$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/oXvvSxay7RKOjsgE0r4ojw_tVao.roa File: oXvvSxay7RKOjsgE0r4ojw_tVao.roa (raw, json) Hash identifier: Wfl/EC+DNVx6cHnF7OOWkafcHYCUx6SBDqKdZRdszaM= Subject key identifier: A1:7B:EF:4B:16:B2:ED:12:8E:8E:C8:04:D2:BE:28:8F:0F:ED:55:AA Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 18F4 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oXvvSxay7RKOjsgE0r4ojw_tVao.roa Signing time: Fri 17 Jan 2025 01:25:52 +0000 ROA not before: Fri 17 Jan 2025 01:25:52 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 13444 IP address blocks: 45.252.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6388 (0x18f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jan 17 01:25:52 2025 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=A17BEF4B16B2ED128E8EC804D2BE288F0FED55AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:13:b4:4b:b6:59:70:03:12:ff:7a:7c:b0: 2a:78:56:59:20:9e:a7:b3:65:df:db:9b:a4:c4:1e: a9:cb:1b:6c:59:e6:75:a1:85:0f:67:52:3b:a7:68: 7b:76:2e:16:29:7e:0f:1f:24:f5:80:55:55:00:1c: ec:bc:4a:85:0f:95:bd:e2:62:aa:c0:e8:fa:58:11: f0:5f:f9:42:17:73:55:5d:ab:32:9d:5f:1d:05:b3: 5e:cb:58:fb:58:06:c1:75:77:ba:76:06:8b:b9:25: 18:36:35:35:26:b6:b8:06:95:c7:a8:6d:32:bb:60: a3:74:7f:6c:dd:a4:dc:61:84:7d:e5:d6:97:49:60: ee:6c:51:65:56:e3:9d:b2:85:b9:06:2b:e9:24:47: 2f:8d:55:6e:93:45:53:94:ba:f6:92:f6:dc:82:9f: 4a:75:12:9a:42:8e:67:df:c9:91:c2:d5:c7:26:66: d6:d9:15:ed:aa:b1:ff:38:89:04:ed:3a:e2:16:61: 50:fc:7c:8b:65:fb:18:69:10:95:97:d7:24:ba:c9: 97:7b:7c:fa:a7:51:43:70:7c:0b:4f:3c:2e:d3:76: 72:f0:01:ab:a0:ac:9f:d2:d3:e7:b3:0a:5f:23:7e: 2b:c0:5f:54:00:fb:56:b5:54:64:50:ff:86:86:4d: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:EF:4B:16:B2:ED:12:8E:8E:C8:04:D2:BE:28:8F:0F:ED:55:AA X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/oXvvSxay7RKOjsgE0r4ojw_tVao.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.252.100.0/24 Signature Algorithm: sha256WithRSAEncryption 37:59:6b:c3:0a:aa:57:73:12:9c:68:ec:27:42:73:f6:64:94: 66:48:20:38:85:b8:a7:d7:84:5d:3a:14:b5:d0:d1:71:dc:4a: 49:63:de:3b:b4:a3:1d:4e:f9:34:4b:db:cd:9b:ff:81:a6:84: 64:22:57:0d:fd:ea:fc:27:28:96:a9:b3:66:a8:9c:6b:0a:59: c2:1c:ce:3a:81:62:a9:55:d2:21:45:ee:c3:8a:41:0d:8d:b0: ce:47:97:4f:b4:f4:eb:58:6f:ad:51:2d:f0:59:fd:58:84:3c: a6:6e:a8:cd:60:b5:50:91:73:6a:8d:56:3e:ff:3c:02:2e:22: b9:0e:65:d0:92:36:e6:03:a1:36:cf:61:10:0d:84:24:6f:36: 9f:97:19:83:94:00:13:2d:a9:a8:a4:56:29:06:ad:49:ac:e2: 7c:7a:06:29:25:44:5e:9e:b8:d6:a8:90:1c:a4:6f:a1:2a:98: 0d:6b:c3:7d:7a:3d:16:58:dd:58:1a:58:ae:df:d5:24:f0:17: 96:c5:4a:ef:80:8e:bb:9d:6b:a8:1b:00:0d:1b:73:8a:d0:e9: 1f:1a:ba:7b:61:bd:e2:80:ad:8c:7e:5b:d7:3a:13:47:da:31: d9:f5:31:d6:e0:a1:3b:d6:83:6c:10:78:55:71:4a:79:c3:2f: ad:98:33:1e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICGPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw MTI1NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEExN0JFRjRCMTZCMkVE MTI4RThFQzgwNEQyQkUyODhGMEZFRDU1QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDExO0S7ZZcAMS/3p8sCp4VlkgnqezZd/bm6TEHqnLG2xZ5nWh hQ9nUjunaHt2LhYpfg8fJPWAVVUAHOy8SoUPlb3iYqrA6PpYEfBf+UIXc1VdqzKd Xx0Fs17LWPtYBsF1d7p2Bou5JRg2NTUmtrgGlceobTK7YKN0f2zdpNxhhH3l1pdJ YO5sUWVW452yhbkGK+kkRy+NVW6TRVOUuvaS9tyCn0p1EppCjmffyZHC1ccmZtbZ Fe2qsf84iQTtOuIWYVD8fItl+xhpEJWX1yS6yZd7fPqnUUNwfAtPPC7TdnLwAaug rJ/S0+ezCl8jfivAX1QA+1a1VGRQ/4aGTduBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUoXvvSxay7RKOjsgE0r4ojw/tVaowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L29YdnZTeGF5N1JLT2pz Z0UwcjRvandfdFZhby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAt/GQwDQYJKoZIhvcNAQELBQADggEBADdZa8MKqldzEpxo7CdCc/ZklGZIIDiF uKfXhF06FLXQ0XHcSklj3ju0ox1O+TRL282b/4GmhGQiVw396vwnKJaps2aonGsK WcIczjqBYqlV0iFF7sOKQQ2NsM5Hl0+09OtYb61RLfBZ/ViEPKZuqM1gtVCRc2qN Vj7/PAIuIrkOZdCSNuYDoTbPYRANhCRvNp+XGYOUABMtqaikVikGrUms4nx6Bikl RF6euNaokBykb6EqmA1rw316PRZY3VgaWK7f1STwF5bFSu+Ajruda6gbAA0bc4rQ 6R8aunthveKArYx+W9c6E0faMdn1MdbgoTvWg2wQeFVxSnnDL62YMx4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:17 2025 by rpki-client