53:91:3d:9a:d2:d2:97:6a:7e:b1:30:49: 5e:8b:da:58:de:c3:8c:a5:eb:ea:8f:35:dc:3b:c4: 60:8f:56:9a:ee:04:75:2b:e5:6a:af:40:30:c6:dd: c6:20:c7:78:31:62:93:24:8d:37:ca:b2:7d:55:cd: f8:43:6d:39:c8:7b:c7:dc:3f:a5:58:a3:d4:c4:d3: f5:36:25:fe:c9:82:e7:76:91:4b:f5:b5:21:cf:43: ad:e0:be:af:6a:70:44:8a:3c:59:76:4a:97:b6:7a: b6:f1:da:be:fb:d8:ca:99:c7:d2:61:88:12:c6:41: 5a:77:9f:a7:e3:c0:f9:14:e4:92:6e:2c:9c:d6:c5: 46:0a:bf:4e:73:0f:25:0d:9c:34:7d:01:77:f9:da: 6d:b9:e9:2d:68:b8:4a:83:5c:65:37:01:c6:e2:de: 70:41:c4:65:78:16:2f:18:c9:f9:c6:0e:b8:a7:90: ba:25:f4:1e:68:2a:8e:fc:cb:4e:61:df:b6:ef:b8: f2:e1:05:dd:f7:c1:88:8e:2c:e2:80:db:8c:e2:ac: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:11:94:30:99:9E:DE:CC:06:E0:32:AD:8B:4C:6C:EE:C1:D0:4A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oPARlDCZnt7MBuAyrYtMbO7B0Eo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.84.0/22 Signature Algorithm: sha256WithRSAEncryption 71:b9:f8:b5:50:c5:07:2d:68:25:db:f8:0a:81:82:ae:a5:fb: cc:f8:e1:33:d4:eb:7a:63:b0:79:fb:9a:bf:ed:2f:48:00:0c: 91:c7:ec:48:52:6f:93:6d:6b:5a:1d:f8:df:b0:5e:c3:3d:da: 04:48:78:7a:0a:d3:24:75:9e:f6:df:a2:8d:52:41:1a:29:6c: f7:a8:91:0b:ee:2d:83:33:9b:dc:b3:79:10:f9:9d:0d:51:21: f8:77:bf:c3:bb:92:0d:8f:2a:cc:ce:5e:67:90:40:d3:6b:17: 55:22:f2:ac:41:32:ae:ea:c6:17:65:09:8e:29:04:59:27:d7: f2:7a:46:14:33:09:81:84:6f:73:1e:9a:26:b4:2e:1c:02:ea: 78:d4:92:85:b2:2f:5c:da:b7:01:f8:81:cd:5c:1e:bb:31:0a: 1e:88:b8:24:a4:0c:53:a6:24:25:3f:46:a9:a0:e2:2e:d3:ec: dd:5c:7a:1d:4d:34:f6:43:79:dc:95:07:5b:b9:b5:2c:5a:09: ca:2f:8e:ff:2e:93:81:d1:c5:c6:40:cb:f9:e2:b0:7d:fc:5f: 07:88:c8:27:66:e5:46:f7:d3:ed:6a:3f:9f:d6:2c:65:54:ec: 35:3d:59:fa:06:bb:41:62:6a:11:49:b1:32:56:88:7f:b8:a2: 73:e2:ad:f6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDEyMDYw NDQ4NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEEwRjAxMTk0MzA5OTlF REVDQzA2RTAzMkFEOEI0QzZDRUVDMUQwNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8b0tAC2v/IGS7MVdkHOUqeTAyXfu0RIYVNgr/dBXb7CaJwegT J4gOa9R/W9jBL1ORPZrS0pdqfrEwSV6L2ljew4yl6+qPNdw7xGCPVpruBHUr5Wqv QDDG3cYgx3gxYpMkjTfKsn1VzfhDbTnIe8fcP6VYo9TE0/U2Jf7Jgud2kUv1tSHP Q63gvq9qcESKPFl2Spe2erbx2r772MqZx9JhiBLGQVp3n6fjwPkU5JJuLJzWxUYK v05zDyUNnDR9AXf52m256S1ouEqDXGU3Acbi3nBBxGV4Fi8YyfnGDrinkLol9B5o Ko78y05h37bvuPLhBd33wYiOLOKA24zirJdJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUoPARlDCZnt7MBuAyrYtMbO7B0EowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L29QQVJsRENabnQ3TUJ1 QXlyWXRNYk83QjBFby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIt/FQwDQYJKoZIhvcNAQELBQADggEBAHG5+LVQxQctaCXb+AqBgq6l+8z44TPU 63pjsHn7mr/tL0gADJHH7EhSb5Nta1od+N+wXsM92gRIeHoK0yR1nvbfoo1SQRop bPeokQvuLYMzm9yzeRD5nQ1RIfh3v8O7kg2PKszOXmeQQNNrF1Ui8qxBMq7qxhdl CY4pBFkn1/J6RhQzCYGEb3Memia0LhwC6njUkoWyL1zatwH4gc1cHrsxCh6IuCSk DFOmJCU/Rqmg4i7T7N1ceh1NNPZDedyVB1u5tSxaCcovjv8uk4HRxcZAy/nisH38 XweIyCdm5Ub30+1qP5/WLGVU7DU9WfoGu0FiahFJsTJWiH+4onPirfY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:15 2025 by rpki-client